Resubmissions

04/03/2025, 13:26

250304-qpqhtasjv4 10

General

  • Target

    com.medoc.cashalot.ingenico_20.060.SIGNED.apk

  • Size

    45.7MB

  • MD5

    d86d79f352444710db0b32a336003dbe

  • SHA1

    4284b6abfe378a2752b44e13971646010c7a0951

  • SHA256

    baa7f15107fca36783331be6b7845027f20d48db336536ddf1a857adc6caae94

  • SHA512

    449a4fc021050fca078a22d3c581f1f9584f324b44f8edbc9e7d96589a0824e8fe3da05110a262e9e84ff2794e3bea7bf4d47b37eb2dfa1e332e5f687a80cf5c

  • SSDEEP

    786432:N1vwlgT/4SJfLgxHRGIh77OUs9NOKttgHNBthV+q7OU6F:vw6TexHXXOU2NOGtO/OUG

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 1 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 6 IoCs

Files

  • com.medoc.cashalot.ingenico_20.060.SIGNED.apk
    .apk android arch:arm

    com.medoc.cashalot.ingenico

    crc641fd559231e56697d.MainActivity


Android Permissions

com.medoc.cashalot.ingenico_20.060.SIGNED.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.PRIVATE_EXTERNAL_STORAGE

android.permission.PUBLIC_EXTERNAL_STORAGE

android.permission.BLUETOOTH_PRIVILEGED

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.ingenico.payment.permission.MAKE_PAYMENT

com.ingenico.payment.permission.UPDATE_PAYMENT

com.ingenico.batch.permission.CLOSE_BATCH

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

com.medoc.cashalot.ingenico.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET