Resubmissions

17/03/2025, 14:31

250317-rv5qcsssds 10

17/03/2025, 14:16

250317-rlb2pavnv9 10

10/03/2025, 13:45

250310-q2jk2axjv8 10

General

  • Target

    com.medoc.cashalot.ingenico_20.061.SIGNED.apk

  • Size

    45.7MB

  • MD5

    e3a1698be1ae81363c60fabff79f97a5

  • SHA1

    64a40648e65073c307f523248ca648ccaa0334d8

  • SHA256

    d77037b6f396444fb94c9712e86b50e43108c23b8b947d7c8d9a71dd49e4cd68

  • SHA512

    05d08ae4a999d874bbdd450c6d5b014b103da8f1f6c58121da5b55155ba3facbf35db888f19b3e75ecd6732e97a7caf0986a339af93e2ae55afc9abdb9322455

  • SSDEEP

    786432:N1v3lgT/4SJfYI9drIh77OUs9NOjhtgHNBcfHV+R7OU6v:v36TqIkXOU2NOltPmOUE

Score
10/10

Malware Config

Signatures

  • Android Xamalicious payload 1 IoCs
  • Xamalicious family
  • Requests dangerous framework permissions 6 IoCs

Files

  • com.medoc.cashalot.ingenico_20.061.SIGNED.apk
    .apk android arch:arm

    com.medoc.cashalot.ingenico

    crc641fd559231e56697d.MainActivity


Android Permissions

com.medoc.cashalot.ingenico_20.061.SIGNED.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.PRIVATE_EXTERNAL_STORAGE

android.permission.PUBLIC_EXTERNAL_STORAGE

android.permission.BLUETOOTH_PRIVILEGED

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.ingenico.payment.permission.MAKE_PAYMENT

com.ingenico.payment.permission.UPDATE_PAYMENT

com.ingenico.batch.permission.CLOSE_BATCH

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

com.medoc.cashalot.ingenico.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET