ploen-pos[.]apk | Triage™

General

Target
ploen-pos.apk
Size 3.1MB
Sample260916-xygetsda55
SHA256 40318cd90e0f7c225402747408cc5265b8c4a1b6bb7ba7f213ba115f72640972
MD5 dbc8e1815c9dc722eac23c7790e235f1
SHA1 828ba666edca1f3728f59ec3a2699b0fc5db9cec
SHA512 dae1e32e1a8d674114655801e8cb0e0d5a338dd9e4b04dd7f9c940e1f8285f43d66d89d01d45f034bf24c881edb60b6c82c3ab525b82b20f43c3e263e0b3b3f2
SSDEEP 49152:re9vB7+/d2fXopk07ZVMLwu2CVEKaP8fKIeRWMGqJCDL2tcfLyeAOrHKZJgPK/bx:057+/d2GoLwL/IsADL2Gme9rHSx/w05
TLSH
T1F7E51282FBE52D2ECCB745320F9B267156129E13C683D74B8A98763C5C3B6C48F55AC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ploen-pos.apk

File Explorer

ploen-pos.apk

.apk 3.1MB

ploen-pos.apk

SHA256 40318cd90e0f7c225402747408cc5265b8c4a1b6bb7ba7f213ba115f72640972
MD5 dbc8e1815c9dc722eac23c7790e235f1
SHA1 828ba666edca1f3728f59ec3a2699b0fc5db9cec
SHA512 dae1e32e1a8d674114655801e8cb0e0d5a338dd9e4b04dd7f9c940e1f8285f43d66d89d01d45f034bf24c881edb60b6c82c3ab525b82b20f43c3e263e0b3b3f2
SSDEEP 49152:re9vB7+/d2fXopk07ZVMLwu2CVEKaP8fKIeRWMGqJCDL2tcfLyeAOrHKZJgPK/bx:057+/d2GoLwL/IsADL2Gme9rHSx/w05
TLSH
T1F7E51282FBE52D2ECCB745320F9B267156129E13C683D74B8A98763C5C3B6C48F55AC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

33dd601d2a720609ee78d08473b5c2344f2ba9a47e6dea8e4ede46bf88cd8085

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Baze POS,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=th

com.baze.pos

Android Permissions

ploen-pos.apk

Permissions

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.baze.pos.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

ploen-pos.apk

File Signature issue

com.baze.pos.MainActivity

com.capacitorjs.plugins.localnotifications.TimedNotificationPublisher

com.capacitorjs.plugins.localnotifications.NotificationDismissReceiver

com.capacitorjs.plugins.localnotifications.LocalNotificationRestoreReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

ploen-pos.apk

File Signature issue

com.baze.pos.MainActivity

com.capacitorjs.plugins.localnotifications.TimedNotificationPublisher

com.capacitorjs.plugins.localnotifications.NotificationDismissReceiver

com.capacitorjs.plugins.localnotifications.LocalNotificationRestoreReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

ploen-pos.apk