UCO BANK E-KYC UPDATE ONLINE PROM[.]apk

Target
UCO BANK E-KYC UPDATE ONLINE PROM.apk
Size 11.4MB
Sample260922-lscc5sdb97
SHA256 f32972e9dc501a1970ac62a77b2f5f29aced92196e25fea7e36248198e6874f9
MD5 6f14792ea02e143ff2c6472eb003679a
SHA1 a23f18b342f38e8475dcbafe31d9bce8827d2340
SHA512 cb8fe6b922c20edf6484b32029dff9e5e07143f55575904902b4be238eb133e0cfc6b4c13d763fa3892450aa775f88b9106394bf6c61168fcdf658fe1fe891ec
SSDEEP 196608:76or5G7Ja9bfaVV22uAcPGTPnCtONGkGHMDvhoSUTc8KtVOE0aGz/qfVbYT/aVt2:7zG7Ja9WVV2Zk62YeTUQRtVLoz/qfhGH
TLSH
T1D7C63357CB885D72EF035FB4B2C45995A9274ACF824B478D17766F26E40E880BBE3C21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
UCO BANK E-KYC UPDATE ONLINE PROM.apk

SHA256 f32972e9dc501a1970ac62a77b2f5f29aced92196e25fea7e36248198e6874f9
MD5 6f14792ea02e143ff2c6472eb003679a
SHA1 a23f18b342f38e8475dcbafe31d9bce8827d2340
SHA512 cb8fe6b922c20edf6484b32029dff9e5e07143f55575904902b4be238eb133e0cfc6b4c13d763fa3892450aa775f88b9106394bf6c61168fcdf658fe1fe891ec
SSDEEP 196608:76or5G7Ja9bfaVV22uAcPGTPnCtONGkGHMDvhoSUTc8KtVOE0aGz/qfVbYT/aVt2:7zG7Ja9WVV2Zk62YeTUQRtVLoz/qfhGH
TLSH
T1D7C63357CB885D72EF035FB4B2C45995A9274ACF824B478D17766F26E40E880BBE3C21
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

02df4a54ea0e4d1f51fc7039891c7944a49742d70fa00580e81cf62ca8924b32

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Vida Remote,OU=Vida,O=Vida,L=Sao Paulo,ST=SP,C=BR

jpdwth.lankjgu

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.USE_EXACT_ALARM

android.permission.SCHEDULE_EXACT_ALARM