pocket_option-release[.]apk

General

Target
pocket_option-release.apk
Size 5.7MB
Sample261002-pmfedswves
SHA256 e6d57d4e79182dc9ea9dca4ad2d33bf2c4bb2155c5bf866658271155d60c9123
MD5 79335fd55c62765431ade182cf56b06a
SHA1 015e2f782d7b114482ec25dcb47c924493dc6344
SHA512 7073063bb11296ef035b7f233719f73b83acdb202511b37f5e1fb5ad30960415a5e81931b340ee2c5ce65e7e08ab1ce6c19ef375068bd8b20dcf838a41a55c37
SSDEEP 98304:orsygeQrGngl7Zdoa5JZDj6a4iV78oQwpZ8Vs8IJpokWF++l23qY2N1wDrKdAjej:PRek0gtZma5Oa/V4oQwpZ8Vs/o++cbKp
TLSH
T18A56F186F7585B2EC87650734DDA2635229A4D678F82DB877844372C38B36F80F49BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
pocket_option-release.apk

File Explorer

pocket_option-release.apk

.apk 5.7MB

pocket_option-release.apk

SHA256 e6d57d4e79182dc9ea9dca4ad2d33bf2c4bb2155c5bf866658271155d60c9123
MD5 79335fd55c62765431ade182cf56b06a
SHA1 015e2f782d7b114482ec25dcb47c924493dc6344
SHA512 7073063bb11296ef035b7f233719f73b83acdb202511b37f5e1fb5ad30960415a5e81931b340ee2c5ce65e7e08ab1ce6c19ef375068bd8b20dcf838a41a55c37
SSDEEP 98304:orsygeQrGngl7Zdoa5JZDj6a4iV78oQwpZ8Vs8IJpokWF++l23qY2N1wDrKdAjej:PRek0gtZma5Oa/V4oQwpZ8Vs/o++cbKp
TLSH
T18A56F186F7585B2EC87650734DDA2635229A4D678F82DB877844372C38B36F80F49BD8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2d13b7d9f903410eab1137c3d362a07903676874fd9d29db45627aeaceebb02f

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

L=ru

com.pocketoption.broker.apk

Android Permissions

pocket_option-release.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

com.google.android.gms.permission.AD_ID

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SCHEDULE_EXACT_ALARM

com.android.alarm.permission.SET_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE

android.permission.ACCESS_ADSERVICES_TOPICS

com.pocketoption.broker.apk.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.CHECK_LICENSE

pocket_option-release.apk

File Signature issue

com.potradeweb.activities.MainActivity

com.potradeweb.activities.WebViewActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

com.facebook.CustomTabMainActivity

io.customer.messagingpush.activity.NotificationClickReceiverActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.potradeweb.services.NotificationFirebaseMsgService

com.potradeweb.services.AuthenticatorService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.components.ComponentDiscoveryService

io.customer.messagingpush.CustomerIOFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.potradeweb.reminders.LoginReminderBroadcastReceiver

io.customer.messagingpush.CustomerIOCloudMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

pocket_option-release.apk

File Signature issue

com.potradeweb.activities.MainActivity

com.potradeweb.activities.WebViewActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

com.facebook.CustomTabMainActivity

io.customer.messagingpush.activity.NotificationClickReceiverActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.potradeweb.services.NotificationFirebaseMsgService

com.potradeweb.services.AuthenticatorService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.components.ComponentDiscoveryService

io.customer.messagingpush.CustomerIOFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.potradeweb.reminders.LoginReminderBroadcastReceiver

io.customer.messagingpush.CustomerIOCloudMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

androidx.startup.InitializationProvider

Android Permissions

pocket_option-release.apk