PinGo[.]apk | Triage™

General

Target
PinGo.apk
Size 17.8MB
Sample261017-atwydscd39
SHA256 05eb52a5c097115f7806446e09e94952563cd38ecbaa896344a45613d2a54995
MD5 9c59d9ebfe4ce58ad41cda21b4871b52
SHA1 d890c4609bf4334489d7a8c6fa89a96056816f4c
SHA512 00e809f838351214e5d108498377105007ab92c6b2300f3c5eef47bac46974e8362cf1a034fe51527f43c98636a841e341114a0e351f82744998f73ea399f5e0
SSDEEP 393216:hBBvrHTCf8X+l/CIyXgEh6Up5C4kQTkyiv:h7vrzC1adQO5OQ4Hv
TLSH
T1F317014DF70C9D3BC8F3217AD84E0261722B5D598BD1978B680476287EBB6D50F2ABC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Required to be able to access the camera device.	android.permission.CAMERA

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
PinGo.apk

File Explorer

PinGo.apk

.apk 17.8MB

PinGo.apk

SHA256 05eb52a5c097115f7806446e09e94952563cd38ecbaa896344a45613d2a54995
MD5 9c59d9ebfe4ce58ad41cda21b4871b52
SHA1 d890c4609bf4334489d7a8c6fa89a96056816f4c
SHA512 00e809f838351214e5d108498377105007ab92c6b2300f3c5eef47bac46974e8362cf1a034fe51527f43c98636a841e341114a0e351f82744998f73ea399f5e0
SSDEEP 393216:hBBvrHTCf8X+l/CIyXgEh6Up5C4kQTkyiv:h7vrzC1adQO5OQ4Hv
TLSH
T1F317014DF70C9D3BC8F3217AD84E0261722B5D598BD1978B680476287EBB6D50F2ABC4
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b5c64ed348cc39904e87bde9e7d0c6e6c101745d783d6c9aa7c770c68bf3e67c

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=louis,OU=insight,O=insight,L=id,ST=id,C=id

com.insight.pingo

Android Permissions

PinGo.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.CAMERA

com.google.android.gms.permission.AD_ID

com.insight.pingo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

PinGo.apk

File Signature issue

com.insight.pingo.MainActivity

com.pingo.user.activity.LoginActivity

com.pingo.user.activity.MasukActivity

com.pingo.user.activity.SettingsActivity

com.pingo.user.activity.FaqActivity

com.pingo.loan.activity.LoanHistoryActivity

com.pingo.loan.activity.CouponActivity

com.pingo.loan.activity.DisbursementAccountActivity

com.pingo.loan.activity.PayFullActivity

com.pingo.loan.activity.RecipientAccountActivity

com.pingo.verification.activity.FacialRecognitionActivity

com.pingo.verification.activity.KtpPhotoActivity

com.pingo.verification.activity.KtpCameraActivity

com.pingo.common.activity.WebActivity

com.trustdecision.liveness.cw.api.ui.TDLivenessReadyActivity

com.trustdecision.liveness.cw.st.module.TDLivenessActivity

com.trustdecision.liveness.cw.st.module.ResultActivity

androidx.camera.core.impl.MetadataHolderService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

androidx.core.content.FileProvider

me.jessyan.autosize.InitProvider

Sharing

General

Malware Config

Signatures

File Explorer

PinGo.apk

File Signature issue

com.insight.pingo.MainActivity

com.pingo.user.activity.LoginActivity

com.pingo.user.activity.MasukActivity

com.pingo.user.activity.SettingsActivity

com.pingo.user.activity.FaqActivity

com.pingo.loan.activity.LoanHistoryActivity

com.pingo.loan.activity.CouponActivity

com.pingo.loan.activity.DisbursementAccountActivity

com.pingo.loan.activity.PayFullActivity

com.pingo.loan.activity.RecipientAccountActivity

com.pingo.verification.activity.FacialRecognitionActivity

com.pingo.verification.activity.KtpPhotoActivity

com.pingo.verification.activity.KtpCameraActivity

com.pingo.common.activity.WebActivity

com.trustdecision.liveness.cw.api.ui.TDLivenessReadyActivity

com.trustdecision.liveness.cw.st.module.TDLivenessActivity

com.trustdecision.liveness.cw.st.module.ResultActivity

androidx.camera.core.impl.MetadataHolderService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

androidx.core.content.FileProvider

me.jessyan.autosize.InitProvider

Android Permissions

PinGo.apk