Threat level
Analyzed on 2021-09-29T06:06:55.813093
| MD5 | 8ae65e155ae1369babaae680dda2f1db | |
| SHA1 | 7db4c90b433ef4a6ab7dc1b4095e80bb48152f89 | |
| SHA256 | 40f10caf204c62fa9539374e57b2a4dacc8da0ef9712ee164359390d1f5ce331 | |
| Size |
Information computed with APKiD.
| /tmp/tmp9vitziwl!classes.dex | |
| anti_vm |
|
| obfuscator |
|
| compiler |
|
| /tmp/tmp9vitziwl!classes2.dex | |
| anti_vm |
|
| obfuscator |
|
| compiler |
|
| /tmp/tmp9vitziwl!classes3.dex | |
| anti_disassembly |
|
| anti_vm |
|
| protector |
|
| compiler |
|
| /tmp/tmp9vitziwl!classes4.dex | |
| anti_disassembly |
|
| anti_vm |
|
| compiler |
|
| /tmp/tmp9vitziwl!classes5.dex | |
| anti_disassembly |
|
| anti_vm |
|
| compiler |
|
| /tmp/tmp9vitziwl!classes6.dex | |
| anti_vm |
|
| compiler |
|
| /tmp/tmp9vitziwl!lib/armeabi/libCPS.so | |
| obfuscator |
|
| /tmp/tmp9vitziwl!lib/armeabi/libdxbasc.so | |
| dropper, packer |
|
| /tmp/tmp9vitziwl!lib/armeabi/libdxbase.so | |
| dropper, packer |
|
| /tmp/tmp9vitziwl!lib/armeabi/libscp-cryptoengine.so | |
| protector |
|
Information computed with ssdeep.
| APK file | 786432:GzNsNZObsE8aDUNV7+b8nDZb7wvpZqQdFKDiwRvB/3kYox27uUN92WkHLRXqE1+M:GzezOz0ChxQQdoFBB7w | |
| Manifest | 3072:0wSUHULy1UeB3HioKvaNeLSo0KExegutk8XPx+BBD3:0Rqo0K3XP27 | |
| classes.dex | 98304:1XBRc/AK62IYSVVa8Rxw0lkbJ2a84EDkugKc:tX7Rxw0lkbJZacKc | |
| classes2.dex | 98304:rcsNHgjFFpZxLyXGNEq5tZUydTkH2G5BuKiWxchWmXDSBXoiCNWGPVMqeF9DXU1… | |
| classes3.dex | 98304:GA5ung+iTcr+DPJqbANGRtZUydq3wQZ2jM6:GSunKrfZB6 | |
| classes4.dex | 98304:1aqzlnSdKLCYC83Okx2G5BuKiWxchvmaDIbXo+NmGHMouFyA4v9vj0Vriup:4qz… | |
| classes5.dex | 98304:tWwdC/CByvrOEM4CjWNSULBnidcVmvqghZW+RM:owdmCcrOEOjWNSULBnidmS6 | |
| classes6.dex | 49152:MVOlHO74goGALsWVzACPNmdQWH58UVNayEVaShH4b57+KSQM9:UOlHOUnDgB5pN… |
Information computed with Dexofuzzy.
Information computed with AndroGuard and Pithus.
| Package | com.samsung.android.spay | |
| App name | Samsung Pay | |
| Version name | 3.9.05 | |
| Version code | 390500110 | |
| SDK | 26 - 29 | |
| UAID | 9e9188774d9e368c031611f468888a28aa9d286d | |
| Signature | Signature V1 | |
| Frosting | Not frosted |
Information computed with AndroGuard.
Information computed with AndroGuard.
|
Information computed with AndroGuard.
|
Information computed with AndroGuard.
|
Information computed with AndroGuard.
|
Information computed with Exodus-core.
| Google AdMob | https://reports.exodus-privacy.eu.org/fr/trackers/312 |
| Google Analytics | https://reports.exodus-privacy.eu.org/fr/trackers/48 |
| Google Firebase Analytics | https://reports.exodus-privacy.eu.org/fr/trackers/49 |
| Google Tag Manager | https://reports.exodus-privacy.eu.org/fr/trackers/105 |
Information computed with Quark-Engine.
| Confidence:
|
Write HTTP input stream into a file |
| Confidence:
|
Start another application from current application |
| Confidence:
|
Load external class |
| Confidence:
|
Query the current data network type |
| Confidence:
|
Implicit intent(view a web page, make a phone call, etc.) |
| Confidence:
|
Get absolute path of file and put it to JSON object |
| Confidence:
|
Find a method from given class name, usually for reflection |
| Confidence:
|
Connect to a URL and receive input stream from the server |
| Confidence:
|
Method reflection |
| Confidence:
|
Install other APKs from file |
| Confidence:
|
Get the network operator name |
| Confidence:
|
Connect to a URL and read data from it |
| Confidence:
|
Load class from given class name |
| Confidence:
|
Retrieve data from broadcast |
| Confidence:
|
Read sensitive data(SMS, CALLLOG, etc) |
| Confidence:
|
Open a file from given absolute path of the file |
| Confidence:
|
Put data in cursor to JSON object |
| Confidence:
|
Implicit intent(view a web page, make a phone call, etc.) via setData |
| Confidence:
|
Connect to a URL and get the response code |
| Confidence:
|
Monitor the broadcast action events (BOOT_COMPLETED, etc) |
| Confidence:
|
Send notification |
| Confidence:
|
Monitor the broadcast action events (BOOT_COMPLETED) |
| Confidence:
|
Get Location of the device and append this info to a string |
| Confidence:
|
Get absolute path of the file and store in string |
| Confidence:
|
Query The ISO country code |
| Confidence:
|
Get last known location of the device |
| Confidence:
|
Get calendar information |
| Confidence:
|
Get the current WIFI information |
| Confidence:
|
Query the ICCID number |
| Confidence:
|
Deletes media specified by a content URI(SMS, CALL_LOG, File, etc.) |
| Confidence:
|
Get location of the device |
| Confidence:
|
Query the IMEI number |
| Confidence:
|
Check if the given file path exist |
| Confidence:
|
Method reflection |
| Confidence:
|
Hide the current app's icon |
| Confidence:
|
Connect to the remote server through the given URL |
| Confidence:
|
Query WiFi information and WiFi Mac Address |
| Confidence:
|
Query data from URI (SMS, CALLLOGS) |
| Confidence:
|
Get the current WiFi IP address |
| Confidence:
|
Query the phone number |
| Confidence:
|
Get the time of current location |
| Confidence:
|
Initialize class object dynamically |
| Confidence:
|
Read the input stream from given URL |
| Confidence:
|
Get the current WiFi MAC address |
| Confidence:
|
Check the list of currently running applications |
| Confidence:
|
Connect to a URL and set request method |
| Confidence:
|
Get specific method from other Dex files |
| Confidence:
|
Read data and put it into a buffer stream |
| Confidence:
|
Get location info of the device and put it to JSON object |
| Confidence:
|
Read file and put it into a stream |
| Confidence:
|
Read sensitive data(SMS, CALLLOG) and put it into JSON object |
| Confidence:
|
Query the SIM card status |
| Confidence:
|
Return dynamic information about the current Wi-Fi connection |
| Confidence:
|
Get the date of the calendar event |
| Confidence:
|
Put buffer stream (data) to JSON object |
| Confidence:
|
Read file into a stream and put it into a JSON object |
| Confidence:
|
Executes the specified string Linux command |
| Confidence:
|
Get resource file from res/raw directory |