General

  • Target

    termux-app_v0.118.0+github-debug_universal.apk

  • Size

    100.7MB

  • Sample

    230203-e8bm8aeb6t

  • MD5

    d06809d8d153615ce8af3cd35e434192

  • SHA1

    d3cf966566e76f458ae4a100560dde8e935ff3a1

  • SHA256

    3141295849db07a1f4c919ee67a261df723a8ff751b990b87d663a6457b81a2c

  • SHA512

    74546549d28e7d7fe21d86457145bc4c4c679aac9405c23f13b5bfa3976ba6db7e2b547539326080e534dc783cedf38ed2ac7e749e2cee4a72faad28cc945db2

  • SSDEEP

    3145728:21wroWi7rG7YnhfPgPX7umWg6TCES4Z3pbJU7:2GroWivEYnhgPoxeEPk

Score
10/10

Malware Config

Extracted

Path

/data/data/com.termux/files/usr-staging/share/libgpg-error/errorref.txt

Ransom Note
# errorref.txt - Description of error codes # Copyright (C) 2003-2004, 2010, 2013-2016 g10 Code GmbH # # This file is part of libgpg-error. # # libgpg-error is free software; you can redistribute it and/or # modify it under the terms of the GNU Lesser General Public License # as published by the Free Software Foundation; either version 2.1 of # the License, or (at your option) any later version. # # libgpg-error is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public # License along with this program; if not, see <https://www.gnu.org/licenses/>. GPG_ERR_UNKNOWN_PACKET Unknown packet GNUPG: - Redefined to G10ERR_UNKNOWN_PACKET in gpg. GPG_ERR_UNKNOWN_VERSION Unknown version in packet Used by GnuPG 2.1 to identify valid OpenPGP packets with an unknown version. GPG_ERR_PUBKEY_ALGO Invalid public key algorithm GNUPG: - Redefined to G10ERR_PUBKEY_ALGO in gpg. - Public key algorithm is not allowed by OpenPGP. GCRYPT: - Public key algorithm is not defined or not available. Note that this is also the case if the algorithm has been disabled. - [version < 1.5] Checking of the RSA secret key failed (consistency check). GPG_ERR_DIGEST_ALGO Invalid digest algorithm GNUPG: - Digest algorithm is not supported. - Redefined to G10ERR_PUBKEY_ALGO in gpg. - Digest algorithm is not allowed by OpenPGP. - Unsupported algorithm given to "--hash=" option of certain Assuan server commands. - Signature creation or verification failed due to an unsupported hash algorithm. GCRYPT: - Digest key algorithm is not defined or not available. Note that this is also the case if the algorithm has been disabled. - Unsupported digest algorithm in a selftest. - Invalid digest algorithm used in FIPS mode. Note that in enforced-FIPS mode there is no such error return. - Message digested or HMAC computation finished with no message algorithm enabled for the hash context. - Bad digest algorithm given to public key function. GPG_ERR_BAD_PUBKEY Bad public key GNUPG: - Redefined to G10ERR_BAD_PUBKEY in gpg. - Missing public or domain parameter in an s-expression. If the curve name is mssing GPG_ERR_INV_CURVE may be used as well. GPG_ERR_BAD_SECKEY Bad secret key GNUPG: - Invalid format of a S-expression encoded private key in gpg-agent. - Missing secret parameter in an s-expression. - A protected or shadowed private key was passed to the OpenPGP card application for storing it on the card. - A private key passed to the OpenPGP card application does not match the requirements of the card or misses required parameters. - Gpg'agents import key command is not able to convert the key to the internal format. GCRYPT: - Checking the secret key failed (consistency check). GPG_ERR_BAD_SIGNATURE Bad signature GNUPG: - Redefined to G10ERR_BAD_SIGN in gpg. - The MDC check of an OpenPGP encrypted message failed. - A OpenPGP key signature did not verify. - A signature with a key flagged as "never trust" was made. GCRYPT: - A public key signature did not verify. GPG_ERR_NO_PUBKEY No public key GNUPG: - Redefined to G10ERR_NO_PUBKEY in gpg. - A key was requested from an OpenPGP card but the key is not stored on the card. - The public key could not be retrieved from a corresponding certificate on a card (command READKEY in scd). - A requested certificate was not found or an unspecified error occurred while selecting a X.509 certificate in gpgsm. - The specified certificate or key was not found. This does not necessary mean that the certifciate is not available but the specification method may not be usable for the given certificate. May also happen for certificates somewhere in the chain while validaiting a certificate chain. - The requested encryption certificate was not found. - A certificate specified in a CMS message is not available and thus the signature could not be verified or details of the certificate be shown. GPA: - No key was given for encryption. - The selected encryption protocol is not available. GPG_ERR_CHECKSUM Checksum error GNUPG: - The checksum of an unprotected OpenPGP secret key packet is wrong. GCRYPT: - Decryption in AESWRAP mode does not match the expected IV. [more to come] GPG_ERR_BAD_PASSPHRASE Bad passphrase GNUPG: - The entered passphrase does not verify GPG_ERR_CIPHER_ALGO Invalid cipher algorithm GPG_ERR_KEYRING_OPEN Cannot open keyring GPG_ERR_INV_PACKET Invalid packet GPG_ERR_INV_ARMOR Invalid armor GPG_ERR_NO_USER_ID No user ID GPG_ERR_NO_SECKEY No secret key NTBTLS: - No private key or pre-shared key available. GPG_ERR_WRONG_SECKEY Wrong secret key used GPG_ERR_BAD_KEY Bad session key GNUPG: - gpg-agent's command IMPORT_KEY or EXPORT_KEY is used without a prior KEYWRAP_KEY command. [more to come] GPG_ERR_COMPR_ALGO Unknown compression algorithm GPG_ERR_NO_PRIME Number is not prime GPG_ERR_NO_ENCODING_METHOD Invalid encoding method GPG_ERR_NO_ENCRYPTION_SCHEME Invalid encryption scheme GPG_ERR_NO_SIGNATURE_SCHEME Invalid signature scheme GPG_ERR_INV_ATTR Invalid attribute GPG_ERR_NO_VALUE No value GNUPG: - A timestamp value is expect but there is none. KSBA: - A timestamp value is expect but there is none. - A certificate is missing a required property. - A CMS object is missing a required property. - Converting a Distinguised Name to an RFC2253 string failed. GPG_ERR_NOT_FOUND Not found A search operation did not return a matching value. GPG_ERR_VALUE_NOT_FOUND Value not found GNUPG: - A keyblock or a cert object was requested but not found. This might indicate an internal error here. GPG_ERR_SYNTAX Syntax error GPG_ERR_BAD_MPI Bad MPI value GPG_ERR_INV_PASSPHRASE Invalid passphrase GNUPG: - Required constraints of the passphrase are not met. GPG_ERR_SIG_CLASS Invalid signature class GPG_ERR_RESOURCE_LIMIT Resources exhausted GPG_ERR_INV_KEYRING Invalid keyring GPG_ERR_TRUSTDB Trust DB error GPG_ERR_BAD_CERT Bad certificate NTBTLS: - No subject found in the certifciate. GPG_ERR_INV_USER_ID Invalid user ID GNUPG: - Used to indicate a bad specification of a user id. [more to come] GPG_ERR_UNEXPECTED Unexpected error GPG_ERR_TIME_CONFLICT Time conflict GPG_ERR_KEYSERVER Keyserver error GPG_ERR_WRONG_PUBKEY_ALGO Wrong public key algorithm GNUPG: - The algorithm is not expected. For example a DSA algorithm is used where a non-DSA algorithm is expected or vice versa. May indicate an internal error. NTBTLS: - Public key type mismatch. The peer presented a different key type than requested. GPG_ERR_TRIBUTE_TO_D_A Tribute to D. A. GPG_ERR_WEAK_KEY Weak encryption key GPG_ERR_INV_KEYLEN Invalid key length GPG_ERR_INV_ARG Invalid argument GCRYPT: - Unsupported length of input data in encrypt or decrypt cipher functions. For example not matching the block lengths of the algorithm. - Incompatible args given; e.g. two or none if exactly one is required. [more to come] GPG_ERR_BAD_URI Syntax error in URI GPG_ERR_INV_URI Invalid URI GPG_ERR_NETWORK Network error GPG_ERR_UNKNOWN_HOST Unknown host Used instead of the non-portable EHOSTNOTFOUND which is returned by some systems as a mapping of h_errno's HOST_NOT_FOUND GPG_ERR_SELFTEST_FAILED Selftest failed GPG_ERR_NOT_ENCRYPTED Data not encrypted GPG_ERR_NOT_PROCESSED Data not processed GPG_ERR_UNUSABLE_PUBKEY Unusable public key GPG_ERR_UNUSABLE_SECKEY Unusable secret key GPG_ERR_INV_VALUE Invalid value NTBTLS: - A DH parameter is out of range GnuPG: - An Assuan server returns a status line with unexpected values. GPG_ERR_BAD_CERT_CHAIN Bad certificate chain GPG_ERR_MISSING_CERT Missing certificate NTBTLS: - The server needs to send a certifciate but none has been set. See also GPG_ERR_MISSING_ISSUER_CERT and GPG_ERR_MISSING_CLIENT_CERT. GPG_ERR_NO_DATA No data GPG_ERR_BUG Bug GPG_ERR_NOT_SUPPORTED Not supported Used if a feature is currently not supported but may be enabled for example using a program option. Commonly used if a feature has been disabled by an administrator. See also GPG_ERR_NOT_ENABLED. Sometimes also used for features which are not yet supported. GPG_ERR_INV_OP Invalid operation code GPG_ERR_TIMEOUT Timeout Some function or network access timed out. GPG_ERR_INTERNAL Internal error GPG_ERR_EOF_GCRYPT EOF (gcrypt) GPG_ERR_INV_OBJ Invalid object GPG_ERR_TOO_SHORT Provided object is too short GPG_ERR_TOO_LARGE Provided object is too large GPG_ERR_NO_OBJ Missing item in object GPG_ERR_NOT_IMPLEMENTED Not implemented NTBTLS: - The requested feature is not implemented. GPG_ERR_CONFLICT Conflicting use NTBTLS: - Function has already been called and may not be called again at this protocol state. GNUPG: - Returned by g13 when creating a new container on a device which seems to be in use. GPG_ERR_INV_CIPHER_MODE Invalid cipher mode GPG_ERR_INV_FLAG Invalid flag GPGME: Used to indicate an invalid combination of flags. GPG_ERR_INV_HANDLE Invalid handle GPG_ERR_TRUNCATED Result truncated GPG_ERR_INCOMPLETE_LINE Incomplete line GPG_ERR_INV_RESPONSE Invalid response GPG_ERR_NO_AGENT No agent running GPG_ERR_AGENT agent error GPG_ERR_INV_DATA Invalid data GNUPG: - Used in app-openpgp.c for a badly formatted request. GCRYPT: - No passphrase given for gcry_kdf_derive. - An opaque MPI is given to a public key function but not expected. GPG_ERR_ASSUAN_SERVER_FAULT Unspecific Assuan server fault GPG_ERR_ASSUAN General Assuan error GNUPG: - Used by Assuan command handler if they fail to do basic things like an es_fdopen or es_fopencookie. GPG_ERR_INV_SESSION_KEY Invalid session key GPG_ERR_INV_SEXP Invalid S-expression GPG_ERR_UNSUPPORTED_ALGORITHM Unsupported algorithm GPG_ERR_NO_PIN_ENTRY No pinentry GPG_ERR_PIN_ENTRY pinentry error GPG_ERR_BAD_PIN Bad PIN GPG_ERR_INV_NAME Invalid name GNUPG: - Formerly used in GPGSM to indicate an error in the specification of a user id. Later replaced by GPG_ERR_INV_USER_ID. - In G13 to indicate a bad file name (e.g. one with an embedded Nul byte when given as escaped string. - In SCDAEMON for an unknown attribute name. Also used for URLs which have non-acceptable characters for the specific application. [more to come] GPG_ERR_BAD_DATA Bad data GPG_ERR_INV_PARAMETER Invalid parameter GNUPG: - Returned if gpg-agent sends a new generated key with unknown parameter names. - Invalid parameter in the parameter file for key generation by gpgsm. GPG_ERR_WRONG_CARD Wrong card GPG_ERR_NO_DIRMNGR No dirmngr GPG_ERR_DIRMNGR dirmngr error GPG_ERR_CERT_REVOKED Certificate revoked GPG_ERR_NO_CRL_KNOWN No CRL known GPG_ERR_CRL_TOO_OLD CRL too old GPG_ERR_LINE_TOO_LONG Line too long GPG_ERR_NOT_TRUSTED Not trusted GPG_ERR_CANCELED Operation cancelled GPG_ERR_BAD_CA_CERT Bad CA certificate GPG_ERR_CERT_EXPIRED Certificate expired GPG_ERR_CERT_TOO_YOUNG Certificate too young GPG_ERR_UNSUPPORTED_CERT Unsupported certificate GPG_ERR_UNKNOWN_SEXP Unknown S-expression GPG_ERR_UNSUPPORTED_PROTECTION Unsupported protection GPG_ERR_CORRUPTED_PROTECTION Corrupted protection GPG_ERR_AMBIGUOUS_NAME Ambiguous name GPG_ERR_CARD Card error GPG_ERR_CARD_RESET Card reset required GPG_ERR_CARD_REMOVED Card removed GPG_ERR_INV_CARD Invalid card GPG_ERR_CARD_NOT_PRESENT Card not present GPG_ERR_NO_PKCS15_APP No PKCS15 application GPG_ERR_NOT_CONFIRMED Not confirmed GPG_ERR_CONFIGURATION Configuration error GPG_ERR_NO_POLICY_MATCH No policy match GPG_ERR_INV_INDEX Invalid index GPG_ERR_INV_ID Invalid ID GPG_ERR_NO_SCDAEMON No SmartCard daemon GPG_ERR_SCDAEMON SmartCard daemon error GPG_ERR_UNSUPPORTED_PROTOCOL Unsupported protocol GPG: - An unsupported keyserver protocol. GPG_AGENT: - Invalid shadow_info protocol (not "t1-v1") LIBKSBA: - Unknown OID of the OCSP response bytes GPGME: - GPGME_PROTOCOL_xxx not supported. NTBTLS: - Handshake protocol version not supported. GPG_ERR_BAD_PIN_METHOD Bad PIN method GPG_ERR_CARD_NOT_INITIALIZED Card not initialized SCDAEMON: - A card function is called but the card has not yet been initialized. This may be due to a conflict with another card using connection or due to a bug. GPG_ERR_UNSUPPORTED_OPERATION Unsupported operation GPG_ERR_WRONG_KEY_USAGE Wrong key usage GNUPG: - Key usage not possible with selected algorithm. GPG_ERR_NOTHING_FOUND Nothing found Indicates that the operation was not possible because nothing has been found. For example an update request for non existent data. GPG_ERR_WRONG_BLOB_TYPE Wrong blob type GNUPG: - The keyboxd returns an unexpected blob (e.g. OpenPGP was requested but X.509 returned). GPG_ERR_MISSING_VALUE Missing value GNUPG: - Not enough parameters for a secret key send to gpg-agent. GCRYPT: - A required parameter has not been given. GPG_ERR_HARDWARE Hardware problem GPG_ERR_PIN_BLOCKED PIN blocked GPG_ERR_USE_CONDITIONS Conditions of use not satisfied GNUPG: - The PIN given to a smartcard is too short or has unacceptable characters so that the smartcard does not even try to verify it. - The smar

Targets

    • Target

      termux-app_v0.118.0+github-debug_universal.apk

    • Size

      100.7MB

    • MD5

      d06809d8d153615ce8af3cd35e434192

    • SHA1

      d3cf966566e76f458ae4a100560dde8e935ff3a1

    • SHA256

      3141295849db07a1f4c919ee67a261df723a8ff751b990b87d663a6457b81a2c

    • SHA512

      74546549d28e7d7fe21d86457145bc4c4c679aac9405c23f13b5bfa3976ba6db7e2b547539326080e534dc783cedf38ed2ac7e749e2cee4a72faad28cc945db2

    • SSDEEP

      3145728:21wroWi7rG7YnhfPgPX7umWg6TCES4Z3pbJU7:2GroWivEYnhgPoxeEPk

    Score
    10/10

MITRE ATT&CK Matrix

Tasks