General

  • Target

    com.codeway.chatapp_1.5.1_164_JC.apk

  • Size

    26.1MB

  • MD5

    d45446d022570bd02e2c33295fbfdcb3

  • SHA1

    c0b485812c42730d743943a54dd27c966cc25f80

  • SHA256

    8b6d00fc5a525d30abf2b55a7a576b5b430cd5d55c8e6c9d99efee7148532f2b

  • SHA512

    7b27073d687a8124fb68008b69e8e2bf121a82614f5d64f98d99b55dabb8097769b96bbf88d123b9f8f5d9aaf37592b5154810904712fbfe9b53864da0406370

  • SSDEEP

    786432:GtsXF2eXhp9K3TB+Z2eVF5faJkYv9bLoiyq5alzm:GtsXFJXkTB+9jgxv93pyFc

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 3 IoCs

Files

  • com.codeway.chatapp_1.5.1_164_JC.apk
    .apk android

    com.codeway.chatapp

    com.codeway.chatapp.MainActivity


  • AssetManifest.json
  • Beng_ctc_cpu.binarypb
  • CupertinoIcons.ttf
  • Deva_ctc_cpu.binarypb
  • FiraCode-Bold.ttf
  • FiraCode-Light.ttf
  • FiraCode-Medium.ttf
  • FiraCode-Regular.ttf
  • FiraCode-SemiBold.ttf
  • FontManifest.json
  • Hani_ctc_cpu.binarypb
  • Jpan_ctc_cpu.binarypb
  • Kore_ctc_cpu.binarypb
  • LabelMap.pb
  • Latn_ctc_cpu.binarypb
  • MaterialIcons-Regular.otf
  • NOTICES.Z
    .gz
  • NOTICES.Z
  • SFProDisplay-Bold.ttf
  • SFProDisplay-Medium.ttf
  • SFProDisplay-Regular.ttf
  • SFProDisplay-Semibold.ttf
  • about_codeway.png
    .png
  • add_file.png
    .png
  • aksara_page_layout_analysis_rpn_gcn.binarypb
  • aksara_page_layout_analysis_ti_rpn_gcn.binarypb
  • app_logo.png
    .png
  • app_logo_in_circle.png
    .png
  • app_logo_onb.png
    .png
  • ar-DZ.json
  • ar.json
  • ask_pdf.png
    .png
  • ask_url.png
    .png
  • atom.png
    .png
  • back_arrow.png
    .png
  • baseline.prof
  • bolt.png
    .png
  • bottomsheet_bg.png
    .png
  • bulb.png
    .png
  • bulb2.png
    .png
  • camera.png
    .png
  • chaton_onboarding_en.mp4
  • chaton_onboarding_small_en.mp4
  • chevron-down.png
    .png
  • chevron-up.png
    .png
  • chevrons_right.png
    .png
  • circle_tick.png
    .png
  • close.png
    .png
  • close_square.png
    .png
  • close_with_circle.png
    .png
  • close_with_circle_elite.png
    .png
  • co_bg.json
  • co_welcome.json
  • codeway.png
    .png
  • community_guideline.png
    .png
  • conv_model.fb
  • copy.png
    .png
  • de.json
  • delete.png
    .png
  • discord.png
    .png
  • down.png
    .png
  • edit.png
    .png
  • elite_pw_bg.png
    .png
  • elite_tools_info_sheet_image.png
    .png
  • empty_history_logo.png
    .png
  • en-US.json
  • en.json
  • es.json
  • export.png
    .png
  • file_selected.png
    .png
  • fr.json
  • gallery.png
    .png
  • gpt4_sheet_icon.png
    .png
  • great.png
    .png
  • green_checkmark.png
    .png
  • green_tick.png
    .png
  • hand_point.png
    .png
  • headphone.png
    .png
  • history.png
    .png
  • history_white.png
    .png
  • home_pro_button.png
    .png
  • infinity.png
    .png
  • info.png
    .png
  • ink_sparkle.frag
  • it.json
  • ja.json
  • ko.json
  • l2_feature_0.png
    .png
  • l2_feature_1.png
    .png
  • l2_feature_2.png
    .png
  • l2_feature_3.png
    .png
  • l3_feature_0.png
    .png
  • l3_feature_1.png
    .png
  • l3_feature_2.png
    .png
  • lightbulb.png
    .png
  • like_us_rate_us.png
    .png
  • limited_offer_bg.png
    .png
  • link.png
    .png
  • logo_wo_bg.png
    .png
  • lstm_model.fb
  • mail.png
    .png
  • mas_bg.png
    .png
  • message_apps.png
    .png
  • messenger.png
    .png
  • minus_with_circle.png
    .png
  • model.tflite
  • more.png
    .png
  • nah.png
    .png
  • new_background_seamless.json
  • new_logo.json
  • new_logo_bg.png
    .png
  • new_onb_dialog_app_logo.png
    .png
  • new_onb_powered_by_gpt_animation.json
  • new_onb_stars_animation.json
  • no_ads.png
    .png
  • no_payment_now.png
    .png
  • onb_option_0.png
    .png
  • onb_option_1.png
    .png
  • onb_option_2.png
    .png
  • onb_option_3.png
    .png
  • onb_option_4.png
    .png
  • onb_user.png
    .png
  • onboarding_bg.png
    .png
  • paywall_feature_tick.png
    .png
  • paywall_new_logo.png
    .png
  • paywall_woman.png
    .png
  • phone.png
    .png
  • photo_permission.png
    .png
  • pointer_arrow.png
    .png
  • popup_allow_notifications.png
    .png
  • popup_congrats.png
    .png
  • popup_force_update.png
    .png
  • popup_no_connection.png
    .png
  • popup_review.png
    .png
  • popup_soft_update.png
    .png
  • popup_something_went_wrong.png
    .png
  • privacy_policy.png
    .png
  • promo_code.png
    .png
  • pt.json
  • reddit.png
    .png
  • refresh.png
    .png
  • region_proposal_text_detector_tflite_vertical_mbv2_v1.bincfg
  • remind_me_bg.png
    .png
  • reminder_step_0.png
    .png
  • reminder_step_1.png
    .png
  • reminder_step_2.png
    .png
  • reminder_step_3.png
    .png
  • rename.png
    .png
  • restore_purchase.png
    .png
  • review_stars.png
    .png
  • rpn_text_detection_tflite_mobile_mbv2.binarypb
  • rpn_text_detector_mobile_space_to_depth_quantized_mbv2_v1.tflite
  • scan.png
    .png
  • scroll_down.png
    .png
  • select_text.png
    .png
  • send.png
    .png
  • settings.png
    .png
  • share.png
    .png
  • share_all_chat.png
    .png
  • share_as_video.png
    .png
  • share_last_message.png
    .png
  • sound_off.png
    .png
  • sound_on.png
    .png
  • sparkles.png
    .png
  • splash.json
  • splash_bg.png
    .png
  • splash_new.json
  • splash_new_small.json
  • star.png
    .png
  • stop.png
    .png
  • summarize_pdf.png
    .png
  • summarize_url.png
    .png
  • taser_script_identification_tflite_mobile.binarypb
  • taser_tflite_gocrchinese_and_latin_mbv2_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrchinese_and_latin_mbv2_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrchinese_and_latin_mbv2_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrchinese_and_latin_mbv2_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrchinese_and_latin_mbv2_aksara_layout_gcn_mobile_runner_ti.binarypb
  • taser_tflite_gocrdevanagari_and_latin_mbv2_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrdevanagari_and_latin_mbv2_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrdevanagari_and_latin_mbv2_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrdevanagari_and_latin_mbv2_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrdevanagari_and_latin_mbv2_aksara_layout_gcn_mobile_runner_ti.binarypb
  • taser_tflite_gocrjapanese_and_latin_mbv2_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrjapanese_and_latin_mbv2_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrjapanese_and_latin_mbv2_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrjapanese_and_latin_mbv2_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrjapanese_and_latin_mbv2_aksara_layout_gcn_mobile_runner_ti.binarypb
  • taser_tflite_gocrkorean_and_latin_mbv2_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrkorean_and_latin_mbv2_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrkorean_and_latin_mbv2_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrkorean_and_latin_mbv2_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrkorean_and_latin_mbv2_aksara_layout_gcn_mobile_runner_ti.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_runner_ti.binarypb
  • telegram.png
    .png
  • terms_of_service.png
    .png
  • tflite_langid.tflite
  • tflite_script_detector_0.3.bincfg
  • tflite_script_detector_0.3.conv_model
  • tflite_script_detector_0.3.lstm_model
  • three_dot.png
    .png
  • tick.png
    .png
  • tr.json
  • twitter.png
    .png
  • typing_delay.json
  • uploading_file.json
  • user_icon.png
    .png
  • vega_icon_small.png
    .png
  • waiting_loading.json
  • warning.png
    .png
  • welcome_bg.png
    .png
  • whatsapp.png
    .png
  • zh.json

Android Permissions

com.codeway.chatapp_1.5.1_164_JC.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.POST_NOTIFICATIONS

com.google.android.gms.permission.AD_ID

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SCHEDULE_EXACT_ALARM

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.codeway.chatapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.BILLING