General

  • Target

    app-production-release.apk

  • Size

    48.0MB

  • MD5

    5c99a85541bfec68e0119ccfa65293e3

  • SHA1

    00afc1d864b2d377fc5ce9fc5ff9609531423e19

  • SHA256

    c0401bda24a5e153f962128effef110d4c3a9aa672f592edd91baaae17ed2ca6

  • SHA512

    7c70e86ba09206f18d0dba307db6830f6b775008c8d0793698a4c1fad095cbcb63f1f7366decf7b7ecca07446551d267f8f119c34da5a8fd95391fb84e4b8d91

  • SSDEEP

    1572864:yQ6I6L6DTrm8+/K4ZeE30kiqcaVmgaT+1gyfSTV/ETVUsc7:yQ4L6DTq8+/KP1kitVz

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 5 IoCs

Files

  • app-production-release.apk
    .apk android arch:arm64 arch:arm arch:x64

    com.pyshivam.geergit

    com.pyshivam.geergit.MainActivity


  • AssetManifest.bin
  • AssetManifest.json
  • CupertinoIcons.ttf
  • FontManifest.json
  • Logo-transparent.png
    .png
  • Logo.png
    .png
  • MaterialIcons-Regular.otf
  • NOTICES.Z
    .gz
  • NOTICES.Z
  • Poppins-Bold.ttf
  • Poppins-Medium.ttf
  • Poppins-Regular.ttf
  • Saly-39.png
    .png
  • ink_sparkle.frag
  • main.jar
    .apk android
  • saly-searching.png
    .png
  • subscription.png
    .png
  • sync.png
    .png
  • xposed_init

Android Permissions

app-production-release.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.pyshivam.geergit.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION