Duolingo[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Duolingo.apk
Size 58.4MB
Sample240522-ffl4xscd68
SHA256 4ea70f44c0262c9b6838fa400801203d5b01519e90da1eb5855d7715c85620f7
MD5 1bbcd0b16a61c625ada99aca4c68cbdc
SHA1 3fcf282bef0ae5e18e9a8fe20354eb3bcb61b79a
SHA512 e090a72dd6caa0fb6b860eae7a191cfa8257bcfba31c7948027afb5175fb20104432eba79c6fe42f97d9a07259cf539c816a496a9835c5b3203629d44815ce16
SSDEEP 1572864:sYoah9D6CeLu7jfVCvphWHuPONjCe4TafDZzn6DuF5x6xf+KlPa8:sYoahgNy7jfQvrWHGONj4OAj
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

Duolingo.apk

.apk 58.4MB

Duolingo.apk

SHA256 4ea70f44c0262c9b6838fa400801203d5b01519e90da1eb5855d7715c85620f7
MD5 1bbcd0b16a61c625ada99aca4c68cbdc
SHA1 3fcf282bef0ae5e18e9a8fe20354eb3bcb61b79a
SHA512 e090a72dd6caa0fb6b860eae7a191cfa8257bcfba31c7948027afb5175fb20104432eba79c6fe42f97d9a07259cf539c816a496a9835c5b3203629d44815ce16
SSDEEP 1572864:sYoah9D6CeLu7jfVCvphWHuPONjCe4TafDZzn6DuF5x6xf+KlPa8:sYoahgNy7jfQvrWHGONj4OAj
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.duolingo

com.duolingo.core.util.facebook.PlayFacebookUtils$WrapperActivity

com.duolingo.splash.LaunchActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.duolingo.session.SessionActivity

com.duolingo.session.LandscapeSessionActivity

com.duolingo.onboarding.WelcomeFlowActivity

com.duolingo.onboarding.PlacementFallbackActivity

com.duolingo.onboarding.resurrection.ResurrectedOnboardingActivity

com.duolingo.yearinreview.report.YearInReviewReportActivity

com.duolingo.session.UnitTestExplainedActivity

com.duolingo.session.SectionTestExplainedActivity

com.duolingo.session.UnitReviewExplainedActivity

com.duolingo.session.MistakesPracticeActivity

com.duolingo.session.levelreview.LevelReviewExplainedActivity

com.duolingo.stories.StoriesOnboardingActivity

com.duolingo.settings.SettingsActivity

com.duolingo.settings.SettingsV2Activity

com.duolingo.plus.management.ManageSubscriptionActivity

com.duolingo.feedback.FeedbackFormActivity

com.duolingo.profile.addfriendsflow.AddFriendsFlowActivity

com.duolingo.profile.addfriendsflow.AddFriendsFlowFragmentWrapperActivity

com.duolingo.profile.contactsync.AddPhoneActivity

com.duolingo.signuplogin.CountryCodeActivity

com.duolingo.profile.ProfileActivity

com.duolingo.profile.avatar.AvatarBuilderActivity

com.duolingo.profile.completion.CompleteProfileActivity

com.duolingo.rampup.RampUpIntroActivity

com.duolingo.home.sidequests.SidequestIntroActivity

com.duolingo.profile.schools.SchoolsActivity

com.duolingo.signuplogin.SignupActivity

com.duolingo.signuplogin.AddPhoneActivity

com.duolingo.plus.dashboard.PlusActivity

com.duolingo.plus.management.PlusCancelSurveyActivity

com.duolingo.plus.management.PlusFeatureListActivity

com.duolingo.plus.purchaseflow.PlusPurchaseFlowActivity

com.duolingo.plus.onboarding.WelcomeToPlusActivity

com.duolingo.plus.onboarding.PlusOnboardingSlidesActivity

com.duolingo.sessionend.ImmersivePlusIntroActivity

com.duolingo.hearts.HeartsWithRewardedVideoActivity

com.duolingo.shop.RewardedVideoGemAwardActivity

com.duolingo.home.path.PathChestRewardActivity

com.duolingo.home.path.SectionOverviewActivity

com.duolingo.shop.ShopPageWrapperActivity

com.duolingo.streak.drawer.StreakDrawerWrapperActivity

com.duolingo.streak.earnback.StreakEarnbackProgressActivity

com.duolingo.referral.ReferralInterstitialActivity

com.duolingo.goals.monthlygoals.GoalsMonthlyGoalDetailsActivity

com.duolingo.goals.monthlychallenges.MonthlyChallengeIntroActivity

com.duolingo.xpboost.XpBoostAnimatedRewardActivity

com.duolingo.adventures.AdventuresEpisodeActivity

com.duolingo.alphabets.AlphabetsTipListActivity

com.duolingo.plus.registration.WelcomeRegistrationActivity

com.duolingo.explanations.SkillTipActivity

com.duolingo.explanations.AlphabetsTipActivity

com.duolingo.explanations.GuidebookActivity

com.duolingo.explanations.OnboardingDogfoodingActivity

com.duolingo.explanations.ResurrectionOnboardingDogfoodingActivity

com.duolingo.signuplogin.ResetPasswordActivity

com.duolingo.stories.StoriesSessionActivity

com.duolingo.duoradio.DuoRadioSessionActivity

com.duolingo.duoradio.DuoRadioTranscriptActivity

com.duolingo.legendary.LegendaryFailureActivity

com.duolingo.legendary.LegendaryIntroActivity

com.duolingo.web.WebViewActivity

com.duolingo.core.offline.ui.MaintenanceActivity

com.duolingo.plus.familyplan.FamilyPlanLandingActivity

com.duolingo.plus.familyplan.FamilyPlanConfirmActivity

com.duolingo.plus.familyplan.FamilyPlanInvalidActivity

com.duolingo.plus.familyplan.FamilyPlanAlreadySuperActivity

com.duolingo.plus.familyplan.FamilyPlanKudosListActivity

com.duolingo.plus.onboarding.PlusOnboardingNotificationsActivity

com.duolingo.plus.familyplan.ManageFamilyPlanActivity

com.duolingo.promocode.RedeemPromoCodeActivity

com.duolingo.leagues.LeagueRepairOfferWrapperActivity

com.duolingo.report.ReportActivity

com.duolingo.debug.DebugActivity

com.duolingo.debug.NewYearsPromoDebugActivity

com.duolingo.ai.roleplay.RoleplayActivity

com.duolingo.debug.DesignGuidelinesActivity

com.duolingo.debug.PicassoExampleActivity

com.duolingo.leagues.LeaguesResultDebugActivity

com.duolingo.session.SessionDebugActivity

com.duolingo.stories.StoriesDebugActivity

com.duolingo.rewards.RewardsDebugActivity

com.duolingo.debug.animation.LottieTestingActivity

com.duolingo.debug.animation.PreviewAnimationDebugActivity

com.duolingo.debug.animation.RiveTestingActivity

com.duolingo.debug.networking.NetworkTestingActivity

com.duolingo.debug.ui.TypographyTokenGalleryActivity

com.duolingo.debug.DiskAnalysisActivity

com.duolingo.debug.DebugMemoryLeakActivity

com.duolingo.debug.ResourceManagerExamplesActivity

com.duolingo.debug.BackendTutorialActivity

com.duolingo.debug.MessagesDebugActivity

com.duolingo.debug.sessionend.SessionEndDebugActivity

com.duolingo.notifications.NotificationTrampolineActivity

com.duolingo.streak.streakWidget.WidgetDebugActivity

com.duolingo.debug.ResurrectionDebugActivity

com.duolingo.debug.XpHappyHourDebugActivity

com.duolingo.debug.YearInReviewDebugActivity

com.duolingo.arwau.ArWauLoginRewardsDebugActivity

com.duolingo.timedevents.TimedChestsDebugActivity

com.duolingo.wechat.WeChatReceiverActivity

com.duolingo.wechat.WeChatFollowInstructionsActivity

com.duolingo.signuplogin.ForceConnectPhoneActivity

com.duolingo.debug.bottomsheet.BottomSheetDebugActivity

com.facebook.FacebookActivity

com.duolingo.feature.design.system.ComposeComponentGalleryActivity

com.duolingo.feature.math.MathSandboxActivity

com.duolingo.feature.music.ui.sandbox.note.MusicNoteSandboxActivity

com.duolingo.feature.music.ui.sandbox.circletoken.MusicCircleTokenSandboxActivity

com.duolingo.feature.music.ui.sandbox.draganddrop.MusicDragAndDropSandboxActivity

com.duolingo.feature.music.ui.sandbox.scoreparser.MusicScoreParserSandboxActivity

com.duolingo.core.android.activity.test.EmptyEntryPointTestActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.play.core.missingsplits.PlayCoreMissingSplitsActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.duolingo.referral.ShareReceiver

com.duolingo.streak.streakWidget.StreakWidgetProvider

com.duolingo.action.APPWIDGET_UPDATE_REQUESTED com.duolingo.action.APPWIDGET_UI_UPDATE android.appwidget.action.APPWIDGET_UPDATE android.intent.action.MY_PACKAGE_REPLACED android.intent.action.TIMEZONE_CHANGED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

Duolingo.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

com.google.android.providers.gsf.permission.READ_GSERVICES

com.duolingo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE