Resubmissions

08/01/2026, 11:33

260108-nn3ewaap3v10

08/01/2026, 11:15

260108-nclb8azrak10

General

  • Target
    35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948
  • Size 9.3MB
  • Sample260108-nclb8azrak
  • SHA256 35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Octo family
  • Custom signature
    Octo DGA 4 IoCs

    Contains strings associated with the Octo/Coper variant that uses a domain generation algorithm (DGA).

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Codesign digest Mismatch 2 IoCs

    File was altered after it was signed.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948
    .apk 9.3MB
  • base.apk
    .apk 9.7MB

35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948

  • SHA256 35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948
  • MD5 SHA1 SHA512 SSDEEP
  • Codesign digest Mismatch

    File was altered after it was signed.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
4b98d08c2c02db7cf6f914cacb4e83629a1fa79c740bb2fae3e4ec9ee54f8f3b
Digest Algorithm
sha256
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains

Jan 1, 0001

com.ceiling.waste

Android Permissions

35dd4c361e44c9835da5312cc2543f614f506ddb13916c2b4a655056d5f85948

Permissions

android.permission.REQUEST_INSTALL_PACKAGES