2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face

General

Target
2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
Size 12.3MB
Sample260108-ncy83szraq
SHA256 2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
MD5 2f3007ee33b231c1c678516e5e8e7348
SHA1 c770ed5d3d5241e84b90c706228e4f00859e11a3
SHA512 1183ff1f80e5463ba74f06c666634f7e4011fe332151d1ac763b064b7dcc5cc87cfaebcd133110fbb7d45db62295f5cd8ee6e880b2b3beab007f1293f57e1102
SSDEEP 196608:DcKGW4JuV/ua0jZuvbG7kJ4bgyu5yEyU5huUonYaTnic46zQJqCUeFIIupnbhTgZ:DMv6/uaRJJ4bStri3nYam0ubIISmR
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Codesign digest Mismatch 2 IoCs

File was altered after it was signed.

resource
2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
unpack001/base.apk

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
unpack001/base.apk

File Explorer

2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face

.apk 12.3MB
base.apk

.apk 6.9MB

2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face

SHA256 2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face
MD5 2f3007ee33b231c1c678516e5e8e7348
SHA1 c770ed5d3d5241e84b90c706228e4f00859e11a3
SHA512 1183ff1f80e5463ba74f06c666634f7e4011fe332151d1ac763b064b7dcc5cc87cfaebcd133110fbb7d45db62295f5cd8ee6e880b2b3beab007f1293f57e1102
SSDEEP 196608:DcKGW4JuV/ua0jZuvbG7kJ4bgyu5yEyU5huUonYaTnic46zQJqCUeFIIupnbhTgZ:DMv6/uaRJJ4bStri3nYam0ubIISmR
MD5 SHA1 SHA512 SSDEEP

android

Codesign digest Mismatch

File was altered after it was signed.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

74ace0d4db4f0fae65dffeecdb61a75e06be4d1218b6c704e2e90e8b7c059030

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

Chains

Jan 1, 0001

com.you.eight

base.apk

SHA256 e405451fb3eb9dd76bce40a0d575d97bfd9bb545309ff634156e4fca78335105
MD5 8af4db27e67bd35d2c70b2a9f6d71b86
SHA1 d154dbd7db47cb88893f2ced5dd98d4f37d8d4be
SHA512 e1ba9f6ed8bc03178f4a44939084d3b6db010c5af52a44397e0deaef4325666dd54e72c7c6da55ed8172ce7e245f70a14e2052c2c43eaa66c5d8eb4a41e56f52
SSDEEP 196608:jXhnSTpwK25+wrP2euK1i/2CoqxIy2Jdrlpq/9ccfKaR:ThSeV5+wy8+jIykfg
MD5 SHA1 SHA512 SSDEEP

android

Codesign digest Mismatch

File was altered after it was signed.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d3e70a151952b914ba32fb52e45ba6d108c7d6f65b1ea145feb510c7f4da170c

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US

Chains

Jan 1, 0001

sighpe.re.dis

android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_ACCOUNTS android.permission.READ_PHONE_NUMBERS android.permission.ACCESS_NOTIFICATION_POLICY android.permission.WAKE_LOCK android.permission.WRITE_CONTACTS android.permission.ACCESS_WIFI_STATE android.permission.REQUEST_DELETE_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.WRITE_SETTINGS android.permission.MANAGE_EXTERNAL_STORAGE android.permission.PROCESS_OUTGOING_CALLS android.permission.ACCESS_MEDIA_LOCATION android.permission.MODIFY_AUDIO_SETTINGS android.permission.READ_PHONE_STATE android.permission.POST_NOTIFICATIONS android.permission.MANAGE_ACCOUNTS android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECORD_AUDIO android.permission.FOREGROUND_SERVICE android.permission.KILL_BACKGROUND_PROCESSES android.permission.READ_CALL_LOG android.permission.DISABLE_KEYGUARD android.permission.ACCESS_NETWORK_STATE android.permission.READ_SMS android.permission.READ_CONTACTS android.permission.INTERNET android.permission.RECEIVE_SMS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.PACKAGE_USAGE_STATS android.permission.SEND_SMS android.permission.WRITE_SECURE_SETTINGS android.permission.USE_EXACT_ALARM android.permission.USE_BIOMETRIC android.permission.REQUEST_INSTALL_PACKAGES android.permission.USE_FULL_SCREEN_INTENT android.permission.CALL_PHONE android.permission.QUERY_ALL_PACKAGES com.google.android.c2dm.permission.RECEIVE android.permission.CAMERA android.permission.READ_PRECISE_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.REQUEST_COMPANION_START_FOREGROUND_SERVICES_FROM_BACKGROUND android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CREDENTIAL_MANAGER_SET_ORIGIN android.permission.NFC_TRANSACTION_EVENT android.permission.BROADCAST_STICKY android.permission.EXPAND_STATUS_BAR android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.BLUETOOTH_ADMIN android.permission.VIBRATE

sighpe.re.dis.LDmaJOrRwwE7

android.provider.Telephony.SMS_RECEIVED android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED android.intent.action.PHONE_STATE android.intent.action.NEW_OUTGOING_CALL android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.net.conn.CONNECTIVITY_CHANGE android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED android.intent.action.PACKAGE_ADDED

sighpe.re.dis.ueJipWWTzzK

android.provider.Telephony.SMS_DELIVER

sighpe.re.dis.upKA2oK

android.provider.Telephony.WAP_PUSH_DELIVER

sighpe.re.dis.DeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.PROFILE_PROVISIONING_COMPLETE android.app.action.PROFILE_OWNER_CHANGED android.app.action.DEVICE_OWNER_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face

File Signature issue

com.code.bunker.Tcradleuse

base.apk

File Signature issue

sighpe.re.dis.iDn

sighpe.re.dis.A5hqc6UKBC_hKa7J68Y

sighpe.re.dis.sJWiiVml99hmhDJKDS0

sighpe.re.dis.wY

sighpe.re.dis.Zzaq7ZggODY3

sighpe.re.dis.PxFGaHAT0sra_IbJ

sighpe.re.dis.f5GbVMFjNVYx5q

sighpe.re.dis.StubActivity

com.google.android.gms.common.api.GoogleApiActivity

sighpe.re.dis.oIWuu3OE

sighpe.re.dis.sDbwEZaEkUkLHzr3TZc6

sighpe.re.dis.Dsu_saJ22AqNnAbW7Ce

sighpe.re.dis.sCh7tOLFcrZLgZJkybAi

sighpe.re.dis.JkUJDUFzO0pfGDAnnmrr

sighpe.re.dis.PushService

sighpe.re.dis.SoftKeyboardService

sighpe.re.dis.VpnService

sighpe.re.dis.FirebaseMessagingService

sighpe.re.dis.RemoteService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

sighpe.re.dis.LDmaJOrRwwE7

sighpe.re.dis.ueJipWWTzzK

sighpe.re.dis.upKA2oK

sighpe.re.dis.DeviceAdminReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

2f8cf2aba94e5d55b980bdafd237e950a322649848820a466168eff7a537face