NosTV[.]apk | Triage™

Target
NosTV.apk
Size 7.0MB
Sample260226-kk4a8agt8b
SHA256 f9a52a923989353deb55136830070554db40f544be5a43534273126060f8c1f6
MD5 742bd30969e47f290c4081c2c1e58386
SHA1 da372ed626ba7bfe4ae22c988daabfa403ecce93
SHA512 221ccd1265b502070f55bc93e30fc99980d1d55bd6000cebc2b8a02e490aad90e9088f97391b748207e4dec5e9a96f83e86d727a3d06c2cdd2aa6de330bb062f
SSDEEP 196608:6/s+5mg+lnrv/K6bJZhKw0sf130AMOSfNDb:6//g/ZoE1kC8F
TLSH
T10276CF87EB818C6AC4FF533AA876036127335D5597838F831949B278BCB75C45E89BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
NosTV.apk
unpack001/1.apk

File Explorer

NosTV.apk

.apk 7.0MB
1.apk

.apk 8.0MB

NosTV.apk

SHA256 f9a52a923989353deb55136830070554db40f544be5a43534273126060f8c1f6
MD5 742bd30969e47f290c4081c2c1e58386
SHA1 da372ed626ba7bfe4ae22c988daabfa403ecce93
SHA512 221ccd1265b502070f55bc93e30fc99980d1d55bd6000cebc2b8a02e490aad90e9088f97391b748207e4dec5e9a96f83e86d727a3d06c2cdd2aa6de330bb062f
SSDEEP 196608:6/s+5mg+lnrv/K6bJZhKw0sf130AMOSfNDb:6//g/ZoE1kC8F
TLSH
T10276CF87EB818C6AC4FF533AA876036127335D5597838F831949B278BCB75C45E89BC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8fb1ae608022da47202748702aebf3832d790efbf4de782e45406a7969372b63

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Kxbnph Xrfuftvj,OU=Kjuoueff,O=Ortxtvcpfootzx,L=Veprputolf,ST=Lkpjxwpjbs,C=OT

hfgx.mqfy.fejku

1.apk

SHA256 54d4cb45fb7a18780ff2ccc7314b9b51ae446c58a179abbf9e62ce0c28539e8e
MD5 68299b87c2dd7178c1d9096f4c8da77c
SHA1 9bfe0d5e97d5fbe526ca43e62acb91bdc833526d
SHA512 84294753604abf2b820e416cf6f43be129cb1f8d5f9b483f13f4812aeee52b2fc8b7fac1c6adbb260b08a23cc4b188e44bdb7dde1f9b71aff9e8dd9a75eed219
SSDEEP 49152:4Icyh0tKFD88p6ilZ0Io82vf+xGSJSJIt4+kfWRcBl7om5AgVw43MW60KtxUqFY:52ET0b80NPKnkxW43MHFY
TLSH
T119862B07BE017F6BC0DDBA3515678A45B7318C8B7767037AE604BA6CBCB2085C7A5B84
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:x64 arch:x86 arch:arm arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

12d14a0ceae6a778e4a1e099fda84cf759954448bde1979217f958a9096ee6e5

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Obpefd Nobutxgi,OU=Hcrejhmon,O=Ypsrbmllnjfefjl,L=Fvwjysjxhsax,ST=Fdkvlhgnuep,C=OX

hobfjp.anrxf.cucm

Android Permissions

NosTV.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

com.example.callrecorderapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.JUNK_A2URAMG8

android.permission.JUNK_AWUHJ1U4

android.permission.JUNK_Q5CBNMP6

android.permission.JUNK_ZIKUZBH8

android.permission.JUNK_QIUXFF5Y

NosTV.apk

File Signature issue

com.example.callrecorderapp.MainActivity

androidx.profileinstaller.ProfileInstallReceiver

com.example.callrecorderapp.AppStorageProvider

androidx.startup.InitializationProvider

1.apk

File Signature issue

com.example.myapplication.LauncherActivity

com.example.myapplication.PremissionActivity

com.example.myapplication.WakeUpActivity

com.google.ar.core.InstallActivity

com.example.myapplication.MyAccessibilityService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.example.myapplication.BootReceiver

com.example.myapplication.MyDeviceAdminReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

androidx.core.content.FileProvider