fantasyhub | 2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31[.]zip

Resubmissions

09/03/2026, 18:10

260309-wsf2facs9110

09/03/2026, 18:10

260309-wr7srscs8w10

Sharing

Copy URL Twitter E-mail

General

Target
2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.zip
Size 8.0MB
Sample260309-wsf2facs91
SHA256 74617f4eb58b636e65745c1cf3c21aafa828e24d72a000204cd443b8d3d45144
MD5 fd06c558dcb3e6f04c2aed7bc206133e
SHA1 3fa10cbd4ce46faec8c3dd1d4aef08904f346d72
SHA512 22ff51d395c2e82b158d18df49d7ce0ae6e1ad9efd6a5ef42be6065ce49414c19d905e51c7043132b11eedf38afea770a8ff231c7b95c511584f10119f87aadf
SSDEEP 196608:6qe1aTX00AHLbWsMecGEp6L+VMzHUoCSGW3tHucTi:6qsQk0Ubcs9QZuI
TLSH
T1DC8633E0B9A458112FAC4CB5903F9588C5DC49891B71E1DEAD7C806AE2B0C9E1E7FCD7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

fantasyhub

Malware Config

Signatures

FantasyHub payload 1 IoCs

resource	yara_rule
static1/unpack001/2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk	family_fantasyhub

Fantasyhub family
fantasyhub

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk

File Explorer

2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.zip

.zip 8.0MB
2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk

.apk 8.2MB

2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.zip

SHA256 74617f4eb58b636e65745c1cf3c21aafa828e24d72a000204cd443b8d3d45144
MD5 fd06c558dcb3e6f04c2aed7bc206133e
SHA1 3fa10cbd4ce46faec8c3dd1d4aef08904f346d72
SHA512 22ff51d395c2e82b158d18df49d7ce0ae6e1ad9efd6a5ef42be6065ce49414c19d905e51c7043132b11eedf38afea770a8ff231c7b95c511584f10119f87aadf
SSDEEP 196608:6qe1aTX00AHLbWsMecGEp6L+VMzHUoCSGW3tHucTi:6qsQk0Ubcs9QZuI
TLSH
T1DC8633E0B9A458112FAC4CB5903F9588C5DC49891B71E1DEAD7C806AE2B0C9E1E7FCD7
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk

SHA256 2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31
MD5 00d9cf98baa6178949969d3471691dd4
SHA1 f702f56ebcb68301508084a6045925b34c49c274
SHA512 3f648b8f3c92e4015e9fdb8c034042b15e2522e130225ee5d3f0109385646e912dcd004f8b987ebcf8b23fd15709a6a927b24df27d949785ece6662fa3901b2e
SSDEEP 196608:64jSh1dNhS9hLoukJaWL7+RkS4/UwzG2iNmKr:9M1dNhS9h8b777SiiEKr
TLSH
T181963396F729A52ED97B41710A8A473223669E09CEE7D307A1543B2C783B3C98F44FC5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

FantasyHub payload
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

File Signature issue

Digest

346fdd82f683f1862018f39c0aff3cd02fc72179c4e16210656d97a1e59ebb27

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=main_app,O=Org,L=City,ST=State,C=RS

com.pc07b68963.ikk18

2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.zip

2a5f808f305334a0cfec1daa7290ace649079ab9c6dbed43f77ffdccb55c6e31.apk

File Signature issue

com.example.MetaMask.MainActivity

com.example.MetaMask.PermissionCheckService

com.example.MetaMask.UnknownSourcesMonitorService

com.example.MetaMask.InstallResultReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider