Overview

overview

10

Static

static

10

019cd4ca5c...66.apk

android-11-x64

8

update.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566
  • Size 12.8MB
  • Sample260331-hwee5afy8j
  • SHA256 019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
pixrevolution

Malware Config

Signatures

  • Detects PixRevolution Trojan 1 IoCs
  • Pixrevolution family
    pixrevolution
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566
    .apk 12.8MB
  • update.apk
    .apk 12.0MB

019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566

  • SHA256 019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm64arch:armarch:x86arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
d3a5573efc248772f553e5ac63259daba93540a3b10bee6e7ebce2e5e686d01f
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Lite Platform,OU=Apps Division,O=Core Solutions,L=Belo Horizonte,ST=MG,C=BR
com.ventocalmo.rvlapp

Android Permissions

019cd4ca5c50bf4e733bc0bee66b5a0c97cf8b0e297d396ccdeabd697ac8d566

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

com.ventocalmo.rvlapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION