Resubmissions

01/04/2026, 00:28

260401-asrbhsaw81

31/03/2026, 07:05

260331-hwhsjsay6s10

General

  • Target
    84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e
  • Size 2.0MB
  • Sample260401-asrbhsaw81
  • SHA256 84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects Kimwolf botnet 1 IoCs
  • Kimwolf family
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e
    .apk 2.0MB

84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e

  • SHA256 84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Kimwolf botnet

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
230cb0412df8ae2af6399d1d3c3be3e2d9b31de44fe88475cb982c16abe468da
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
com.n2.systemservice0644

Android Permissions

84cf4aac1e063394be3be68fea3cb9526e567c0aeaaf39b4834411970c00921e

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.INTERNET

com.n2.systemservice0644.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION