wlwplapks.zip
- SHA256 f238a051f6fb3832b3df4386d97140f8734d051b32ad2e207613acd6b5e78749
Behavioral task
behavioral1
Sample
Weather Live Wallpapers v2.31.0 (Premium).apk
Resource
android-x64-arm64-20260325-en
android-11-x64
11 signatures
150 seconds
General
- Target wlwplapks.zip
- Size 37.5MB
- Sample260411-c2eeesas4t
- SHA256 f238a051f6fb3832b3df4386d97140f8734d051b32ad2e207613acd6b5e78749
- MD5 5229cb0a3ceb28703e22ebbeea588268
- SHA1 59b94308fbdf106167f7e71008e3c4b5ded465b5
- SHA512 4a1a6bceed49d5eca09a4bac01ab58eb2e176f931efd4a433eb3bce7351ee666e753f9cde62eaa8bb45d7950a551d6fbbbfd990829ee119cac39f758b3d82cd1
- SSDEEP 786432:R3zR+P8Oz5S5o26Gk55FbWpHIQ/i/nRQ2ay/jHd+WuXEFaXMz0IOgsfkT:lzR+8ORGi5NW5IQa/S2/qXErOgsfs
- TLSH T1D08733879D00D56245A62939D93376C3D3751A8B93F7B373AA033B60652C06BADB831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- SuperCardX payload 1 IoCs
resource yara_rule static1/unpack001/Weather Live Wallpapers v2.31.0 (Premium).apk family_supercardx - Supercardx family
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers. android.permission.BIND_WALLPAPER - Requests dangerous framework permissions 4 IoCs
description ioc Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows an app to post notifications. android.permission.POST_NOTIFICATIONS - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Weather Live Wallpapers v2.31.0 (Premium).apk
File Explorer
-
wlwplapks.zip.zip 37.5MB
-
Weather Live Wallpapers v2.31.0 (Premium).apk.apk 42.7MB
Weather Live Wallpapers v2.31.0 (Premium).apk
- SHA256 457234ef2a83293b19170ae5b913f6a971956a7c8bd79bdc7431b928799a6ac2
- MD5 14e36342fac0fb189e5dc968d69bdddc
- SHA1 7ff89ee75b2dfad40e919ef8e743fa9a8295883d
- SHA512 4b9eb89db2fce7687341fe28d4f4cc54648f64a542f5ca2d6912113a9a93d5fec699b5d53c32d72b4a617f9668de7121c651f8ecd6bf69088ad743b8ce53787f
- SSDEEP 786432:phdvG5x5VUKIDRkobLAR6Uc8Eo+3pcqRYGYOH2HZ/fMNLjqvui6+LMBf2:HdvLDZGLcVpcqr2dfFvuv+Z
- TLSH T150A71203F7498D2AC8E37A35457B5372A2165CA8579382CF5A00F6383EB36D58F2A7C5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
SuperCardX payload
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
e8fe90d44f19d1ed75aa135511570df2626bb65103268021f306f025fe79f7ca
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
C=IN
Subject
C=IN
Serial Number
47:72:3c:30
Issuer
C=IN
Timespan
Nov 1, 2020 - Oct 26, 2045
com.skysky.livewallpapers
com.skysky.livewallpapers.clean.presentation.feature.detail.DetailActivityCompose
com.android.alarm.permission.SET_ALARM
android.permission.WAKE_LOCK
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.INTERNET
com.google.android.c2dm.permission.RECEIVE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.QUICKBOOT_POWERON
android.permission.POST_NOTIFICATIONS
com.google.android.gms.permission.AD_ID
android.permission.VIBRATE
com.android.vending.CHECK_LICENSE
android.permission.ACCESS_WIFI_STATE
com.android.vending.BILLING
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.FOREGROUND_SERVICE
com.skysky.livewallpapers.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.skysky.livewallpapers.clean.presentation.feature.detail.DetailActivityCompose
android.intent.action.MAIN
android.intent.action.VIEW
com.skysky.livewallpapers.clean.presentation.feature.settings.SettingsActivity
android.intent.action.VIEW
com.skysky.livewallpapers.clean.presentation.feature.location.LocationActivityCompose
com.skysky.livewallpapers.clean.presentation.feature.scenes.ScenesActivity
com.skysky.livewallpapers.clean.presentation.feature.weathersource.WeatherSourceActivity
com.skysky.livewallpapers.clean.presentation.feature.auth.login.LoginActivity
com.skysky.livewallpapers.clean.presentation.feature.widget.config.NotificationConfigActivity
com.skysky.livewallpapers.clean.presentation.feature.widget.config.WidgetConfigActivity
android.appwidget.action.APPWIDGET_CONFIGURE
com.skysky.livewallpapers.clean.presentation.feature.widget.config.WidgetConfigWithForecastActivity
android.appwidget.action.APPWIDGET_CONFIGURE
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.yandex.mobile.ads.features.debugpanel.ui.IntegrationInspectorActivity
androidx.credentials.playservices.controllers.identityauth.HiddenActivity
androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
com.skysky.livewallpapers.clean.presentation.launch.GraphicService
android.service.wallpaper.WallpaperService
com.skysky.livewallpapers.clean.presentation.feature.fcm.FCMService
com.google.firebase.MESSAGING_EVENT
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.components.ComponentDiscoveryService
io.appmetrica.analytics.internal.AppMetricaService
io.appmetrica.analytics.IAppMetricaService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.skysky.livewallpapers.remote.widgets.providers.DetailWidget1
android.appwidget.action.APPWIDGET_UPDATE
com.skysky.livewallpapers.remote.widgets.providers.DetailWidget2
android.appwidget.action.APPWIDGET_UPDATE
com.skysky.livewallpapers.remote.widgets.providers.DetailWidget3
android.appwidget.action.APPWIDGET_UPDATE
com.skysky.livewallpapers.worker.AppBroadcastsReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OF
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION