6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.zip
- SHA256 e154ba3ff09501e108d018125d8d115c64d25ae797110fad78aefa9a4465ac8e
Password
infected
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.zip
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
General
- Target 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.zip
- Size 4.3MB
- Sample260413-nr9clad191
- SHA256 e154ba3ff09501e108d018125d8d115c64d25ae797110fad78aefa9a4465ac8e
- MD5 2af78594556f0d9e19b60ea005103a63
- SHA1 93863d63eca10bc1ad5ed21a5f830b0a99040687
- SHA512 c7ea9e278e724e781530f69eb3906ae4036001f3aec03d34c99c1015713c1101b66d91b017e39675dbd38482fcf83287294eb0212df040e98ee59c987b56e902
- SSDEEP 98304:fw5FlK0RkEQorQJQ0xj31JFSsM4QfxFXe:o5FlKXEQorQCy3f8sofxFu
- TLSH T19A26334E228907844B986F5D877804CB56FE692DB2C5F1F457CAE5F208C25EC071FAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls. android.permission.BIND_SCREENING_SERVICE - Requests dangerous framework permissions 27 IoCs
description ioc Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO Allows an application a broad access to external storage in scoped storage. android.permission.MANAGE_EXTERNAL_STORAGE Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk
File Explorer
-
6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.zip.zip 4.3MB
-
6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk.apk 6.5MB
6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e.apk
- SHA256 6a41be0be47457c93f9639921e5199c3cb89ba117dcc6f05e86441414384422e
- MD5 8e890e212aa0710700d359ed384f24af
- SHA1 1d93aabeb06032499aacbf6a7704805539aff5c1
- SHA512 298f62c3ba46a2c326387c152e5af13ed8bc50a57119457af9d89b199dd2b68dbcdf39be2dc8eedc88804d5d542c5a11269dd2a915a9893d1ea05f4610773ce5
- SSDEEP 98304:EE34IpX34IpQvcQLdMbxzTHCcX7ECPydi9rnnm:homo5cAMdzTCYFagm
- TLSH T17166CF07F6828F65C9BD837B95BA87603335AE45A743870B2509F3B87CA72D45B843C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
e2c41d748fab8ba6ebbf2cb993027a7fd66335344e81aeedc35c380a890566d2
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
Subject
CN=Android Debug,O=Android,C=US
Serial Number
ff:dd:fa:54:72:7c:ce:73
Issuer
CN=Android Debug,O=Android,C=US
Timespan
Feb 5, 2026 - Jun 8, 3025
com.ypunxi.uzonfcyw
com.ypunxi.uzonfcyw.avqqvvkkqhuqbs
android.permission.ACCESS_NETWORK_STATE
android.permission.VIBRATE
android.permission.GET_PACKAGE_SIZE
android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.READ_PHONE_NUMBERS
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.BLUETOOTH
android.permission.CALL_PHONE
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.RECORD_AUDIO
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_UNINSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VISUAL
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.DISABLE_KEYGUARD
android.permission.GET_CLIPS
android.permission.READ_CLIPS
android.permission.WRITE_CLIPS
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.USE_EXACT_ALARM
android.permission.SCHEDULE_EXACT_ALARM
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
com.ypunxi.uzonfcyw.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.ypunxi.uzonfcyw.cjjaybffzdublimfpttgeehjkbjmonzvev
com.ypunxi.uzonfcyw.hmgkpewigshtfw
com.ypunxi.uzonfcyw.ugzjehdkmlxesajsnpajksbztikcyfbsdl
com.ypunxi.uzonfcyw.wuatpdmgpbwnrufevrexwgooofjyiusjpm
com.ypunxi.uzonfcyw.uqjxcglyllofra
com.ypunxi.uzonfcyw.fyjlglgxyjrqdl
com.ypunxi.uzonfcyw.avqqvvkkqhuqbs
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SENDTO
com.google.android.gms.common.api.GoogleApiActivity
org.eclipse.paho.android.service.MqttService
com.ypunxi.uzonfcyw.ContactSMSService
com.ypunxi.uzonfcyw.MyToastService
com.ypunxi.uzonfcyw.domlrklgnbgply
com.ypunxi.uzonfcyw.mlhqqqlergcxhk
com.ypunxi.uzonfcyw.ynrwhrboxqgyyvtfbuuxeqninobckbwtnb
com.ypunxi.uzonfcyw.mfdiocbigubtxm
android.accessibilityservice.AccessibilityService
com.ypunxi.uzonfcyw.gsriwhpbxeazxz
android.telecom.CallScreeningService
com.ypunxi.uzonfcyw.zvtvpvibrgopcimpekmeskxpsyfyotzpeq
android.intent.action.RESPOND_VIA_MESSAGE
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.ypunxi.uzonfcyw.MyAdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
com.ypunxi.uzonfcyw.wrrwaupfiomnlyclthkvrnxyhvfgwkxahs
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER
com.ypunxi.uzonfcyw.czoqqmdhwwuisonmynghdzuglmdayzzltf
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.SCREEN_ON
com.ypunxi.uzonfcyw.bkwjkvdaeqysxbuxrphxtbeomzpdtuhomj
android.provider.Telephony.WAP_PUSH_DELIVER
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION