0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.zip
- SHA256 8a3cb0110d45d71f335ae9c07afb38d9e4a57b46529ff045f8ec3de1e6926d0c
Password
infected
Static task
static1
6 signatures
Behavioral task
behavioral1
Sample
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.apk
Resource
android-33-x64-arm64-20260325-en
android-13-x64
10 signatures
150 seconds
General
- Target 0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.zip
- Size 3.5MB
- Sample260413-wt2pjadv6l
- SHA256 8a3cb0110d45d71f335ae9c07afb38d9e4a57b46529ff045f8ec3de1e6926d0c
- MD5 125cebbdbaf30dcb12d130a13da20529
- SHA1 093013da9bd008240fdf314cd45a9dc80bf2f157
- SHA512 9f8e2af8e977f44c238ef42128f45990f0923dc0059d3f397f322aea400895b6f0bbc063916646b219a43d2370abc1b5597b62f7c58a77f7f350fd5ce358e98c
- SSDEEP 49152:kqQXFxqo8g842El7p8N7sBg6AXA8JX8mrfiNZkdvEtHJ7qe9X0Nw5iu5KTARFg:gFxa47p8N1Nw858mj+ZrtHJxyuUiFg
- TLSH T17306337369918CF0A8B1B48DEDD7818AC8102B5EA1C5796D4209E5370AB4F2DDCDCE7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 2 IoCs
description ioc Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 10 IoCs
description ioc Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to record audio. android.permission.RECORD_AUDIO - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31 - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31 - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
File Explorer
-
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.zip.zip 3.5MB
-
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31.apk 3.7MB
0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
- SHA256 0da75ac97f4ec8954a961c270bcbe75bd2671c65cf25db45540b70f1ff403e31
- MD5 6cf5d6abcc04d1d37c85df5dc543ba0e
- SHA1 a6256e0aa101fc07319f19d6908f174ed8d14f5f
- SHA512 5d5f1d000d3ee111b01aa7df044357778c5701848a3672de6817c2cb3452843bc8408f7e31cca1f3321ced0c444f9e6425ca419ef03a397d5f12e4736d31d18a
- SSDEEP 98304:PkjRM+ktw5k9uh7a5KJZ96mJ8dDLwcH1alkNr:PARpaw59Ra5CuPw6J
- TLSH T1EF060108FFA49484C0226DB08585928B841B439EAEDDF0BF3F5994E87867C552647EFF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
File Signature issue
Digest
33f21e6c759e564c7342d91c68d0427e3f0821fd
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
teach.report.crane
opinion.acquire.alert.kab
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.GET_ACCOUNTS
android.permission.RECEIVE_SMS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.RECORD_AUDIO
opinion.acquire.alert.FAwTwOxJh
opinion.acquire.alert.RZcRwYqInFrNuRgZfZpDbYpLeTaTcSsTiMzWuUcFwPiUzHoFa
opinion.acquire.alert.BYeHoIqJfEtXuSoEaZzTdUlKfUgUzBcNyFlLpUrLxEaWfAsBtBjNj
opinion.acquire.alert.LAcRxIjJtYrXcGpBcGzOuIdWj
opinion.acquire.alert.YWdFyFiJaNzLjSkOyGwDd
opinion.acquire.alert.CPnIhYoXfAnBnYxWlUgExBuEnPsRiSwSmItWbUgPiKwPtWxTw
opinion.acquire.alert.JOcFcAbMrDaPgOgScBnGmCiPnEmUiOhShKnRrAnJl
opinion.acquire.alert.FWfPqIcBwMyLlTsUrKoRcZoWfKsWiWzDfMuThDyUuHnUiYdZlOqDdJp
opinion.acquire.alert.KZwUfAkLhRuQyWmKtZmItZwSlBoYhHu
opinion.acquire.alert.WErClBe
com.google.android.gms.common.api.GoogleApiActivity
opinion.acquire.alert.IPwTbYaKdOwZaOdFfYwLwUxIcAxFdQtYhCgBbLjHxOtQdRm
opinion.acquire.alert.HMtBcGxFdWgKoApHpXfCe
opinion.acquire.alert.wsutdxjbe
opinion.acquire.alert.JGfFgGzXlOoGqGsEwCfShThLwGjKl
opinion.acquire.alert.IIbTlAaJlDsQrBcSkKsLbEuKqQzFgCrEiKfXySdYeXcPqMeRkEoKu
opinion.acquire.alert.ewqdtgvmp
opinion.acquire.alert.NWcCdThUcTzNjPcMuCpQmTuSjDk
opinion.acquire.alert.QZlEjZxBiJpMaEfHmMwOkFnKfMaSmFjWzRmLaFfDxBoZlMlOiLo
opinion.acquire.alert.HJuFnYpBkOtOzRzOyZnGsQtHbQbXp
opinion.acquire.alert.WXzUtRrDrWwIpOzAiLnYxQlQi
opinion.acquire.alert.GNeZiUpImNdExSg
opinion.acquire.alert.PUgCdQiNmFuImQfKqGeZgLdHwOnZyLzAhEiMq
opinion.acquire.alert.pqodslvlucvqqdx
opinion.acquire.alert.XXqAgGsAuZaAlDxWhHcMeUfMuCoQkHcZdHnFmTg
opinion.acquire.alert.DXgAnTcEoPyMpGqTtSdNoYzNwKrAyCiIiIsPf
opinion.acquire.alert.hsryvt
android.intent.action.SEND
android.intent.action.SENDTO
opinion.acquire.alert.AJmRuBsQqYsWnAtBxPrYxRgJrDsDdXrSaZxYfMcMmCaBsSmBnUdChCw
opinion.acquire.alert.JGbKzYxXgCtZaTaNkJgWrSkUeTjPdTpAoNh
opinion.acquire.alert.SAlPbHeWqSgCwEuFdMgRyFzLdEfLkXb
opinion.acquire.alert.NQcMxQwOiGeGeNiLpFkIbRxGdOtXkYhTzPyUjHkLzFjYbGqHlCaJf
opinion.acquire.alert.WKlJsCfDoKs
opinion.acquire.alert.XBtZxCrSbGdYeJqPwDhYgEwUl
opinion.acquire.alert.EPkHsIbPhNjRaIuQbIhQsOfHfXcFwFwUxFsMtRxPfYfIfQpIe
opinion.acquire.alert.RXxOaNkOhUmMnMsItPaWcInHbHkDhNhTaYtLmKeZtAs
opinion.acquire.alert.GNgLmBaAsIxEfCt
opinion.acquire.alert.HXrNkXuIaYcLiCfCo
opinion.acquire.alert.wtdlzn
opinion.acquire.alert.KSrQhRjTzQqXfZeQkLr
opinion.acquire.alert.UPdPkYyJnDxObPuKnAeJqDlRqStLwSiCu
opinion.acquire.alert.CQyCeLyJgZtGoOcZrFpYuKlHdXqAlQhJjRwAaYaEpRaYnTtXbHm
opinion.acquire.alert.qzivmbljtvk
opinion.acquire.alert.JRdNgPqGyOnGrEpCqPsNuAsTtOk
opinion.acquire.alert.kab
android.intent.action.MAIN
opinion.acquire.alert.ANcZqYqHhBaBsMqLjKa
opinion.acquire.alert.CZxUdLxScXkXfUkPuYpEfLmGpCrMqHoHr
opinion.acquire.alert.WEqOyJzEpRzPuZmDsTnFbMjEiAsKkLrUuYgFkPzReRa
opinion.acquire.alert.cvsfkonqzjsqpq
opinion.acquire.alert.WChFwXsCdAhUkEr
opinion.acquire.alert.zyr
opinion.acquire.alert.MZnLxFxHjUhGsQyTuDnSnNuIrRhYiBbOpFlAnLlCsUjChSkFnQmTpWg
opinion.acquire.alert.IIzUbSfDhAxTnBlUoDfKd
opinion.acquire.alert.HYmPjKwOuFzPfXqPiPbHeNoJr
opinion.acquire.alert.UDeZuZgTjCmAfQjBjCgYyXpPbKtRa
opinion.acquire.alert.YGmJyFqOcTkYwNpJw
opinion.acquire.alert.ZBtMiIpIiOg
opinion.acquire.alert.pjescdyztkrl
android.service.notification.NotificationListenerService
opinion.acquire.alert.cxycj
opinion.acquire.alert.qcl
opinion.acquire.alert.ooz
opinion.acquire.alert.viojvp
opinion.acquire.alert.gkkkspekggdwz
opinion.acquire.alert.cbltrkxzmue
opinion.acquire.alert.jyxdbbcyseu
opinion.acquire.alert.ncpwheytsjng
android.intent.action.RESPOND_VIA_MESSAGE
opinion.acquire.alert.kydg
opinion.acquire.alert.unlnggqivnu
opinion.acquire.alert.reeev
opinion.acquire.alert.codqwssvff
opinion.acquire.alert.jnfrnffweoiidy
opinion.acquire.alert.arpewyiefnzkf
android.accessibilityservice.AccessibilityService
opinion.acquire.alert.ntniaogwdtvajns
android.provider.Telephony.WAP_PUSH_DELIVER
opinion.acquire.alert.fpzaguuovqa
android.app.action.DEVICE_ADMIN_DISABLED
android.app.action.ACTION_DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_ENABLED
opinion.acquire.alert.mlp
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.provider.Telephony.SMS_RECEIVED
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_DELIVER