977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

General

Target
977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a
Size 72.0MB
Sample260416-ewrtnsft5j
SHA256 977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a
MD5 ed1fa9d95cb3d01899cdac64c70cf60f
SHA1 13ac48e0ecabf12c6065282114b007a90bcffe58
SHA512 1e98801ca950f38f3d53d1110a9d3e36d547f499de0d7dec8e7739bc5595977aa2f0e8e67842317feef885ad54ebaea18447b7640c77d8ae4bbbc48afc642190
SSDEEP 786432:rOCYVX8YL+Is8rSajK7zGR59Kb44gJDa13fs+iIlieHCip:rOCAzsO9Kb44gJyLiHeHCy
TLSH
T141F7D043F099843AC9EAE538AB5E5632B3247C4943929557360CB3107FBB6F04F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

File Explorer

977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

.apk 72.0MB

977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

SHA256 977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a
MD5 ed1fa9d95cb3d01899cdac64c70cf60f
SHA1 13ac48e0ecabf12c6065282114b007a90bcffe58
SHA512 1e98801ca950f38f3d53d1110a9d3e36d547f499de0d7dec8e7739bc5595977aa2f0e8e67842317feef885ad54ebaea18447b7640c77d8ae4bbbc48afc642190
SSDEEP 786432:rOCYVX8YL+Is8rSajK7zGR59Kb44gJDa13fs+iIlieHCip:rOCAzsO9Kb44gJyLiHeHCy
TLSH
T141F7D043F099843AC9EAE538AB5E5632B3247C4943929557360CB3107FBB6F04F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d2c888aa94f38aa54c6d2039e3a4b4dc0004d225cb47095d25b5d44ec2cd5bb4

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Anton Tananaev,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

org.traccar.client

com.google.firebase.components.ComponentDiscoveryService

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.huawei.hms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_LOCATION

oppo.permission.OPPO_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

org.traccar.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a

File Signature issue

org.traccar.client.MainActivity

com.transistorsoft.locationmanager.activity.TSLocationManagerActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.BootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.transistorsoft.locationmanager.util.LogFileProvider

androidx.startup.InitializationProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.google.firebase.provider.FirebaseInitProvider

com.google.mlkit.common.internal.MlKitInitProvider

Android Permissions

977006e83b9d906e2f3bf32d0a4db6af262fb425fc30c5cb65ed45d05da66b9a