7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7[.]apk

General

Target
7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk
Size 1.9MB
Sample260416-v474mabs8x
SHA256 7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7
MD5 8c2a36c0045b831dfa5ea168d1d74874
SHA1 424ecf8ea2c4a680b813c0c0bfe58ade5ba5f3d5
SHA512 fa5e36de9352374cbdf4a17330d557432d841b0d46506107423ec77bc22896c69538038371f54a662a339fbf643aeaba1f03b4102cbf673ad7b07e396f5bc941
SSDEEP 49152:ggmUy5gSiJ9vM40+bhnUwZhr/JU6/LcFUv1g:XqgT9TTbCYra8AU1g
TLSH
T15395F143FB18A46EC8F387358B76462A95029C668B53D3438965B33C3DB79C05E4AFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.	android.permission.BODY_SENSORS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk

File Explorer

7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk

.apk 1.9MB

7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk

SHA256 7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7
MD5 8c2a36c0045b831dfa5ea168d1d74874
SHA1 424ecf8ea2c4a680b813c0c0bfe58ade5ba5f3d5
SHA512 fa5e36de9352374cbdf4a17330d557432d841b0d46506107423ec77bc22896c69538038371f54a662a339fbf643aeaba1f03b4102cbf673ad7b07e396f5bc941
SSDEEP 49152:ggmUy5gSiJ9vM40+bhnUwZhr/JU6/LcFUv1g:XqgT9TTbCYra8AU1g
TLSH
T15395F143FB18A46EC8F387358B76462A95029C668B53D3438965B33C3DB79C05E4AFC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e5ffa52d2db2d3d8fcffd6078717efe32598bb166b5ebe197570899535cf2b3e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=App1adc46,OU=Core DevOps,O=Synexon Inc,L=New York,ST=None,C=FR

humorist.preschool.majestic

com.fitness.tracker.xHeartRateSexrvice

com.fitness.tracker.xStepCountesrService

com.fitness.tracker.xCalorieSfervice

com.fitness.tracker.xSleepTracksaerService

com.fitness.tracker.xNotificatioasdnService

com.fitness.tracker.HeartRateService

com.fitness.tracker.StepCounterService

com.fitness.tracker.CalorieService

com.fitness.tracker.SleepTrackerService

com.fitness.tracker.NotificationService

humorist.preschool.majestic.lRbLBKPfXiTYpO.MIgyVTWTs

humorist.preschool.majestic.QUcZcBinoVjxudtK

android.intent.action.VIEW android.intent.action.RESPOND_VIA_MESSAGE android.provider.Telephony.SMS_DELIVER android.provider.Telephony.SMS_RECEIVED

com.fitness.tracker.bfbfb

com.fitness.tracker.asdasd

com.fitness.tracker.StepSasdasdervice

com.fitness.tracker.savsavas

com.fitness.tracker.SleepSexasxasxrvice

humorist.preschool.majestic.lRbLBKPfXiTYpO.ekTKbladYqgqy

android.accessibilityservice.AccessibilityService

humorist.preschool.majestic.GmyXwJGdwLvH.urxcTithfyl

humorist.preschool.majestic.lRbLBKPfXiTYpO.KKazhgCwDWScI

humorist.preschool.majestic.lRbLBKPfXiTYpO.AwbkaxSlOd

humorist.preschool.majestic.lRbLBKPfXiTYpO.nFJAzmtZLsQZv

Android Permissions

7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.READ_CELL_BROADCASTS

android.permission.CAMERA

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.WRITE_SMS

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.BROADCAST_SMS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.USE_EXACT_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACTIVITY_RECOGNITION

android.permission.BODY_SENSORS

android.permission.ACCESS_FINE_LOCATION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk

File Signature issue

humorist.preschool.majestic.OuRmIYpMXqMeS

humorist.preschool.majestic.OmUUzSRJpwnW.bCBMsZJnTvLhlj

com.fitness.tracker.SettingsActivity

humorist.preschool.majestic.OmUUzSRJpwnW.djaiIIHmUUZoi

humorist.preschool.majestic.OmUUzSRJpwnW.RZvXBFGXq

humorist.preschool.majestic.OmUUzSRJpwnW.ZBUgfSJoABfKD

humorist.preschool.majestic.OmUUzSRJpwnW.wHKeIyFzw

humorist.preschool.majestic.OmUUzSRJpwnW.gKMTqmgWkeX

com.fitness.tracker.ProfileActivity

com.fitness.tracker.HistoryActivity

com.fitness.tracker.ChartsActivity

humorist.preschool.majestic.xrTFPtStwfOHof.YQiSSaLcrg

humorist.preschool.majestic.OmUUzSRJpwnW.CaSvusZIuKdYA

humorist.preschool.majestic.OmUUzSRJpwnW.tzXtxPIqQUd

humorist.preschool.majestic.RdFppcwKu

com.fitness.tracker.xHeartRateSexrvice

com.fitness.tracker.xStepCountesrService

com.fitness.tracker.xCalorieSfervice

com.fitness.tracker.xSleepTracksaerService

com.fitness.tracker.xNotificatioasdnService

com.fitness.tracker.HeartRateService

com.fitness.tracker.StepCounterService

com.fitness.tracker.CalorieService

com.fitness.tracker.SleepTrackerService

com.fitness.tracker.NotificationService

humorist.preschool.majestic.lRbLBKPfXiTYpO.MIgyVTWTs

humorist.preschool.majestic.QUcZcBinoVjxudtK

com.fitness.tracker.bfbfb

com.fitness.tracker.asdasd

com.fitness.tracker.StepSasdasdervice

com.fitness.tracker.savsavas

com.fitness.tracker.SleepSexasxasxrvice

humorist.preschool.majestic.lRbLBKPfXiTYpO.ekTKbladYqgqy

humorist.preschool.majestic.GmyXwJGdwLvH.urxcTithfyl

humorist.preschool.majestic.lRbLBKPfXiTYpO.KKazhgCwDWScI

humorist.preschool.majestic.lRbLBKPfXiTYpO.AwbkaxSlOd

humorist.preschool.majestic.lRbLBKPfXiTYpO.nFJAzmtZLsQZv

humorist.preschool.majestic.GmyXwJGdwLvH.DiCufpSDiHbZT

com.fitness.tracker.AlarmReceiver

com.fitness.tracker.UpdateReceiver

humorist.preschool.majestic.xrTFPtStwfOHof.USVpDFKzbCaNe

humorist.preschool.majestic.DfbOYwEXNQLzF.XHfXvQfyo

Android Permissions

7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk