an1store[.]apk | Triage™

General

Target
an1store.apk
Size 29.9MB
Sample260426-vx7vaacz21
SHA256 50526d97f3b8808cfc1f3fad6bc25a66598647f54a9118cbc7248ae127359d9e
MD5 f512aed2abebf7425eda3b60d82515c3
SHA1 1251fee6023ae1caa5beb7dae3ef137439f1f587
SHA512 09e1ba85d8e9c2d7e52e251610d9b05c6d76e8c1ad6aa63a6c8c0123ab8ab004230db938cccb843af3c294b82bb7e0b40f7bd4483178e59513672322a1c8cb73
SSDEEP 786432:w+6/WGByAqAw/QzcKC78YOABtBp9spgmF9RTAPKI:o/WGByHAwiK7HBB0ptFkR
TLSH
T1226733C7F779042FDDBE55B38DA604313B7A4E1A8592DB0A19547A2CADB33480F85BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
an1store.apk

File Explorer

an1store.apk

.apk 29.9MB

an1store.apk

SHA256 50526d97f3b8808cfc1f3fad6bc25a66598647f54a9118cbc7248ae127359d9e
MD5 f512aed2abebf7425eda3b60d82515c3
SHA1 1251fee6023ae1caa5beb7dae3ef137439f1f587
SHA512 09e1ba85d8e9c2d7e52e251610d9b05c6d76e8c1ad6aa63a6c8c0123ab8ab004230db938cccb843af3c294b82bb7e0b40f7bd4483178e59513672322a1c8cb73
SSDEEP 786432:w+6/WGByAqAw/QzcKC78YOABtBp9spgmF9RTAPKI:o/WGByHAwiK7HBB0ptFkR
TLSH
T1226733C7F779042FDDBE55B38DA604313B7A4E1A8592DB0A19547A2CADB33480F85BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a46a0789e1bab5fa0bd66b6c34d57590d0e6ac75bda286dd019233ebf0432539

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=A1,OU=A1,O=A1,L=Lazyland,ST=Lazyland,C=RU,1.2.840.113549.1.9.1=#0c176131407472346f6f33723334723334736466642e636f6d

com.an1.store

android.permission.INSTALL_PACKAGES android.permission.INTERNET android.permission.MANAGE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.REQUEST_DELETE_PACKAGES android.permission.REQUEST_INSTALL_PACKAGES android.permission.SYSTEM_ALERT_WINDOW android.permission.VIBRATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.CAMERA com.google.android.gms.permission.AD_ID android.permission.ACCESS_ADSERVICES_TOPICS android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.RECEIVE_BOOT_COMPLETED android.permission.POST_NOTIFICATIONS android.permission.WAKE_LOCK com.google.android.c2dm.permission.RECEIVE com.an1.store.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_MEDIA_AUDIO android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.ACCESS_WIFI_STATE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE

Android Permissions

an1store.apk

Permissions

android.permission.INSTALL_PACKAGES

android.permission.INTERNET

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.CAMERA

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.an1.store.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.ACCESS_WIFI_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

an1store.apk

File Signature issue

com.an1.store.MainActivity

expo.modules.video.FullscreenPlayerActivity

com.canhub.cropper.CropImageActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

expo.modules.notifications.service.NotificationForwarderActivity

com.google.android.gms.common.api.GoogleApiActivity

expo.modules.video.playbackService.ExpoVideoPlaybackService

com.google.android.gms.metadata.ModuleDependencies

expo.modules.notifications.service.ExpoFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

expo.modules.notifications.service.NotificationsService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.imagepicker.ImagePickerProvider

expo.modules.imagepicker.fileprovider.ImagePickerFileProvider

com.canhub.cropper.CropFileProvider

androidx.startup.InitializationProvider

expo.modules.clipboard.ClipboardFileProvider

expo.modules.filesystem.FileSystemFileProvider

com.google.firebase.provider.FirebaseInitProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

an1store.apk

File Signature issue

com.an1.store.MainActivity

expo.modules.video.FullscreenPlayerActivity

com.canhub.cropper.CropImageActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

expo.modules.notifications.service.NotificationForwarderActivity

com.google.android.gms.common.api.GoogleApiActivity

expo.modules.video.playbackService.ExpoVideoPlaybackService

com.google.android.gms.metadata.ModuleDependencies

expo.modules.notifications.service.ExpoFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

expo.modules.notifications.service.NotificationsService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.imagepicker.ImagePickerProvider

expo.modules.imagepicker.fileprovider.ImagePickerFileProvider

com.canhub.cropper.CropFileProvider

androidx.startup.InitializationProvider

expo.modules.clipboard.ClipboardFileProvider

expo.modules.filesystem.FileSystemFileProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

an1store.apk