462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529[.]apk

Resubmissions

02/05/2026, 13:32

260502-qtc4aahv4y10

02/05/2026, 13:06

02/05/2026, 12:24

06/04/2026, 09:12

06/04/2026, 06:45

Sharing

Copy URL Twitter E-mail

General

Target
462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk
Size 2.2MB
Sample260502-pk65bsft9t
SHA256 462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529
MD5 e143e7e9c6518566b164d17779aeaced
SHA1 eb5c102409f45d8e3e0c137f5d3f21aed5cc2032
SHA512 de05f5a053a3b1d445b8e28790a222e27c2cb48e6affdc5a353a76657c0abe5362f8862f5553d226257cf5d369ec3e6dfe4ac02f69b3695a74f5b6ea068bba36
SSDEEP 49152:3bXariYd8Zkxqm3VSd63y8ZipwkHkB1seN0ELOcnDRoG6MnPhbe:LXaOfZkB3VSdKiikuOcnDClMo
TLSH
T12CB5333B4B00C9DADD6B8B70C2555BB2A48F15544B5EBEC69F4F222C19A36D0A358FF0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk

File Explorer

462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk

.apk 2.2MB

462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk

SHA256 462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529
MD5 e143e7e9c6518566b164d17779aeaced
SHA1 eb5c102409f45d8e3e0c137f5d3f21aed5cc2032
SHA512 de05f5a053a3b1d445b8e28790a222e27c2cb48e6affdc5a353a76657c0abe5362f8862f5553d226257cf5d369ec3e6dfe4ac02f69b3695a74f5b6ea068bba36
SSDEEP 49152:3bXariYd8Zkxqm3VSd63y8ZipwkHkB1seN0ELOcnDRoG6MnPhbe:LXaOfZkB3VSdKiikuOcnDClMo
TLSH
T12CB5333B4B00C9DADD6B8B70C2555BB2A48F15544B5EBEC69F4F222C19A36D0A358FF0
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ac9206d14374362b5a4f2265d26083f917b9e5a5

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

kcbemzsjob.pcqswfdcpw.xhnxkqw

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Arelyvibrant

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Tpurseleopard

com.google.android.gms.common.api.GoogleApiActivity

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Rrocketloop

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Awelcomebaby

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.MainActivity

android.intent.action.MAIN

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Rangerservice

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Bdutchvideo

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Pgatherdigital

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Knegativesuccess

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Qcrouchseven

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Caddressgenuine

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ostudentrule

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Tmeadowelevator

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.SendSms

android.intent.action.SEND android.intent.action.SENDTO

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Kkeepdeal

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Dtrackengine

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Stortoiseword

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Harmornegative

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Nvirtualfind

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Kdepartsoup

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityPermissions

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Canalystpaper

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Xdegreeexpand

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Screenshot.ActivityScreenshot

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Zbuddywest

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityInjection

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Dbadgeclaw

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityGetNumber

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Wjealousstone

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityAlert1

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Agingerspatial

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Fadulturge

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityGetSMS

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Zblackbiology

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ytentdevelop

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityAlert2

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Klimbalbum

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityStartUSSD

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Gveteranvast

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityPushInjection

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Oanalystbadge

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityOpenURL

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Iboxincome

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Relementkeen

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Fhirespray

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Xupholdillegal

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Mobtainderive

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Qrotatemenu

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Mwhenyard

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Xinsidesince

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Isandfinal

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Opostexcuse

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ypluglist

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Rpaymentplunge

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Nalterfrost

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Iinsectmail

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Noccurseed

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Bjacketmoral

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Edropgloom

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Cmadsoon

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Uattenddenial

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Zmonstertornado

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Hfencetiger

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Zhawkspread

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Gticketlegend

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Spoetauto

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Bsaladfragile

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Balienone

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Gvolcanohungry

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityScreenLocker

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Phardawkward

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Sdiarybird

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Gpuppyvacuum

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityAccessibility

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Fthundershrug

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Lhatstuff

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.ActivityPlayProtect

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ecleanplay

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Kburstnoble

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Kobtainaccount

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Braillumber

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Activity.LookScreen

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Hcolorparent

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Pgruntrally

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Acloudalbum

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Qpartystand

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ecoverguide

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Apearscrub

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Yendunable

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Amaximumdouble

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Ypulsereturn

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Zbelievecousin

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Dresisttissue

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Qstepunlock

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceHeadlessSmsSend

android.intent.action.RESPOND_VIA_MESSAGE

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceInjections

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceGeolocationNetwork

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceCommands

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.StartWhileGlobal

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceGeolocationGPS

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceDeleteSMS

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceModuleNotification

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceToast

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServicePlayProtectToast

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceAccessibility

android.accessibilityservice.AccessibilityService

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.StartWhileRequest

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Screenshot.ServiceScreenshot

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Screenshot.ServiceSendRequestImageVNC

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Sound.ServiceStreamSound

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceRAT

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceFindFiles

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceCryptFiles

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Sound.ServiceRecordSound

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Spam.ServiceSpamSMS

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.API.Spam.ServiceSenderSpamSMS

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.socks.ServiceForwardingTunel

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceLookScreen

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServicePedometer

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.LogSrv

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Alarm.EndlessService

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.Alarm.JobSchedulerService

wtqclkfjtgtfopg.mezxgs.gsewiiaxsulcukjlcyeqpdye.ServiceNL

android.service.notification.NotificationListenerService

Android Permissions

462e131e3b1b3e72f475374496bd6d0067fb271b78d25302f4798764e961e529.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_SMS

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_SMS

android.permission.BROADCAST_STICKY