1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

General

Target
1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc
Size 72.2MB
Sample260506-e8w9xsav2x
SHA256 1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc
MD5 059e65d994984cc31dd1cf07d4650483
SHA1 ece5055072a1bb5ab3be3a847f0e2604e053ed5d
SHA512 1256097338d646a1b17eefb867b319d01e3da2ac64ed3f94cd89da9babb14df4d2df3ec045de263afde96f0f3758926696ee28d703990a91d6ac29f3c6ed4063
SSDEEP 786432:pNPuRL+IfPSwOfolKjK7zGRqlePwzr0HaW3riIQGbeHhx:pNYzfXlePwzrxMntbeHhx
TLSH
T1E8F7D043F099843AC8EAE538AB5E4632B3247C4947929557760CB3107FBB6F04F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

File Explorer

1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

.apk 72.2MB

1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

SHA256 1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc
MD5 059e65d994984cc31dd1cf07d4650483
SHA1 ece5055072a1bb5ab3be3a847f0e2604e053ed5d
SHA512 1256097338d646a1b17eefb867b319d01e3da2ac64ed3f94cd89da9babb14df4d2df3ec045de263afde96f0f3758926696ee28d703990a91d6ac29f3c6ed4063
SSDEEP 786432:pNPuRL+IfPSwOfolKjK7zGRqlePwzr0HaW3riIQGbeHhx:pNYzfXlePwzrxMntbeHhx
TLSH
T1E8F7D043F099843AC8EAE538AB5E4632B3247C4947929557760CB3107FBB6F04F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

83d209235580ec7367a68431351347e9623940e2351132d68ed9b8f6de13a7cb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Anton Tananaev,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

org.traccar.client

com.google.firebase.components.ComponentDiscoveryService

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.huawei.hms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_LOCATION

oppo.permission.OPPO_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

org.traccar.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc

File Signature issue

org.traccar.client.MainActivity

com.transistorsoft.locationmanager.activity.TSLocationManagerActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.BootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.transistorsoft.locationmanager.util.LogFileProvider

androidx.startup.InitializationProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.google.firebase.provider.FirebaseInitProvider

com.google.mlkit.common.internal.MlKitInitProvider

Android Permissions

1e0349d13f58bcdb59beeca5de080d5cf4555df23d4fb06016363c15d16f70fc