Install[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Install.apk
Size 3.0MB
Sample260513-dh8placs2x
SHA256 3502fa570ada49eaeeaa4785bb1897ed91dfadaa76c5e8626c5b8e944d8f5f01
MD5 cb951b4667ba57b55c38cbec22ba55da
SHA1 77835e4a185cdef921f0dd6746b8b179b8dee7d2
SHA512 f1bd60238a65d7a5cd3747976d650fc5fa8696e2ccdc4e4504106566767ad8434e8e45c6263a3add66c0decb95eafe51debc2c35c113948a8e90a2bd767e0001
SSDEEP 98304:I1sMy5FdVTiPLJV02DxgvrqkVnNKiCmdY:I1sMy5FdliPLr0mgvrnVNKwY
TLSH
T123E51216F7D4662FD4BE92316D980222A331DEA1BB826B873608337D5CF71980F653D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Install.apk

File Explorer

Install.apk

.apk 3.0MB

Install.apk

SHA256 3502fa570ada49eaeeaa4785bb1897ed91dfadaa76c5e8626c5b8e944d8f5f01
MD5 cb951b4667ba57b55c38cbec22ba55da
SHA1 77835e4a185cdef921f0dd6746b8b179b8dee7d2
SHA512 f1bd60238a65d7a5cd3747976d650fc5fa8696e2ccdc4e4504106566767ad8434e8e45c6263a3add66c0decb95eafe51debc2c35c113948a8e90a2bd767e0001
SSDEEP 98304:I1sMy5FdVTiPLJV02DxgvrqkVnNKiCmdY:I1sMy5FdliPLr0mgvrnVNKwY
TLSH
T123E51216F7D4662FD4BE92316D980222A331DEA1BB826B873608337D5CF71980F653D6
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

48fb6a623653340a3a17c1e099ee2f580ad77cc19b61aa647c285f24d4ca448d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Nkhglaqxjomtl,O=Gnphkbx,L=Lzgbe,ST=Ukkbymdxjphdt,C=IN

net.thczvawmhxgon

mezsz.leumi.FFVTQ

android.intent.action.MAIN

mezsz.leumi.uvOI

mezsz.leumi.ngt

mezsz.leumi.PW

mezsz.leumi.f

mezsz.leumi.nRk

mezsz.leumi.KqEH

mezsz.leumi.AbJ

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerWaterfallKeywordsActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.external.InterstitialActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.chartboost.sdk.view.CBImpressionActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.vungle.ads.internal.ui.VungleActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.PopupAdActivity

sg.bigo.ads.api.LandingStyleableActivity

sg.bigo.ads.api.LandscapeAdActivity

sg.bigo.ads.api.CompanionAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.AudienceNetworkActivity

Android Permissions

Install.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_COARSE_LOCATION

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_OWN_CALLS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

net.thczvawmhxgon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

Install.apk

File Signature issue

mezsz.leumi.FFVTQ

mezsz.leumi.uvOI

mezsz.leumi.ngt

mezsz.leumi.PW

mezsz.leumi.f

mezsz.leumi.nRk

mezsz.leumi.KqEH

mezsz.leumi.AbJ

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.adview.AppLovinFullscreenActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

com.applovin.mediation.MaxDebuggerActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.applovin.mediation.MaxDebuggerWaterfallKeywordsActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.external.InterstitialActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.chartboost.sdk.view.CBImpressionActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.vungle.ads.internal.ui.VungleActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.PopupAdActivity

sg.bigo.ads.api.LandingStyleableActivity

sg.bigo.ads.api.LandscapeAdActivity

sg.bigo.ads.api.CompanionAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.AudienceNetworkActivity

mezsz.leumi.sGOc

mezsz.leumi.Qg

mezsz.leumi.lVp

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery