TRENDRAFT X MOD V14 - APK Full Version[.]apks

Resubmissions

24/05/2026, 17:14

260524-vsfv1ab12n

09/05/2026, 22:33

20/04/2026, 22:11

18/04/2026, 14:07

08/04/2026, 23:00

15/03/2026, 00:39

Sharing

Copy URL Twitter E-mail

General

Target
TRENDRAFT X MOD V14 - APK Full Version.apks
Size 371.1MB
Sample260524-vsfv1ab12n
SHA256 acef35be45583b0cc379849f4e89be75f5f3d198f781da30d9e7a0177a3fed59
MD5 9d37e06942e312d73214cba34346254c
SHA1 ad631772ad76cdb32fb3f41247f234ad39179522
SHA512 2b7ce2efda39db6ffb5f28b9e4f37862c818deb13bcb14df720445b23ea5c3411ce51332f4e567155badb7ac25577d3ffcea4987a72702a18ee465f8cd027fd7
SSDEEP 6291456:cIZbRP3tqGu04utyJHRrIE/XzmlCNK6gekvaz5yOaAuT3olELMLN512dx8hbMnLF:T/t9u04utwxrL/ClYcOaAWo6Mwdiqxqg
TLSH
T1C70933F76F11DA137562337C1343BCC217AC13A98CEAAC5A6A05D38321D39F68ED6199
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
static1/unpack001/split_asset_pack_install_time.apk	patched_upx

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
unpack001/split_asset_pack_install_time.apk

Insecure Codesign Algorithm 2 IoCs

File was codesigned using an insecure algorithm.

resource
unpack001/split_asset_pack_install_time.apk
unpack001/split_config.arm64_v8a.apk

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/split_asset_pack_install_time.apk
unpack001/split_config.arm64_v8a.apk

File Explorer

TRENDRAFT X MOD V14 - APK Full Version.apks

.zip 371.1MB
base.apk

.apk 10.5MB
split_asset_pack_install_time.apk

.jar 295.2MB
split_config.arm64_v8a.apk

.jar 76.8MB

TRENDRAFT X MOD V14 - APK Full Version.apks

SHA256 acef35be45583b0cc379849f4e89be75f5f3d198f781da30d9e7a0177a3fed59
MD5 9d37e06942e312d73214cba34346254c
SHA1 ad631772ad76cdb32fb3f41247f234ad39179522
SHA512 2b7ce2efda39db6ffb5f28b9e4f37862c818deb13bcb14df720445b23ea5c3411ce51332f4e567155badb7ac25577d3ffcea4987a72702a18ee465f8cd027fd7
SSDEEP 6291456:cIZbRP3tqGu04utyJHRrIE/XzmlCNK6gekvaz5yOaAuT3olELMLN512dx8hbMnLF:T/t9u04utwxrL/ClYcOaAWo6Mwdiqxqg
TLSH
T1C70933F76F11DA137562337C1343BCC217AC13A98CEAAC5A6A05D38321D39F68ED6199
MD5 SHA1 SHA512 SSDEEP TLSH

base.apk

SHA256 c117314c71e4323942867c54e76b959148b87709feb181655480462e33ba6d89
MD5 e13799ee3b28bce8ef5f01e92a1c1d6e
SHA1 931e1fb191c022983121fc35acc66120c0aaf899
SHA512 0ba75eca6d2f1896aee99210f2e91c09c27467e9c9b14c7f40370fa65bc4b36a7049a61d5eefab8d55d1b4fa87279db87347f1c188de150dd3d87895ad8b6c9a
SSDEEP 196608:OCNWPLiYw+lQeBvfWy1WXWGkAGUqx12pMUgvrLYpna6104R8:OCqi1+LWmG1Gb1ZU6rkxaNM8
TLSH
T157B61296F74CE12BC47764724EBAA67242570D4A8B43EBA32544B21C68F39D48F8DFC4
MD5 SHA1 SHA512 SSDEEP TLSH

android

File Signature issue

Digest

38b7a55a30c47e92c6113290d00ab1b9d8251282cc42a8436a69169fb2744e26

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.dts.freefiremax

com.dts.freefireth.FFMainActivity

android.intent.action.MAIN android.intent.action.VIEW

com.beetalk.sdk.GarenaAuthActivity

com.beetalk.sdk.plugin.GGPluginActivity

com.beetalk.sdk.BTLoginActivity

com.garena.pay.android.GGPayActivity

com.beetalk.sdk.account.MigrateGuestActivity

com.twitter.sdk.android.core.identity.OAuthActivity

android.intent.action.VIEW

com.beetalk.sdk.plugin.impl.tiktok.TiktokShareResponseActivity

com.beetalk.sdk.plugin.GGPluginActivityCompat

com.vk.api.sdk.ui.VKWebViewAuthActivity

com.linecorp.linesdk.openchat.ui.CreateOpenChatActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

android.intent.action.VIEW

com.garena.unity.webview.UnityWebViewActivity

co.datadome.sdk.CaptchaActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.unity3d.plugin.downloader.UnityDownloaderActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.vk.api.sdk.ui.VKCaptchaActivity

com.vk.api.sdk.ui.VKConfirmationActivity

com.bytedance.sdk.open.tiktok.ui.TikTokWebAuthorizeActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.dts.freefireth.FFBroadcastReceiver

android.intent.action.BOOT_COMPLETED com.dts.freefireth.action.LOCAL_NOTIFICATION

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.FF.magicvoicemgr.LanguageReceiver

android.intent.action.LOCALE_CHANGED

com.unity3d.plugin.downloader.UnityAlarmReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

split_asset_pack_install_time.apk

SHA256 d5e49a318fc29b593424788c0edc8a0cee4e2ecf97b11846cdf76f49b46388a7
MD5 8d07aad1d624aa24ad391ff9a94518cc
SHA1 7c91d0df7ca07ae9f97ec3c204a958c62672ff1c
SHA512 e186d6694063d996fe03dda4d5bcc34bef3db9ebc7a8b70d6d69c6b7905a5155768d2efd991e18dd5a2826c98b1bbe882c92a8a4b71f157e75c7f31b99a1ec6d
SSDEEP 6291456:AZbB7RAFJ1xSZc/624P1jjix+7XK20L0mbxAeqHXXzLNfypxKncB3qYwfbi:8gM24PlokOF6HH4McBybi
TLSH
T10BE82317C6BD481ACD3A557598CAA4EB51DD135908C3F22F4B78038168B7B6CBF02B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

69c8556dfee6f2db007b4a76af4598c8c0d24c29

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

split_config.arm64_v8a.apk

SHA256 a4de2109baff895b41de8137325d87a7cdf4a167d25ffece88933e680547f0f1
MD5 5d4b8a7a7122598d07cc48e636ee3bf5
SHA1 7237787a4660af732c825aaf02b31f34a3c83759
SHA512 870645393b8554a17a008d7aa4224c293893def0802e6a5b5b71000403a35d2549169de890c84d88ce78f7a9f20151e82d28e3739845c8d0b39f9cf26340af3f
SSDEEP 1572864:a84yzrwGij2tuj4SE9wk/WoySlsNLqRtzgUWyhhmk2DOeXZ2sHZCj0MK:pvij2ytpk/PHtNHhZkrZlHZCjdK
TLSH
T19508330CD7CD8F0CF468B63A8E9067D19554B887CD9A8D4DF85124EB36EBCA039976C2
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

158be2375013a180e6f8c06bb734900f925f016a

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

TRENDRAFT X MOD V14 - APK Full Version.apks

base.apk

File Signature issue

com.dts.freefireth.FFMainActivity

com.beetalk.sdk.GarenaAuthActivity

com.beetalk.sdk.plugin.GGPluginActivity

com.beetalk.sdk.BTLoginActivity

com.garena.pay.android.GGPayActivity

com.beetalk.sdk.account.MigrateGuestActivity

com.twitter.sdk.android.core.identity.OAuthActivity

com.beetalk.sdk.plugin.impl.tiktok.TiktokShareResponseActivity

com.beetalk.sdk.plugin.GGPluginActivityCompat

com.vk.api.sdk.ui.VKWebViewAuthActivity

com.linecorp.linesdk.openchat.ui.CreateOpenChatActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

com.garena.unity.webview.UnityWebViewActivity

co.datadome.sdk.CaptchaActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.unity3d.plugin.downloader.UnityDownloaderActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

com.vk.api.sdk.ui.VKCaptchaActivity

com.vk.api.sdk.ui.VKConfirmationActivity

com.bytedance.sdk.open.tiktok.ui.TikTokWebAuthorizeActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.messaging.MessageForwardingService

com.dts.freefireth.FFFirebaseMessagingService

com.beetalk.sdk.account.AccountAuthenticatorService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.sessions.SessionLifecycleService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.messaging.cpp.RegistrationIntentService

com.voxelbusters.androidlib.internal.ScreenRecordingService

com.google.android.gms.messaging.cpp.MessageForwardingService

com.unity3d.plugin.downloader.UnityDownloaderService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.appsflyer.MultipleInstallBroadcastReceiver

com.dts.freefireth.FFBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.FF.magicvoicemgr.LanguageReceiver

com.unity3d.plugin.downloader.UnityAlarmReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.garena.android.AppStartupProvider

com.dts.freefireth.FFFileProvider

androidx.startup.InitializationProvider

com.google.android.gms.games.provider.PlayGamesInitProvider

com.google.firebase.provider.FirebaseInitProvider

com.voxelbusters.androidlib.extensions.FileProviderExtended