ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.zip
- SHA256 55e114031b7b99274415c09a73ff34bf31278d6162969324accb25b6fe69beae
Password
infected
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
wafami.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
wafami.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
wafami.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Errors
Reason
error processing APK: binary.Read: invalid type [2]uint16
Reason
error processing APK: binary.Read: invalid type [2]uint16
General
- Target ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.zip
- Size 19.0MB
- Sample260528-e9e22aft9r
- SHA256 55e114031b7b99274415c09a73ff34bf31278d6162969324accb25b6fe69beae
- MD5 ab1e7c92f654b333f05d1d7178914716
- SHA1 2ec4cd1b0aeb352014d12b56aff632466350a007
- SHA512 cf668cb433617e5ab6fc3fe8b239e9a0253a4105f4d51c3d22e354cc9497fe0120a1d542d04eaf7897075ae6a7af8a645ea23172e44412c2cc7b0080c3a6d1e3
- SSDEEP 393216:FX0Po83WGuE5FV5BAIfYaRRGvwPmLI2B2yYdwRrkz2bqISmPUJqlAGF6:90h3n1FV5nYc6em8BJqRrE3ql36
- TLSH T1341733E74CE8253F643B608F89F7545DAC2160E5AB1B9C3D4B136BAC66E9C35CD84382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 3 IoCs
description ioc Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls. android.permission.BIND_SCREENING_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 1 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk unpack002/wafami
File Explorer
-
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.zip.zip 19.0MB
-
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk.apk 22.0MB
-
wafami.apk 12.9MB
ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d.apk
- SHA256 ad9f39e6166a47ae16359777b607055198cda23f004d9d7b066e22c0d0cf1e6d
- MD5 c873721c05287d6fdc3887d3a106bba7
- SHA1 1b5bf4d93505879b7284f1f4f25faab6c9d2a571
- SHA512 0bef65858fdd8e4839b23448ae081435a702771ffa9f4e7850aeba22b88e7d4d8bb34aacc0707ab3a9e58f02842647e356f90c926ff9712b98e1a8d00c60fef9
- SSDEEP 393216:uqxrMB1NP+tu9qrLRC1PSE57y85b535gZ2FYKMnOQpnto1iz:LMBLP+LoBSc7yAV3yqY1Owto1iz
- TLSH T16A3702B07AD0815CD361B1F741935C916B061F08A2B999CE7E70FA266FD2D392738A73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
5213ace37b2025665949a810a7950c1c9ed57245064a8ec99b3a9a78820be862
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
File Signature issue
Digest
f154b0ee328d5bf8dfb7034651845aafaf21de47ffc46ba4dd8289dac0d4841852e45640ab1c7893a2c77f43a279320ba10091359425f86265471bd72e16df97
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Production Key,OU=Systems,O=Software House,L=Miami,ST=Colorado,C=US
Subject
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
Serial Number
23:2e:ae:62
Issuer
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
Timespan
Dec 31, 2013 - Apr 30, 2052
Subject
CN=Production Key,OU=Systems,O=Software House,L=Miami,ST=Colorado,C=US
Serial Number
6e:53:c9:fe:7b:62:c4:fa
Issuer
CN=Production Key,OU=Systems,O=Software House,L=Miami,ST=Colorado,C=US
Timespan
May 24, 2026 - May 18, 2051
com.juraroseto.glob
com.juraroseto.glob.sOXzJhGeEmy
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INTERNET
com.android.alarm.permission.SET_ALARM
android.permission.QUERY_ALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
com.juraroseto.glob.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.juraroseto.glob.HaUMrZZMt
tySRbwGBshMcR
com.juraroseto.glob.sOXzJhGeEmy
android.intent.action.MAIN
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.startup.InitializationProvider
wafami
- SHA256 cd413fa615e954b32d1b2e58d39b3ca7773e723844c2c7a7283d6bdfc9baba16
- MD5 702fb26680e8a84ef1ba0767f3b13675
- SHA1 a3964bc86d2a0c631d532da07280581a3c1a0275
- SHA512 03101213f2c37ebda9d8b0ef65eb5379bbc4026348365d312eef2398c6a01362ad21bcd80f88f5cbe417180651a9ce753863099bd27064b1bd9cb0ae8f2f62f7
- SSDEEP 196608://lcwswgNVF+ScC4B3Tpi6XXhY/8wHCWBfOghwKPpewxUbtpkAmLqpLqQ48y6:FcbdNr+RBY0YCW4NgStp5mLILs8Z
- TLSH T1F3D6E12C23C0251DC6C1FDFA42E628A177885D35E2DAD2E93B35391C5EA2D747E29C72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
ff3ffefdf0dae1902da3a0fe08c0709cce672d0f5dfed724aec0a6ac74f78d6b
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
File Signature issue
Digest
d07ca844505e53014d35427757a24ecfe14845966e0bc8bc6a5fb9c8eff04b41ec8b21c38bd40cf0d813227d64b1701158a539f3689258d390510ccca23aaa4f
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Release Key,OU=Applications,O=App Development,L=Miami,ST=Nevada,C=US
Subject
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
Serial Number
23:2e:ae:62
Issuer
CN=Android Debug,OU=Android,O=Unknown,L=Unknown,ST=Unknown,C=US
Timespan
Dec 31, 2013 - Apr 30, 2052
Subject
CN=Release Key,OU=Applications,O=App Development,L=Miami,ST=Nevada,C=US
Serial Number
73:a0:00:b0:a4:2e:59:c8
Issuer
CN=Release Key,OU=Applications,O=App Development,L=Miami,ST=Nevada,C=US
Timespan
May 24, 2026 - May 18, 2051
com.xovocuku.array
com.xovocuku.array.ltjZoUsPgChLtuFL
android.permission.BLUETOOTH
android.permission.CAMERA
android.permission.RECEIVE_SMS
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED
android.permission.QUICKBOOT_POWERON
android.permission.READ_PHONE_NUMBERS
android.permission.READ_CONTACTS
android.permission.REQUEST_DELETE_PACKAGES
com.android.alarm.permission.SET_ALARM
android.permission.EXPAND_STATUS_BAR
android.permission.CALL_PHONE
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_SMS
android.permission.ENFORCE_UPDATE_OWNERSHIP
android.permission.NFC_TRANSACTION_EVENT
android.permission.QUERY_ALL_PACKAGES
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.DISABLE_KEYGUARD
android.permission.REORDER_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_BOOT_COMPLETED
com.xovocuku.array.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.xovocuku.array.kxpizcmoa
android.intent.action.SEND
android.intent.action.SENDTO
com.xovocuku.array.ltjZoUsPgChLtuFL
android.intent.action.MAIN
com.xovocuku.array.mHooepsTwwnVMB
com.xovocuku.array.IdMmqWOGlXJIEkSR
com.xovocuku.array.GVsRcFwRFRybMxk
com.xovocuku.array.ypjRLAPiVItFVV
com.xovocuku.array.oirpua0.Ojngwa0Activity
com.xovocuku.array.oirpua0.Gajlab1Activity
com.xovocuku.array.oirpua0.Vcfsgc2Activity
com.xovocuku.array.oirpua0.Bsfyqd3Activity
com.xovocuku.array.oirpua0.Cvmvee4Activity
com.xovocuku.array.eadydb1.Ktpsva0Activity
com.xovocuku.array.eadydb1.Txceub1Activity
com.xovocuku.array.eadydb1.Qsdexc2Activity
com.xovocuku.array.eadydb1.Ppelsd3Activity
com.xovocuku.array.eadydb1.Gnglhe4Activity
com.xovocuku.array.mvxdic2.Sunnfa0Activity
com.xovocuku.array.mvxdic2.Xtndcb1Activity
com.xovocuku.array.mvxdic2.Ceckpc2Activity
com.xovocuku.array.mvxdic2.Tcijnd3Activity
com.xovocuku.array.mvxdic2.Ppzaze4Activity
com.xovocuku.array.iwcesd3.Rxedia0Activity
com.xovocuku.array.iwcesd3.Aumppb1Activity
com.xovocuku.array.iwcesd3.Cdxitc2Activity
com.xovocuku.array.iwcesd3.Oxsbsd3Activity
com.xovocuku.array.iwcesd3.Vpdyqe4Activity
com.xovocuku.array.lvgbve4.Ihrxda0Activity
com.xovocuku.array.lvgbve4.Qxslib1Activity
com.xovocuku.array.lvgbve4.Ltkexc2Activity
com.xovocuku.array.lvgbve4.Ecvvhd3Activity
com.xovocuku.array.lvgbve4.Ubofoe4Activity
com.xovocuku.array.owllvf5.Nxvfva0Activity
com.xovocuku.array.owllvf5.Mbouwb1Activity
com.xovocuku.array.owllvf5.Wnyrmc2Activity
com.xovocuku.array.owllvf5.Spkrbd3Activity
com.xovocuku.array.owllvf5.Bpmcue4Activity
com.xovocuku.array.pjcuig6.Dbylwa0Activity
com.xovocuku.array.pjcuig6.Fzqsnb1Activity
com.xovocuku.array.pjcuig6.Kskijc2Activity
com.xovocuku.array.pjcuig6.Ntnmhd3Activity
com.xovocuku.array.pjcuig6.Cbmfhe4Activity
com.xovocuku.array.waegjh7.Bhbtwa0Activity
com.xovocuku.array.waegjh7.Vtkdhb1Activity
com.xovocuku.array.waegjh7.Mmoxoc2Activity
com.xovocuku.array.waegjh7.Ovnthd3Activity
com.xovocuku.array.waegjh7.Dmlfwe4Activity
com.xovocuku.array.MkYltZFme
android.telecom.CallScreeningService
com.xovocuku.array.fcOaZaIAt
android.service.notification.NotificationListenerService
com.xovocuku.array.mlaxnm
android.intent.action.RESPOND_VIA_MESSAGE
com.xovocuku.array.ACXvtitFkVWJpA
com.xovocuku.array.mYgDmWURAtXa
android.accessibilityservice.AccessibilityService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.xovocuku.array.nfdkghfsugzm
android.provider.Telephony.WAP_PUSH_DELIVER
com.xovocuku.array.BCBiXqeggEDS
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER
com.xovocuku.array.KPtkSaYn
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION