Resubmissions

29/05/2026, 19:16

260529-xyrkssfs8p10

29/05/2026, 16:07

260529-tk28lagt7s

29/05/2026, 15:58

260529-teqmlsh14j10

General

  • Target
    9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5.apk
  • Size 11.9MB
  • Sample260529-tk28lagt7s
  • SHA256 9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: PixRevolution

    PixRevolution is an Android banking trojan first seen in 2026.

  • Detects PixRevolution Trojan 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5.apk
    .apk 11.9MB

9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5.apk

  • SHA256 9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects PixRevolution Trojan

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
43c56fe4fd6bfdf73711c0fcf39a8fc98549acf55d6dd437ae1ff8e3f5b5252b
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Client App,OU=Mobile Team,O=Cloud Systems,L=Rio de Janeiro,ST=RJ,C=BR
com.vidasolta.oxpapp

Android Permissions

9fefd2c820fb28d50bc55c3320964635f27f1a74ac89dfc5aed8b6d5a09980f5.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.vidasolta.oxpapp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION