sagawa.zip
- SHA256 002af4ceac800f6a2b5c4710c09192b1d940d356bb6c86ee43b6cbe2725276aa
Password
a
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sagawa.zip
Resource
android-x86-arm-20260325-ja
android-9-x86
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
sagawa.zip
Resource
android-x64-20260325-ja
android-10-x64
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
sagawa.zip
Resource
android-x64-arm64-20260325-ja
android-11-x64
0 signatures
600 seconds
Behavioral task
behavioral4
Sample
248cb5b76ed1a5049b3d7aafd24ad356c7a11e8eff17854971078f291961af33.apk
Resource
android-33-x64-arm64-20260325-ja
android-13-x64
14 signatures
600 seconds
General
- Target sagawa.zip
- Size 2.4MB
- Sample260601-pshrpses4q
- SHA256 002af4ceac800f6a2b5c4710c09192b1d940d356bb6c86ee43b6cbe2725276aa
- MD5 c28a7d5146b543b8b7836268aec724ab
- SHA1 ae8e3531b2d50c758d3643d1d6633da751009727
- SHA512 5d8eb1cb9e9a3fb852620dad33f7bddab7222d824f3dbd3671d35dfc3b2c087464e780eebeb11c3459688c7ec8756378ba747d9fdfb17dde7ee4a964946c7335
- SSDEEP 49152:AiwlkTeWVKv6cjsMHHDRZo2gf9sCZ7lcpHHHTUxgUAejiIuBYhdVE:jwlkTeIKSD6F69ZlcxT6iFYni
- TLSH T16FC533034DA814EDD7FC424A65642721E374DB8CCEAC5C196BC830A7DE2982DBEF59E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 9 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/248cb5b76ed1a5049b3d7aafd24ad356c7a11e8eff17854971078f291961af33
File Explorer
-
sagawa.zip.zip 2.4MB
-
248cb5b76ed1a5049b3d7aafd24ad356c7a11e8eff17854971078f291961af33.apk 2.4MB
248cb5b76ed1a5049b3d7aafd24ad356c7a11e8eff17854971078f291961af33
- SHA256 248cb5b76ed1a5049b3d7aafd24ad356c7a11e8eff17854971078f291961af33
- MD5 22be5b5571543b2c42be4bfc4543e145
- SHA1 302926a3ae9961ff77e7c4721c85a00c8e6c4cc1
- SHA512 0d4459881550e9bab9b05aca05c25c1306bed989d98a25a32b2b6b952fba6e0efcd2b16f02ca1f5e8952a5adca470db475c37414191a55ba881b2d436d403a46
- SSDEEP 49152:vxnwuUUImzX6LFMAVGnN6o9y6UCJUWZcGxU7qpD1Lpjz39+WtD8SoAC:ZwRUImrpw6I6vZcGe7qpFpvtFaSoAC
- TLSH T167C533DC27110BF4E6863679C5F7C357A228F8D20153852FCD98D92DBA8B7F8B069522
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
a
File Signature issue
Digest
3ad64fd58346d33eafdca246d705ab56f68242c989a1ccbdcb51d523f03aae7a
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
b3:99:80:86:d0:56:cf:fa
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Apr 15, 2008 - Sep 1, 2035
com.diskef.csed
com.launcher.mango.Launcher3
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.POST_NOTIFICATIONS
android.permission.READ_PHONE_NUMBERS
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
com.android.launcher.permission.READ_SETTINGS
android.permission.SET_WALLPAPER_HINTS
android.permission.PACKAGE_USAGE_STATS
hfcbce.wa
hfcbce.kz
hfcbce.am
hfcbce.pj
com.launcher.mango.Launcher3
android.intent.action.MAIN
com.launcher.mango.SettingsActivity
android.intent.action.APPLICATION_PREFERENCES
com.launcher.mango.dragndrop.AddItemActivity
android.content.pm.action.CONFIRM_PIN_SHORTCUT
android.content.pm.action.CONFIRM_PIN_APPWIDGET
hfcbce.fc
hfcbce.rq
com.launcher.mango.dynamicui.ColorExtractionService
com.launcher.mango.compat.WallpaperManagerCompatVL$ColorExtractionService
hfcbce.nw
android.intent.action.BOOT_COMPLETED
hfcbce.pt
com.launcher.mango.InstallShortcutReceiver
com.android.launcher.action.INSTALL_SHORTCUT
com.launcher.mango.SessionCommitReceiver
android.content.pm.action.SESSION_COMMITTED
com.launcher.mango.AppWidgetsRestoredReceiver
android.appwidget.action.APPWIDGET_HOST_RESTORED
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION