apps.zip
- SHA256 662430b7bfb13045527a1932a511d8c20fe01109a2e1206b07ae46cf27ef41ba
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
revolut.apk
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
General
- Target apps.zip
- Size 19.4MB
- Sample260602-lb35jahy21
- SHA256 662430b7bfb13045527a1932a511d8c20fe01109a2e1206b07ae46cf27ef41ba
- MD5 3fbd19c2139352495c6d6578b7667b97
- SHA1 2a9ecb53ed47fc1836d91f09f88ff79ca8eeaf68
- SHA512 fdeaea337d115f55a2b5d6ef4888a8993c53075da2c945e88b25dbc8f4f4ffce2be5a3198d2d6455439d5b8822630a210bb759de271fda65a804e89c33083b2d
- SSDEEP 393216:TZbEa3/LGSXwrVPMiT6F2C8ysupwj3k/d92kntPKpnwF8CdXIXfzwznHdfCUJs6a:T2abXw6o0psuE34HntPKJwF8CXIXbahc
- TLSH T1291733E8F95A4536374D3CBBD082A38087B5029392206E365E3607BED758E47B156FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Requests dangerous framework permissions 1 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/8e255cadb9e114052b2d1baed56011cbdd24014e8d897fff101b197b32b564f8.apk unpack002/base.apk unpack001/revolut.apk
File Explorer
-
apps.zip.zip 19.4MB
-
8e255cadb9e114052b2d1baed56011cbdd24014e8d897fff101b197b32b564f8.apk.apk 15.2MB
-
base.apk.apk 11.0MB
-
revolut.apk.apk 5.9MB
8e255cadb9e114052b2d1baed56011cbdd24014e8d897fff101b197b32b564f8.apk
- SHA256 8e255cadb9e114052b2d1baed56011cbdd24014e8d897fff101b197b32b564f8
- MD5 3338c6a1e96c4de3e8711fea2d8abe69
- SHA1 32a5d8cd742e3d0bef867dfea02d9201761538c9
- SHA512 e2ef637f15866f122e7296cb8413fcc79ad81334f7e3d635f33faa39761cf6f7a51017ad02aa245afb1da9c7c7eabb1426066dc4def0a82b80da1e8f8999de6a
- SSDEEP 393216:jW9LFb7eEnCHP3+MKqcKUKGuqPMjy3b7sU5V723BiJCwHdiTbD:j2L5nC2NfnuqUj+x5V72RiJCidiXD
- TLSH T19AF6229AFB08B82AC5F3533345B54639118B0D668B43D7875D24B23C99BB6E05F0ABCD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
cbaf61df426ba054bca438318e84ea634f9eaa36592563859020443ac6ad0cd8e4f85058f1852160fdc0796a7ce45d76d18d6f5142cf628da5e8e02c009a7f9f
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Tokyo Inc 9112,OU=Mobile Team,O=Xiaomi,L=Moscow,ST=GA,C=CA
Subject
CN=Tokyo Inc 9112,OU=Mobile Team,O=Xiaomi,L=Moscow,ST=GA,C=CA
Serial Number
a9:85:ff:4f:fe:18:f6:cf
Issuer
CN=Tokyo Inc 9112,OU=Mobile Team,O=Xiaomi,L=Moscow,ST=GA,C=CA
Timespan
May 10, 2026 - Sep 16, 2052
com.app9992.core8775
com.mem.installdropsession.InstallDropSession
android.permission.INTERNET
android.permission.REQUEST_INSTALL_PACKAGES
com.mem.installdropsession.InstallDropSession
android.intent.action.MAIN
android.content.pm.INSTALLER_STATUS_ACTION
base.apk
- SHA256 3f25b2f75c1645b47d78ae8d337d560e4ff6fc018c846c757461e56f54196ab8
- MD5 3921ef154efe342ec43be80cd44dfbc2
- SHA1 5853776b980a17bcd6972adb38331cb0f165ff38
- SHA512 20e80911c31d5e4f937b9dbe88e7eaf4504b664e8fcdaa1109d29dc9646ceeda71d6b3c04a055d01138f07a380f545242d3355e3960f91f6e9c85209fec6370f
- SSDEEP 196608:D7V0lGRHNw18fMpSj+jngVjVm/1ISgOvJjqPbKcXue/fZp2ifjJ828lGXQG:vVlttT++jV81ItQmjPe8fSQJf
- TLSH T1B4C612D6E7D8A92AD0F75332C13A16E2554B4D228B83EFC76D14327C68B75D00F4AAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
feb7e7529648ecbe22a847e47c3ceb869e3232a21e5acd966658e6b6c136500b
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Moscow Corp 6915,OU=Development Division,O=Xiaomi,L=Beijing,ST=TX,C=ES
Subject
CN=Moscow Corp 6915,OU=Development Division,O=Xiaomi,L=Beijing,ST=TX,C=ES
Serial Number
62:5c:33:34:47:f1:09:3d
Issuer
CN=Moscow Corp 6915,OU=Development Division,O=Xiaomi,L=Beijing,ST=TX,C=ES
Timespan
May 10, 2026 - Apr 8, 2037
wren.collop.alisp77
wren.collop.alisp77.cpU63NfjZDqXZFOR
android.permission.POST_NOTIFICATIONS
android.permission.SCHEDULE_EXACT_ALARM
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_FULL_SCREEN_INTENT
android.permission.USE_EXACT_ALARM
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BROADCAST_STICKY
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_SYNC_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.DETECT_SCREEN_CAPTURE
android.permission.DETECT_SCREEN_RECORDING
android.permission.DISABLE_KEYGUARD
android.permission.EXPAND_STATUS_BAR
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_CAMERA
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.FOREGROUND_SERVICE_MICROPHONE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.MANAGE_OWN_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.NFC_PREFERRED_PAYMENT_INFO
android.permission.NFC_TRANSACTION_EVENT
android.permission.QUERY_ALL_PACKAGES
android.permission.READ_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.REORDER_TASKS
android.permission.REQUEST_DELETE_PACKAGES
android.permission.RUN_USER_INITIATED_JOBS
com.android.alarm.permission.SET_ALARM
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION
android.permission.USE_BIOMETRIC
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.READ_PHONE_NUMBERS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.PACKAGE_USAGE_STATS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.CAPTURE_KEYBOARD
wren.collop.alisp77.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.c2dm.permission.RECEIVE
wren.collop.alisp77.cpU63NfjZDqXZFOR
android.intent.action.MAIN
wren.collop.alisp77.xoSiakgV3RWOXU
wren.collop.alisp77.mvFbEbAUd
wren.collop.alisp77.oMzbPtPPn1C1kWzL
wren.collop.alisp77.cSzLqSfXjWUHbfNyA8JS0ARKCVnbfh
wren.collop.alisp77.kjHSrAiw9mk
wren.collop.alisp77.sBoMqW2JGjUrZI5Sq
android.intent.action.SEND
android.intent.action.SENDTO
wren.collop.alisp77.idXZAtE
wren.collop.alisp77.x9k7QAa1OY
wren.collop.alisp77.aidl.REMOTE_CONNECTION
wren.collop.alisp77.d1VTZPx
android.accessibilityservice.AccessibilityService
wren.collop.alisp77.hn32R189hn7jNjOyZvX4lEJed
android.service.notification.NotificationListenerService
wren.collop.alisp77.ofZVMl9wNGXWzmxKfTOWYv
wren.collop.alisp77.kWeYy7LVKTWa
wren.collop.alisp77.xAOkoBZ1coP0tN366iAYL
android.intent.action.RESPOND_VIA_MESSAGE
com.fqkherei.tpgntztejsub.Tnlazsxostciovyn$TickService
wren.collop.alisp77.ttaYk04h1bfWQXlSwqou3TGmk
android.intent.action.NEW_OUTGOING_CALL
android.provider.Telephony.SMS_RECEIVED
android.intent.action.BOOT_COMPLETED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_ADDED
wren.collop.alisp77.c69uGE4WsIaonsKhiAc003mHMZgxE
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.PROFILE_PROVISIONING_COMPLETE
android.app.action.PROFILE_OWNER_CHANGED
android.app.action.DEVICE_OWNER_CHANGED
wren.collop.alisp77.bCDyWkOvaDTQaKK4DyEucADtNshz
android.provider.Telephony.SMS_DELIVER
wren.collop.alisp77.esPfYSWNr5rYaaZzsPxk
android.provider.Telephony.WAP_PUSH_DELIVER
wren.collop.alisp77.uAohaH4dfoi6N0eQKa3jJtUeDX
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
wren.collop.alisp77.xWWf1YC1r
revolut.apk
- SHA256 53c8c677a92b0a85404b6243571bb2d7ca3956e2eb9262f2479a19e4874ed12c
- MD5 e4abf0c45da0e2093044a8eacd380a4e
- SHA1 d91720224660159533024d609cce16f7aeb4409b
- SHA512 e6005b702ea3af807d2c0f0fc0d976b76aa95347e0086909fb01dc907248b32d8f52c7d4f32d8a8d411959b1aa7c449605f899c3737ce56721d2e8def631a54e
- SSDEEP 98304:onGJoTYresQVc49sVpUjmKZL7rP0we+vJtF9dn1ktZ5xbTG4u7zEgtVSNzmAHmlK:u3eUacL7D0wRvJbLKtDgtVSN6po7
- TLSH T1DF5601C7F798992FC43710B2C97E56B255474C528A839F836D18360C68BB9D42F9AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
a1e47abbb848491fad89bbd346828983fb653351bfaf74a81708c6a0457ba97a
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
Subject
CN=Android Debug,O=Android,C=US
Serial Number
01
Issuer
CN=Android Debug,O=Android,C=US
Timespan
Mar 6, 2026 - Feb 27, 2056
com.revolut.revolut
com.revolut.revolut.MainActivity
com.revolut.revolut.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.revolut.revolut.MainActivity
android.intent.action.MAIN
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION