rzkgkdwytn[.]apk | Triage™

General

Target
rzkgkdwytn.apk
Size 2.4MB
Sample260604-xjs53scv7v
SHA256 b22bebe5ea9a6a26b07894801799e7cd57c069dca6ff4588cbdd042797bafdec
MD5 0e082f39f832476f447bc30b1dba233c
SHA1 825d7f133e18b566c73a386b6712864749920b38
SHA512 bb48d19522aa3d44f53cd4e83a9591061c781be009a709be20ddfd96cffb06e1f5ed54063ef5d437db56005a58954ec6a5562493439101b38e3ee0c65a4322cd
SSDEEP 49152:hcblmFzGLiq6YBvUOfGo7rXb2WYwi9WpW8wWQ4sgsKvZHAhwFZnj5xP0yi:j4LTvUwr7rXb214pW8sn/v8njzcD
TLSH
T14CC5335F407D0CB9EAD5F47A8ACF476ED8E2543C2202958FDB6767AC870D598B22381C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
rzkgkdwytn.apk

File Explorer

rzkgkdwytn.apk

.apk 2.4MB

rzkgkdwytn.apk

SHA256 b22bebe5ea9a6a26b07894801799e7cd57c069dca6ff4588cbdd042797bafdec
MD5 0e082f39f832476f447bc30b1dba233c
SHA1 825d7f133e18b566c73a386b6712864749920b38
SHA512 bb48d19522aa3d44f53cd4e83a9591061c781be009a709be20ddfd96cffb06e1f5ed54063ef5d437db56005a58954ec6a5562493439101b38e3ee0c65a4322cd
SSDEEP 49152:hcblmFzGLiq6YBvUOfGo7rXb2WYwi9WpW8wWQ4sgsKvZHAhwFZnj5xP0yi:j4LTvUwr7rXb214pW8sn/v8njzcD
TLSH
T14CC5335F407D0CB9EAD5F47A8ACF476ED8E2543C2202958FDB6767AC870D598B22381C
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ae38f2311ba01308a12ff9be37915a798a9130a693813bf7b837404d65ff9143

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

vxp_5ws0zs.cnw0hzc2rj.wtgjz5l1t1z9

Android Permissions

rzkgkdwytn.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

com.android.launcher.permission.READ_SETTINGS

android.permission.SET_WALLPAPER_HINTS

android.permission.PACKAGE_USAGE_STATS

rzkgkdwytn.apk

File Signature issue

vyslra.tg

vyslra.nu

vyslra.ua

vyslra.fs

com.launcher.mango.Launcher3

com.launcher.mango.SettingsActivity

com.launcher.mango.dragndrop.AddItemActivity

vyslra.vh

vyslra.cs

com.launcher.mango.dynamicui.ColorExtractionService

com.launcher.mango.compat.WallpaperManagerCompatVL$ColorExtractionService

vyslra.ij

vyslra.uz

com.launcher.mango.InstallShortcutReceiver

com.launcher.mango.SessionCommitReceiver

com.launcher.mango.AppWidgetsRestoredReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.launcher.mango.LauncherProvider

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

rzkgkdwytn.apk

File Signature issue

vyslra.tg

vyslra.nu

vyslra.ua

vyslra.fs

com.launcher.mango.Launcher3

com.launcher.mango.SettingsActivity

com.launcher.mango.dragndrop.AddItemActivity

vyslra.vh

vyslra.cs

com.launcher.mango.dynamicui.ColorExtractionService

com.launcher.mango.compat.WallpaperManagerCompatVL$ColorExtractionService

vyslra.ij

vyslra.uz

com.launcher.mango.InstallShortcutReceiver

com.launcher.mango.SessionCommitReceiver

com.launcher.mango.AppWidgetsRestoredReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.launcher.mango.LauncherProvider

androidx.startup.InitializationProvider

Android Permissions

rzkgkdwytn.apk