Flarial[.]apk | Triage™

General

Target
Flarial.apk
Size 17.2MB
Sample260620-a7vx9acw7j
SHA256 5e177120f65d1a860546d85ba5f8ff0784d6f95c8cddecad3eb9576aa65157ee
MD5 0a2a95aeae274864b96540af2c933b03
SHA1 00843f6f84f8059aeee9a76b2cf1de6b2073a66b
SHA512 09b83ac15ea37f72a51d8f7f8be201941440d7e5109504c850f5f32c488bfc1708c52510e98b3e1d327d6002261ae2adf67d0c9b90b2f9ae85fdb64257fcbf54
SSDEEP 196608:ousXBeoQxolShc117kqF+aG+Qdg20EEFwkEo8g9RxsLk+5V3Cfw:ousX5Qeohc1177Cu20AkEojxMp
TLSH
T1FA07D042E7624D66C2FE8736B8B78B0173367D05A7035B176011B2AEAD7B2D45E9C3C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Flarial.apk

File Explorer

Flarial.apk

.apk 17.2MB

Flarial.apk

SHA256 5e177120f65d1a860546d85ba5f8ff0784d6f95c8cddecad3eb9576aa65157ee
MD5 0a2a95aeae274864b96540af2c933b03
SHA1 00843f6f84f8059aeee9a76b2cf1de6b2073a66b
SHA512 09b83ac15ea37f72a51d8f7f8be201941440d7e5109504c850f5f32c488bfc1708c52510e98b3e1d327d6002261ae2adf67d0c9b90b2f9ae85fdb64257fcbf54
SSDEEP 196608:ousXBeoQxolShc117kqF+aG+Qdg20EEFwkEo8g9RxsLk+5V3Cfw:ousX5Qeohc1177Cu20AkEojxMp
TLSH
T1FA07D042E7624D66C2FE8736B8B78B0173367D05A7035B176011B2AEAD7B2D45E9C3C8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

75961ee85cfb361407e061208304c198a7aafa3a12ca6bfb0d36da60872c23a7

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Flarial,OU=Flarial,O=Flarial,L=Unknown,ST=Unknown,C=US

com.flarialmc.flarial_launcher

Android Permissions

Flarial.apk

Permissions

android.permission.INTERNET

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.OVERLAY_WINDOW

com.android.vending.CHECK_LICENSE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

com.flarialmc.flarial_launcher.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Flarial.apk

File Signature issue

com.flarial.client.MainActivity

com.flarial.client.Launcher.MinecraftActivity

com.microsoft.xal.browser.IntentHandler

com.microsoft.xal.browser.BrowserLaunchActivity

com.microsoft.xal.browser.WebKitWebViewController

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.mojang.minecraftpe.ImportService

com.mojang.minecraftpe.NotificationListenerService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.flarial.client.FlarialDocumentProvider

com.flarial.client.FlarialCrashLogsDocumentProvider

com.google.android.gms.games.provider.PlayGamesInitProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

Flarial.apk

File Signature issue

com.flarial.client.MainActivity

com.flarial.client.Launcher.MinecraftActivity

com.microsoft.xal.browser.IntentHandler

com.microsoft.xal.browser.BrowserLaunchActivity

com.microsoft.xal.browser.WebKitWebViewController

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.mojang.minecraftpe.ImportService

com.mojang.minecraftpe.NotificationListenerService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.flarial.client.FlarialDocumentProvider

com.flarial.client.FlarialCrashLogsDocumentProvider

com.google.android.gms.games.provider.PlayGamesInitProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

Flarial.apk