fogotten17[.]vercel[.]app_sample[.]bin

Resubmissions

22/06/2026, 18:28

260622-w4jayafv5p7

22/06/2026, 16:39

260622-t6ednaex2v7

Sharing

Copy URL Twitter E-mail

General

Target
fogotten17.vercel.app_sample.bin
Size 741KB
Sample260622-w4jayafv5p
SHA256 3a971bc2103281e80a612f6767c3624ac26ed7782ca0c2b81fdb62e37352c9b1
MD5 09e0de5ff76c453a0a974c19a96d844e
SHA1 1e5d31a039eb1162551de3f1f4cdeb2018eeddf8
SHA512 a9722372ca56ab6b3077362106b25fc2f6282b5305f418f09800a2ec1d908161a499a43dc1f555c97f1a1bb6a5f5e5e92de65f8235907184acd09b0532e53b68
SSDEEP 12288:ZfvgO4lRNkw/8j5x/SL2078n7SvkyJbbru63vQtS8CWRWT/58ftsLytcTHaTroRS:5v7uRqwcCK070OcyJXrpItSmRWThyYyP
TLSH
T1B1F423056EEC8C04D6FAB2F19C4B40A4416B86F6828EB58B1B08726D6C797D943D7FCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
fogotten17.vercel.app_sample.bin

File Explorer

fogotten17.vercel.app_sample.bin

.apk 741KB

fogotten17.vercel.app_sample.bin

SHA256 3a971bc2103281e80a612f6767c3624ac26ed7782ca0c2b81fdb62e37352c9b1
MD5 09e0de5ff76c453a0a974c19a96d844e
SHA1 1e5d31a039eb1162551de3f1f4cdeb2018eeddf8
SHA512 a9722372ca56ab6b3077362106b25fc2f6282b5305f418f09800a2ec1d908161a499a43dc1f555c97f1a1bb6a5f5e5e92de65f8235907184acd09b0532e53b68
SSDEEP 12288:ZfvgO4lRNkw/8j5x/SL2078n7SvkyJbbru63vQtS8CWRWT/58ftsLytcTHaTroRS:5v7uRqwcCK070OcyJXrpItSmRWThyYyP
TLSH
T1B1F423056EEC8C04D6FAB2F19C4B40A4416B86F6828EB58B1B08726D6C797D943D7FCD
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1c6836bd8f1b38b048ded9f0cdb22d57ad1ae6c4dc863add10048e1fc9afed12

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=SingBox Windows Android,OU=Mobile,O=Moncn,L=Shanghai,ST=Shanghai,C=CN

ru.yandirect35.app

android.permission.INTERNET android.permission.POYADOR android.permission.FOREGROUND_SERVICE android.permission.DABUVELO com.crystallabs.qusocuni.ruvik.permission.BIJULARIW android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.ACCESS_NETWORK_STATE com.braze.jup.permission.WEQUKUXEHOMAXO android.permission.READ_SMS com.infinity.nidop.permission.QACABEJUFIXAX android.permission.RECEIVE_SMS io.bidmachine.tuzopagi.permission.RUCITOYEMEGEYE io.emerald.qucer.suda.permission.DANIVINOLI android.permission.SEND_SMS android.permission.FETAROMEHEX android.permission.RECEIVE_WAP_PUSH android.permission.BROADCAST_SMS android.permission.BROADCAST_WAP_PUSH android.permission.SEND_RESPOND_VIA_MESSAGE android.permission.DOTOFU android.permission.QAFEQUMAGAS android.permission.READ_CONTACTS android.permission.READ_PHONE_STATE android.permission.PIVOMAXIF io.emerald.jahi.buw.luvul.permission.CUYAFOYOP android.permission.READ_PHONE_NUMBERS android.permission.CALL_PHONE com.fyber.gegeq.permission.LAKEJEVABU android.permission.POST_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.HEYONIYO android.permission.WAKE_LOCK com.orion.hive.permission.HODUQAGAYEBOP com.phantom.nobi.kok.yotexixe.permission.PEPIMEVI android.permission.SCHEDULE_EXACT_ALARM com.sapphire.hugi.jim.zum.permission.XEWIY com.fyber.dakujuzi.permission.ZOLARAPIROD android.permission.QUERY_ALL_PACKAGES android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.meridian.mixo.kela.permission.MOHOTIZIQIT android.permission.GAPOMOPECABU android.permission.AUTHENTICATE_ACCOUNTS com.apex.tejulad.buxav.permission.BOVUNARANIXOGO android.permission.VOTUGEKAJOYIGE android.permission.GET_ACCOUNTS android.permission.BUHEMISIS android.permission.NANIXOZ android.permission.READ_SYNC_SETTINGS android.permission.NOMOPEGOGOHICU io.nativeads.jopohen.permission.PEVERUCOF android.permission.WRITE_SYNC_SETTINGS android.permission.DEZIFUVARONUFU ru.yandirect35.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION com.sapphire.cilesusu.lidasux.permission.WEQESIL

ru.yandirect35.app.Cufepakopa.Jalacohefi

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.MY_PACKAGE_REPLACED

ru.yandirect35.app.Cufepakopa.Dojacibace

android.provider.Telephony.SMS_DELIVER

ru.yandirect35.app.Cufepakopa.Rekokufuse

android.provider.Telephony.WAP_PUSH_DELIVER

ru.yandirect35.app.Cufepakopa.Rakadokofa

ru.yandirect35.app.Cufepakopa.Munofudefi

android.intent.action.USER_PRESENT android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

com.jupiter.deratan.xakupaz.AbstractResolverLite

android.intent.action.PACKAGE_ADDED com.titanium.vipoxep.action.LAYINOGO

com.eclipse.sawac.Receiver

io.sentry.vijo.put.kufutac.action.TUZAMUCUBIYO com.vector.bonewiju.gifewuz.dahov.action.PORINUHI

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.stratosphere.zepu.Validator

com.infinity.hanazoh.jop.yotoc.action.BARUFAQEKEWO

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.prismanalytics.qodize.qoqirap.Sync

android.intent.action.WALLPAPER_CHANGED

Android Permissions

fogotten17.vercel.app_sample.bin

Permissions

android.permission.INTERNET

android.permission.POYADOR

android.permission.FOREGROUND_SERVICE

android.permission.DABUVELO

com.crystallabs.qusocuni.ruvik.permission.BIJULARIW

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.ACCESS_NETWORK_STATE

com.braze.jup.permission.WEQUKUXEHOMAXO

android.permission.READ_SMS

com.infinity.nidop.permission.QACABEJUFIXAX

android.permission.RECEIVE_SMS

io.bidmachine.tuzopagi.permission.RUCITOYEMEGEYE

io.emerald.qucer.suda.permission.DANIVINOLI

android.permission.SEND_SMS

android.permission.FETAROMEHEX

android.permission.RECEIVE_WAP_PUSH

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.DOTOFU

android.permission.QAFEQUMAGAS

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.PIVOMAXIF

io.emerald.jahi.buw.luvul.permission.CUYAFOYOP

android.permission.READ_PHONE_NUMBERS

android.permission.CALL_PHONE

com.fyber.gegeq.permission.LAKEJEVABU

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.HEYONIYO

android.permission.WAKE_LOCK

com.orion.hive.permission.HODUQAGAYEBOP

com.phantom.nobi.kok.yotexixe.permission.PEPIMEVI

android.permission.SCHEDULE_EXACT_ALARM

com.sapphire.hugi.jim.zum.permission.XEWIY

com.fyber.dakujuzi.permission.ZOLARAPIROD

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.meridian.mixo.kela.permission.MOHOTIZIQIT

android.permission.GAPOMOPECABU

android.permission.AUTHENTICATE_ACCOUNTS

com.apex.tejulad.buxav.permission.BOVUNARANIXOGO

android.permission.VOTUGEKAJOYIGE

android.permission.GET_ACCOUNTS

android.permission.BUHEMISIS

android.permission.NANIXOZ

android.permission.READ_SYNC_SETTINGS

android.permission.NOMOPEGOGOHICU

io.nativeads.jopohen.permission.PEVERUCOF

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

fogotten17.vercel.app_sample.bin

File Signature issue

ru.yandirect35.app.Pupocipeha.Humakajidi

ru.yandirect35.app.Pupocipeha.Caqatuhaka

ru.yandirect35.app.Pupocipeha.Badulacusu

com.prismanalytics.raqumeba.cela.xiqu.Listener

com.meridian.kaxuf.mov.Generator

com.meridian.bebel.Listener

com.astra.vah.Router

ru.yandirect35.app.Biqupafere.Cecirinepi

com.polaris.nuqa.wakolak.wexu.Strategy

com.verizon.ads.ciwaj.jiy.mibun.CoordinatorPro

ru.yandirect35.app.Cufepakopa.Gisokusahu

ru.yandirect35.app.Nugekebagi.Fudukamuka

ru.yandirect35.app.Nugekebagi.Losucepiti

com.titanium.pahoke.pabofo.caqopasu.BaseSync

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

io.atomize.doy.Logger

io.branch.zux.xukayaje.man.DefaultResponse

androidx.room.MultiInstanceInvalidationService

com.stellar.noj.jexahu.GeneratorCompat

ru.yandirect35.app.Cufepakopa.Jalacohefi

ru.yandirect35.app.Cufepakopa.Dojacibace

ru.yandirect35.app.Cufepakopa.Rekokufuse

ru.yandirect35.app.Cufepakopa.Rakadokofa

ru.yandirect35.app.Cufepakopa.Munofudefi

com.jupiter.deratan.xakupaz.AbstractResolverLite

com.eclipse.sawac.Receiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.stratosphere.zepu.Validator

androidx.profileinstaller.ProfileInstallReceiver

com.prismanalytics.qodize.qoqirap.Sync

com.braze.mod.xapirih.qivosexu.Request

com.vertex.genikuke.gez.buseyam.StrategyBase

com.keystone.zoh.BaseResponse

androidx.startup.InitializationProvider

Android Permissions

fogotten17.vercel.app_sample.bin