com.patootaku_1.2.1 (1).xapk
- SHA256 7c839def1de4dadadcc98c1a7499cc81cf0ec8f1dc61465754ed8770adc4a84a
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
com.patootaku.apk
Resource
android-33-x64-arm64-20260325-en
android-13-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
config.arm64_v8a.jar
Resource
android-33-x64-arm64-20260325-en
android-13-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
config.en.jar
Resource
android-33-x64-arm64-20260325-en
android-13-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
config.mdpi.jar
Resource
android-33-x64-arm64-20260325-en
android-13-x64
0 signatures
300 seconds
General
- Target com.patootaku_1.2.1 (1).xapk
- Size 75.2MB
- Sample260625-d736eahs9k
- SHA256 7c839def1de4dadadcc98c1a7499cc81cf0ec8f1dc61465754ed8770adc4a84a
- MD5 c7da8e5988c75b564fd20d04fdc176c8
- SHA1 d03a1f97cf6db52806845cd19f529b26d337d353
- SHA512 314d13f9d68a7688877495e5063939846dba759e395d33239cbf6cdf1544dad0143906a1bf64d7129c741d7444996c6c3798c2b8a4dc592068c5592cf3113a24
- SSDEEP 393216:iPLgXl95E2Z2rIwAV1pkk0q5e7T7NrA7fYWjhvZHjF4aKYOB+Rb4BkX+iJ4lB5:0LKrmId1pkkm7107fjZHjCaKhk42+1f5
- TLSH T1AB08AE36AF51053AD48C53342EBD0392FB315EE3A6435B8B652492A0DFD70C26EB57CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 1 IoCs
description ioc Allows an app to post notifications. android.permission.POST_NOTIFICATIONS - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.mdpi.apk - Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.mdpi.apk - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.mdpi.apk
File Explorer
-
com.patootaku_1.2.1 (1).xapk.zip 75.2MB
-
com.patootaku.apk.apk 74.8MB
-
config.arm64_v8a.apk.jar 92KB
-
config.en.apk.jar 96KB
-
config.mdpi.apk.jar 93KB
-
icon.png.png 75KB
-
manifest.json1KB
com.patootaku.apk
- SHA256 29c86f414c0c4941a8d96648967e20652cc5591e441465fb38b80673f6a238e2
- MD5 12cde639845d1265d221a03f5d4e43f0
- SHA1 9c6991c2c5d98fbe7acb895a58a32f5e3ddee793
- SHA512 b74f9caf8b769c79498e60ffea9a939698e094a95637255dee067f4b6d0ca701dc759412331b876bce7742fcd45080692cb21d381aebf887826aa99b2f43d02f
- SSDEEP 393216:CPLgXl95E2Z2rIwAV1pkk0q5e7T7NrA7fYWjhvZHjF4aKYOB+Rb4BkX+iJ4lB+:ULKrmId1pkkm7107fjZHjCaKhk42+1f+
- TLSH T16908AE36AF51053AD48C53342EBD0392FB315FE3A6435B8A652492A0DFD70C26EB57CA
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
a405ad1ef56dff3db7788fa0f37dc698718bc18fba4f16b6ce2fc2419f3e25866d051a0984d475e9a623d63534898cb4a98349f4460885bdf22a722c8706eaa7
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
b7:0a:da:f5:db:c3:2c:94:e9:0b:9e:12:e1:01:ca:13:6c:92:d6:40
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Sep 26, 2025 - Sep 26, 2055
com.patootaku
com.patootaku.MainActivity
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.POST_NOTIFICATIONS
android.permission.ACCESS_WIFI_STATE
android.permission.READ_BASIC_PHONE_STATE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.patootaku.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.CHECK_LICENSE
com.patootaku.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
com.unity3d.ads.adplayer.AndroidWebViewClient
com.wortise.ads.appopen.AppOpenActivity
com.wortise.ads.interstitial.InterstitialActivity
com.wortise.ads.rewarded.RewardedActivity
com.ironsource.sdk.controller.ControllerActivity
com.ironsource.sdk.controller.InterstitialActivity
com.ironsource.sdk.controller.OpenUrlActivity
com.google.android.gms.ads.AdActivity
com.google.android.gms.ads.OutOfContextTestingActivity
com.google.android.gms.ads.NotificationHandlerActivity
com.chartboost.sdk.view.CBImpressionActivity
com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity
com.chartboost.sdk.view.FullscreenAdActivity
com.inmobi.ads.rendering.InMobiAdActivity
com.facebook.ads.AudienceNetworkActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.vungle.ads.internal.ui.VungleActivity
com.ironsource.mediationsdk.testSuite.TestSuiteActivity
com.pairip.licensecheck.LicenseActivity
com.patootaku.service.PatootakuFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.android.gms.ads.AdService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.chartboost.sdk.internal.video.repository.exoplayer.VideoRepositoryDownloadService
com.google.android.exoplayer.downloadService.action.RESTART
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.gms.auth.api.signin.RevocationBoundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
androidx.core.content.FileProvider
com.wortise.ads.InitializationProvider
com.google.android.gms.ads.MobileAdsInitProvider
androidx.startup.InitializationProvider
com.google.firebase.provider.FirebaseInitProvider
com.facebook.ads.AudienceNetworkContentProvider
com.vungle.ads.VungleProvider
com.ironsource.lifecycle.IronsourceLifecycleProvider
com.ironsource.lifecycle.LevelPlayActivityLifecycleProvider
com.squareup.picasso.PicassoProvider
com.pairip.licensecheck.LicenseContentProvider
config.arm64_v8a.apk
- SHA256 7588fed1aa6f67176b55fe3ca352660c522a6e028b17f9a451d5293f3c04b906
- MD5 6c08b8370874ea91f330ab7d53a7ebbc
- SHA1 f64f32c03bcfa98ab0737b71fbf6f8ee1152f024
- SHA512 cf7b5e698bd2c096e68dc5d145dc34bb4c061426414547f5b9f91a650168dc02fccdef2571776e4145e761542f2c76af31884d3df3678f82ed709e94c84037dd
- SSDEEP 1536:d1De3efAryXg2fcyRkj3KDLuu2OML+i/CtDZ:d1De3eImQ2R4+i/CtDZ
- TLSH T142936D58E74C983BE5CDB0BC4C8E0673F9317158476582A5EE12860DFD837F9C6A8BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
8e5e66aa9559892b819cfc3222a23242b8dd6e54
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
b7:0a:da:f5:db:c3:2c:94:e9:0b:9e:12:e1:01:ca:13:6c:92:d6:40
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Sep 26, 2025 - Sep 26, 2055
config.en.apk
- SHA256 6139f1dc7391ee1423784abcda5d9f35727e02c05ca64bad04575c8c289a600f
- MD5 14b3388dcca48f78ee58e537d095bf2b
- SHA1 045b7c3f5b009737c1b342f38f3655666c8c2cae
- SHA512 ac4be97489966830a19d4af7defcc1b993e121e9b13ff945879c27ff5ab5af8d1f5bae5830e2480f838b657720003d9a78bd9d0c3d269ceda1ebcccf851c893a
- SSDEEP 768:H40xPEdeqxtshgALFP1zxkf0N1qWZ3X3+P+g+h+hgdu:H4zdewtshXLF9CfT2umLsh9
- TLSH T15FA3C506AB519B1FCD3B40392C979210252AFE03DA464707EA70761C29BF6F15FDA2F9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
3fed953db7fc1778407cfc56a6873ca9ee01974d
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
b7:0a:da:f5:db:c3:2c:94:e9:0b:9e:12:e1:01:ca:13:6c:92:d6:40
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Sep 26, 2025 - Sep 26, 2055
config.mdpi.apk
- SHA256 e47dc6bd60db5849d9212cb2032089afc499c7a8ff779c3f8ca949d5a08a4c91
- MD5 443d9759587e07105c5f9f7666f4c915
- SHA1 627a23ce0028dc1342d30e4958907fac3f0bd340
- SHA512 891d59de1fd3eb5a157d14749071c6d8e5d232a5cbe287084b0d3fca27a6dcf65dee87ba06448e7a889d4a2491283efba5571b5c187cbd718de22faf9e6794e8
- SSDEEP 1536:Ou/TXOOkGrUHv0kWZrilL3hBgvKo5/IMboMEZaRyeKJC:Z63GrUQZrilLfg7xIMboMEZagdC
- TLSH T1B0934AE3E32CA81BD873853647BE5AA269154DA02519F7252615F28C9FFBE81CF44FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
125e49fcc56cc56ec9d48f2095e2c09384728be3
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
b7:0a:da:f5:db:c3:2c:94:e9:0b:9e:12:e1:01:ca:13:6c:92:d6:40
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Sep 26, 2025 - Sep 26, 2055
icon.png
- SHA256 861d61df40d009cea709ec4b7a176fc77c625ce798c3d867b1038ee0238b6b30
- MD5 64e0b15e0d66da4f90d7441d05a9f879
- SHA1 5b4953392cd46c57f8d4f2905147799d08270955
- SHA512 4aa60cd9ea0b07718f8b84cf158340915ba297443103b51c7ce1912108f93570ec64928ec656d16a00df554251f94b0b0e07f52bdde36ec95c75facaa9735c45
- SSDEEP 1536:8M9UrGJ6pC1tQui+b51TfaEowj4o6hWbAV9vzMPj0gE7mxAsqKjQgAAXBJ1Xv:QMtZi+bnfag4o6/rvz2ggbgKcgVXFv
- TLSH T134730256317D876D10EEB0325CAFF8987997046D52729EC046C1ADE0FCD9762A2ABCF0
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 594ef7e3aebee7a2ba028ff0ca7eca2cf4d5bb7899d96318f124ef4ed64ebbba
- MD5 3ac28dacc6a4a13116f40701ec6887e2
- SHA1 d90e2fbbc426b8e9fdb3fd35d626b84c1907958b
- SHA512 ceabdbcb2532795a94992e70e49850d0c5669f597a0543902667332b4fbc3b194fdd1f126833d1c1bb3999783e9b4c779e35c7c7b9dd9b2789e47bcf9b25c776
- TLSH T1212146239A3D5B77B99CEA91713C04C899BC1F8212E429C88D995B60371FD852291F96
- MD5 SHA1 SHA512 TLSH