base[.]apk | Triage™

General

Target
base.apk
Size 3.1MB
Sample260628-3d4brahs2k
SHA256 048d958ee35a030bd397d34dcc58f26c00429cabf3177ac870d3ac699f8ca1b0
MD5 748929067d3ebea91bc5e6a379c6bf8b
SHA1 5751beba4bbf1b9e367f216feadfe6bcad8d0b18
SHA512 2a9d9439ba388068b8b26fd519d325ae4ed378822ebd9a0e91552d4567cb37761369c0567f45b1ee5cb1d0d750c201b3813aa5011884b5dbe2bf13cf01e8c1a2
SSDEEP 98304:YxzwKBzCqSdMmrsElcaihM9DXOMXU5zfrKJdC:YejTOul97OMXRC
TLSH
T18BE5D046FB48997EC8F7533246B546222157CC668B43E6872C4C323C5AB7AD84F5AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
base.apk

File Explorer

base.apk

.apk 3.1MB

base.apk

SHA256 048d958ee35a030bd397d34dcc58f26c00429cabf3177ac870d3ac699f8ca1b0
MD5 748929067d3ebea91bc5e6a379c6bf8b
SHA1 5751beba4bbf1b9e367f216feadfe6bcad8d0b18
SHA512 2a9d9439ba388068b8b26fd519d325ae4ed378822ebd9a0e91552d4567cb37761369c0567f45b1ee5cb1d0d750c201b3813aa5011884b5dbe2bf13cf01e8c1a2
SSDEEP 98304:YxzwKBzCqSdMmrsElcaihM9DXOMXU5zfrKJdC:YejTOul97OMXRC
TLSH
T18BE5D046FB48997EC8F7533246B546222157CC668B43E6872C4C323C5AB7AD84F5AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b4f0010ddca030359e958345ead165ded63c3e8b70508cca654cc62e02d452df

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.nsleyh

Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

base.apk

File Signature issue

com.nsleyh.MainActivity

com.nsleyh.NsleyhService

Sharing

General

Malware Config

Signatures

File Explorer

base.apk

File Signature issue

com.nsleyh.MainActivity

com.nsleyh.NsleyhService

Android Permissions

base.apk