Instagram[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Instagram.apk
Size 3.2MB
Sample260628-wtyb4sa16w
SHA256 a0e1a0e2098f4043daad7ee6b8242c20639bf62980f59eb27c3712365478f258
MD5 1f344395883525e6db5376136eee765e
SHA1 ab9f0c48fe8516a58d9f012a860c498fa4a51777
SHA512 7df7f0fc6bf9b09594f45991089d5ff95fd17508b144e13ce8dd486f5d6d254e02a48644b12a0205aa27b6b86585c45301c2f189001b2c65040e840908ba4d61
SSDEEP 98304:DroUGdV2tjFmXUu1Aj77UOsG4pWLrm1QEM:oUm0eEusUfG4We1q
TLSH
T1C7F523E1FBE29C26E472E6342D03EB525B18DE118E47EB677650338C18B7B882F464C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Instagram.apk

File Explorer

Instagram.apk

.apk 3.2MB

Instagram.apk

SHA256 a0e1a0e2098f4043daad7ee6b8242c20639bf62980f59eb27c3712365478f258
MD5 1f344395883525e6db5376136eee765e
SHA1 ab9f0c48fe8516a58d9f012a860c498fa4a51777
SHA512 7df7f0fc6bf9b09594f45991089d5ff95fd17508b144e13ce8dd486f5d6d254e02a48644b12a0205aa27b6b86585c45301c2f189001b2c65040e840908ba4d61
SSDEEP 98304:DroUGdV2tjFmXUu1Aj77UOsG4pWLrm1QEM:oUm0eEusUfG4We1q
TLSH
T1C7F523E1FBE29C26E472E6342D03EB525B18DE118E47EB677650338C18B7B882F464C5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9b56c92ae384fcbd1425d30c332dff708d39b3b14762da6313ec75ee77f84d52

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Kevin Systrom,O=Instagram Inc,L=San Francisco,ST=California,C=US

com.instagram.lite

com.facebook.lite.provider.ACCESS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.BATTERY_STATS android.permission.BROADCAST_STICKY android.permission.CALL_PHONE android.permission.CAMERA android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.GET_TASKS android.permission.INTERNET android.permission.READ_CALENDAR android.permission.READ_CONTACTS android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.READ_PHONE_STATE android.permission.READ_PHONE_NUMBERS android.permission.READ_PROFILE android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECORD_AUDIO android.permission.SYSTEM_ALERT_WINDOW android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.WRITE_CALENDAR android.permission.WRITE_CONTACTS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_MEDIA_VISUAL_USER_SELECTED com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.facebook.katana.provider.ACCESS com.facebook.orca.provider.ACCESS com.facebook.mlite.provider.ACCESS com.facebook.wakizashi.provider.ACCESS com.sec.android.provider.badge.permission.WRITE com.sec.android.provider.badge.permission.READ com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS android.permission.REORDER_TASKS android.permission.USE_FULL_SCREEN_INTENT android.permission.BIND_NOTIFICATION_LISTENER_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.CREDENTIAL_MANAGER_SET_ALLOWED_PROVIDERS android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.RUN_USER_INITIATED_JOBS android.permission.BLUETOOTH android.permission.POST_NOTIFICATIONS android.permission.FOREGROUND_SERVICE_MICROPHONE com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE com.instagram.lite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.facebook.lite.webviewrtc.RTCService

com.facebook.lite.download.DownloadService

com.facebook.lite.FbnsIntentService

com.facebook.lite.FbnsForegroundService

com.facebook.lite.notification.messaging.ArmadilloNotificationForegroundService

com.facebook.analyticslite.memory.MemoryDumpUploadService

com.facebook.rti.push.service.FbnsService

com.facebook.lite.notification.LiteFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.facebook.lite.intent.WakefulIntentService

com.facebook.lite.intent.PeriodicTaskJobService

com.facebook.lite.intent.WidgetTaskScheduleJobService

com.facebook.lite.service.SnoozeNotificationService

com.facebook.lite.service.NotificationLoggingService

com.facebook.lite.service.NotificationQuickActionService

com.facebook.lite.service.AppInitService

com.facebook.lite.service.AppRestartService

com.facebook.lite.messagingapps.FirstPartyMessagingAppsDetectionService

com.facebook.lite.bugreporter.screencast.ScreencastService

com.facebook.lite.service.MediaUploadService

com.facebook.browser.lite.BrowserLiteIntentService

com.facebook.lite.browser.BrowserLiteCallbackService

com.facebook.browser.lite.BrowserLiteCallback

com.facebook.video.heroplayer.service.HeroKeepAliveService

com.facebook.appcomponentmanager.AppComponentManagerService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.facebook.videolite.api.VideoUploadForegroundService

com.facebook.videolite.api.VideoUploadJobService

com.facebook.videolite.api.jobscheduler.UploadJobSchedulerService

com.facebook.lite.rtc.impl.service.RtcService

com.facebook.analytics2.logger.service.LollipopUploadSafeService

com.facebook.analytics2.logger.legacy.uploader.LollipopUploadService

com.facebook.analytics2.logger.legacy.uploader.Analytics2UploadService

com.facebook.analytics2.logger.legacy.uploader.AlarmBasedUploadService

com.facebook.voltron.download.scheduledinstaller.OxygenScheduledInstallerJobService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.facebook.secure.packagefinder.PackageFinderService

com.facebook.secure.packagefinder.intent.ACTION_QUERY_PACKAGES

com.facebook.lite.pretos.LiteAppComponentReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.rtc.IncomingCallReceiver

com.facebook.intent.action.prod.RTC_INCOMING_CALL com.facebook.intent.action.prod.RTC_INCOMING_CALL_DISCONNECTED

com.facebook.lite.campaign.CampaignReceiver

com.android.vending.INSTALL_REFERRER

com.facebook.lite.appManager.AppManagerReceiver

com.facebook.appmanager.POST_INSTALL_SSO

com.facebook.sharing.NativeShareSheetReceiver

com.facebook.lite.deviceid.FbLitePhoneIdRequestReceiver

com.facebook.GET_PHONE_ID

com.facebook.appupdate.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.facebook.lite.deviceid.FbLitePhoneIdUpdater$LocalBroadcastReceiver

com.facebook.lite.FbnsIntentService$CallbackReceiver

com.facebook.rti.fbns.intent.RECEIVE

com.facebook.lite.KeepWarmReceiver

com.facebook.rti.push.service.MqttSystemBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT

com.facebook.lite.notification.BadgePresenceReceiver

android.net.conn.USER_PRESENT

com.facebook.lite.notification.BadgeNotificationUtil$DeleteIntent

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.AppController$NetworkStateBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.facebook.lite.notification.PushNotificationLogBroadcastReceiver

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.notification.DirectReplyBroadcastReceiver

com.facebook.lite.notifications.messaging.impl.DeleteMessageNotificationBroadcastReceiver

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.shortcuts.ShortcutCreationReceiver

com.facebook.lite.SHORTCUT_CREATED

com.facebook.lite.notification.LocalNotificationLogBroadcastReceiver

com.facebook.lite.LOCAL_NOTIFICATION_DISMISS

com.facebook.lite.notification.widget.receiver.NotificationsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.facebook.lite.notification.widget.receiver.NotificationsWidgetForceUpdateReceiver

com.facebook.lite.notification.widget.ACTION_FORCE_UPDATE

com.facebook.lite.notification.widget.receiver.NotificationsWidgetAppUpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.notification.NotificationsRemovalTimerReceiver

com.facebook.lite.NOTIFICATIONS_REMOVAL_TIMER_RECEIVER

com.facebook.lite.notification.BalanceSimulationNotificationBroadcastReceiver

com.facebook.lite.BALANCE_SIMULATION_NOTIFICATION

com.facebook.lite.notification.NotificationsSnoozeTimerReceiver

com.facebook.lite.NOTIFICATIONS_SNOOZE_TIMER_RECEIVER_FILTER_NAME

com.facebook.lite.notification.NotificationSchedulingReceiver

com.facebook.lite.NOTIFICATION_SCHEDULING_RECEIVER_FILTER_NAME

com.facebook.lite.browser.ChromeCustomTabsReceiver

com.facebook.lite.intent.IntentScheduler

ANDROID.INTENT.ACTION.BOOT_COMPLETED

com.facebook.lite.intent.WakefulIntentForwarder

com.facebook.lite.datausage.DataUsageBroadCastReceiver

android.intent.action.ACTION_SHUTDOWN android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED

com.facebook.lite.registration.EmptyAppNotifServiceReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.waotp.WAOtpCodeReceiver

com.whatsapp.otp.OTP_RETRIEVED

com.facebook.lite.nativeRtc.receiver.NotificationActionReceiver

com.facebook.lite.rtc.NotificationAction

com.facebook.analytics2.logger.legacy.uploader.HighPriUploadRetryReceiver

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppFlag

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppReceiver

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IS_MANAGED_APP_CHANGED

com.facebook.oxygen.preloads.sdk.firstparty.settings.TosAcceptedFlag

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Android Permissions

Instagram.apk

Permissions

com.facebook.lite.provider.ACCESS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_CALENDAR

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PROFILE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_CALENDAR

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.facebook.katana.provider.ACCESS

com.facebook.orca.provider.ACCESS

com.facebook.mlite.provider.ACCESS

com.facebook.wakizashi.provider.ACCESS

com.sec.android.provider.badge.permission.WRITE

com.sec.android.provider.badge.permission.READ

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

Instagram.apk

File Signature issue

com.facebook.lite.MainActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.facebook.lite.media.AlbumGalleryActivity

com.facebook.lite.loginWithFacebookActivity.LoginWithFBActivity

com.facebook.lite.phonenumberhint.PhoneNumberHint

com.facebook.lite.loginWithFacebook.wrapper.FacebookActivity

com.facebook.lite.loginWithFacebook.wrapper.CustomTabMainActivity

com.facebook.lite.loginWithFacebook.wrapper.CustomTabActivity

com.facebook.lite.storagemanager.ManageStorageActivity

com.facebook.lite.notification.FullScreenNotificationActivity

com.facebook.lite.bugreporter.screencast.ScreencastActivity

com.facebook.lite.webviewrtc.RTCService

com.facebook.lite.download.DownloadService

com.facebook.lite.FbnsIntentService

com.facebook.lite.FbnsForegroundService

com.facebook.lite.notification.messaging.ArmadilloNotificationForegroundService

com.facebook.analyticslite.memory.MemoryDumpUploadService

com.facebook.rti.push.service.FbnsService

com.facebook.lite.notification.LiteFirebaseMessagingService

com.facebook.lite.intent.WakefulIntentService

com.facebook.lite.intent.PeriodicTaskJobService

com.facebook.lite.intent.WidgetTaskScheduleJobService

com.facebook.lite.service.SnoozeNotificationService

com.facebook.lite.service.NotificationLoggingService

com.facebook.lite.service.NotificationQuickActionService

com.facebook.lite.service.AppInitService

com.facebook.lite.service.AppRestartService

com.facebook.lite.messagingapps.FirstPartyMessagingAppsDetectionService

com.facebook.lite.bugreporter.screencast.ScreencastService

com.facebook.lite.service.MediaUploadService

com.facebook.browser.lite.BrowserLiteIntentService

com.facebook.lite.browser.BrowserLiteCallbackService

com.facebook.video.heroplayer.service.HeroKeepAliveService

com.facebook.appcomponentmanager.AppComponentManagerService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.facebook.videolite.api.VideoUploadForegroundService

com.facebook.videolite.api.VideoUploadJobService

com.facebook.videolite.api.jobscheduler.UploadJobSchedulerService

com.facebook.lite.rtc.impl.service.RtcService

com.facebook.analytics2.logger.service.LollipopUploadSafeService

com.facebook.analytics2.logger.legacy.uploader.LollipopUploadService

com.facebook.analytics2.logger.legacy.uploader.Analytics2UploadService

com.facebook.analytics2.logger.legacy.uploader.AlarmBasedUploadService

com.facebook.voltron.download.scheduledinstaller.OxygenScheduledInstallerJobService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.facebook.secure.packagefinder.PackageFinderService

com.facebook.lite.pretos.LiteAppComponentReceiver

com.facebook.lite.rtc.IncomingCallReceiver

com.facebook.lite.campaign.CampaignReceiver

com.facebook.lite.appManager.AppManagerReceiver

com.facebook.sharing.NativeShareSheetReceiver

com.facebook.lite.deviceid.FbLitePhoneIdRequestReceiver

com.facebook.appupdate.DownloadCompleteReceiver

com.facebook.lite.deviceid.FbLitePhoneIdUpdater$LocalBroadcastReceiver

com.facebook.lite.FbnsIntentService$CallbackReceiver

com.facebook.lite.KeepWarmReceiver

com.facebook.rti.push.service.MqttSystemBroadcastReceiver

com.facebook.lite.notification.BadgePresenceReceiver

com.facebook.lite.notification.BadgeNotificationUtil$DeleteIntent

com.facebook.lite.AppController$NetworkStateBroadcastReceiver

com.facebook.lite.notification.PushNotificationLogBroadcastReceiver

com.facebook.lite.notification.DirectReplyBroadcastReceiver

com.facebook.lite.notifications.messaging.impl.DeleteMessageNotificationBroadcastReceiver

com.facebook.lite.shortcuts.ShortcutCreationReceiver

com.facebook.lite.notification.LocalNotificationLogBroadcastReceiver

com.facebook.lite.notification.widget.receiver.NotificationsWidgetProvider

com.facebook.lite.notification.widget.receiver.NotificationsWidgetForceUpdateReceiver