Files_16.xapk
- SHA256 00c1d092f6f1740c2bd73f5a5d34650998afbe1cfd50542334be0c5708c8b756
Overview
overview
6Static
static
6Files_16.zip
android-9-x86
Files_16.zip
android-10-x64
Files_16.zip
android-11-x64
com.google...ui.apk
android-9-x86
com.google...ui.apk
android-10-x64
com.google...ui.apk
android-11-x64
config.xxhdpi.jar
android-9-x86
config.xxhdpi.jar
android-10-x64
config.xxhdpi.jar
android-11-x64
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
Files_16.zip
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Files_16.zip
Resource
android-x64-20260325-en
android-10-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
Files_16.zip
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
com.google.android.documentsui.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
com.google.android.documentsui.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
com.google.android.documentsui.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
config.xxhdpi.jar
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
config.xxhdpi.jar
Resource
android-x64-20260325-en
android-10-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
config.xxhdpi.jar
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
900 seconds
General
- Target Files_16.xapk
- Size 9.2MB
- Sample260629-mxmkcabs4z
- SHA256 00c1d092f6f1740c2bd73f5a5d34650998afbe1cfd50542334be0c5708c8b756
- MD5 b1a3a7abf4290903c2165b5304672c67
- SHA1 46db403aada1fb11813cdaa474a42c0deab13063
- SHA512 b7f809629679fe67aaed4e698ad80c53ab1c1a2b43da6004d5519ffdd3aa273e4425b71632ad42def0c79f54ec5aeda872f75d1a48be407ae34ac9f2a30e2c1f
- SSDEEP 98304:G+B7I55KRX17dn6nxd/mAeM1D5nsEsO5rW61ft2Ui1GtW:G+C5eX7nQFe6U1SW
- TLSH T102A68C42E745DF6AC8BB533654BE133526320D98AB838B83541877BD7EB39E08B457C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Requests dangerous framework permissions 1 IoCs
description ioc Allows an app to post notifications. android.permission.POST_NOTIFICATIONS - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.xxhdpi.apk - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.xxhdpi.apk - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.xxhdpi.apk
File Explorer
-
Files_16.xapk.zip 9.2MB
-
com.google.android.documentsui.apk.apk 9.1MB
-
config.xxhdpi.apk.jar 87KB
-
icon.png.png 10KB
-
manifest.json1KB
com.google.android.documentsui.apk
- SHA256 4d0e5b797a0d0ec924ebe7153e516d1197c68abd4bcdec6e4d88b9b9c1996653
- MD5 acd7e2cd884f422d4c1c8b922ccb872b
- SHA1 110702d04db711c540a62b02fb7a2f885ae349ba
- SHA512 f4c78d1fbc5281ff749c13f699c0ad4b74ac5b19361bd648df99af1f287462bcb6ecb80044f642007afad28f760706905380ea27c995c6ecef456e55562957e3
- SSDEEP 98304:5+B7I55KRX17dn6nxd/mAeM1D5nsEsO5rW61ft2Ui1GO:5+C5eX7nQFe6U1x
- TLSH T1AEA68C42E745DF6AC8BB533654BE133526320D98AB838B83541C76BD7EB39E08B457C8
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
ebb70f275bbbb60e29b2e6805d23c86f6b30595d3cdc30493c8a78d2b29d995189cff6fc1195456ef2fd2d9399828184f8c724ce16d568d3c7ac890e4a2c2775
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
a7:cf:71:49:74:71:4f:05:b3:2b:51:6e:47:d2:78:07:9f:c8:fa:56
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Revocation Status
Not revoked
Timespan
Feb 1, 2019 - Feb 1, 2049
com.google.android.documentsui
com.android.documentsui.files.FilesActivity
android.permission.QUERY_ALL_PACKAGES
android.permission.MANAGE_DOCUMENTS
android.permission.REMOVE_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
android.permission.CACHE_CONTENT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_OVERLAY_PACKAGES
android.permission.INTERACT_ACROSS_USERS
android.permission.MODIFY_QUIET_MODE
android.permission.LOG_COMPAT_CHANGE
android.permission.READ_COMPAT_CHANGE_CONFIG
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.POST_NOTIFICATIONS
android.permission.HIDE_OVERLAY_WINDOWS
android.permission.ACCESS_NETWORK_STATE
android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND
android.permission.READ_DEVICE_CONFIG
com.google.android.documentsui.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.documentsui.picker.TrampolineActivity
android.intent.action.GET_CONTENT
com.android.documentsui.picker.PickActivity
android.intent.action.OPEN_DOCUMENT
android.intent.action.CREATE_DOCUMENT
android.intent.action.GET_CONTENT
android.intent.action.OPEN_DOCUMENT_TREE
com.android.documentsui.files.LauncherActivity
com.android.documentsui.inspector.InspectorActivity
com.android.documentsui.files.FilesActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
com.android.documentsui.ScopedAccessActivity
android.os.storage.action.OPEN_EXTERNAL_DIRECTORY
com.android.documentsui.services.FileOperationService
com.android.documentsui.PackageReceiver
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_DATA_CLEARED
com.android.documentsui.roots.BootReceiver
android.intent.action.BOOT_COMPLETED
com.android.documentsui.PreBootReceiver
android.intent.action.PRE_BOOT_COMPLETED
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.android.documentsui.picker.LastAccessedProvider
com.android.documentsui.picker.PickCountRecordProvider
com.android.documentsui.archives.ArchivesProvider
android.content.action.DOCUMENTS_PROVIDER
config.xxhdpi.apk
- SHA256 2f2efdb459584ba68d10b894257c4245fac111014caa86a296d1d493801711d4
- MD5 aecea330c5dc19806b3dbcd2c2a6076c
- SHA1 b6985274d3dada463ce23f6e41d9c9823a6103c4
- SHA512 b03fbbb7900860db7b00557789833ff400e8ba5cc5ab48c0f4f0bddafdd0a22d8ac0d005e316b514ee760a7c3e96edcfde524a4214bb5d2cafc607ae7b4d577b
- SSDEEP 1536:NsMRMARDEABto/2EFeJ1aLcyo7FO+oIaQQnLSrW:NsMRMUDEABtO2EFK1aLiFIoQnLIW
- TLSH T124935BBBE32DA42FD973C5394ABD1EAB64454CA06918F7615621F20C9FF3981CA85FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
99627a5c89e195045e74aae117e84c550767f105
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
a7:cf:71:49:74:71:4f:05:b3:2b:51:6e:47:d2:78:07:9f:c8:fa:56
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Revocation Status
Not revoked
Timespan
Feb 1, 2019 - Feb 1, 2049
icon.png
- SHA256 a5d067a73d506fb14d1d2ae071673b1958f2e7b64eade6e487cffc4776cdf3ac
- MD5 3d7dc4f2f94ee61618db1c9e8c358a67
- SHA1 e5c283f5f6bbe4d3a8a2688c0383dffb1f0bab01
- SHA512 dfe65ed4d8c60a91bbd7febc1447517b881006a07f22b41bf6dace04c8cb93c827c386b8487944d22df049b91077bd5e50b852444139bc921b197b7613d1b0bf
- SSDEEP 192:8TnrElbZKJQ17KDW2w1crjF40TA6oM41VEUGE6TT53SVz162um0pp:83EeJK7KS2w1gPT/01C9E6TJsAHp
- TLSH T167229FD23A9383E4E56379EFEC30A1E1D5E528A9200177498E9FCE1D026F8A4826775D
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 ca3cc682d7483aec58de029fbed4a4e4429b71a7a50c78a94a204c92419ad6c2
- MD5 33b0e04b0d99f9fb8fe80b7777dc1390
- SHA1 c1e0c65c1a632056717eaf3d617bfff13d735c59
- SHA512 52c1822f7ad01c1d8ef55e3922fba6214ab97cb27712c9326fb3943139dba2cdba5965624abad8de1ac2f3aa011d61321774cd7e41bec295a54b144cfb32fade
- TLSH T192214013AB7E4B73949CD426327C048D5E790B9330F428CCC92849E03A2AE941781FDE
- MD5 SHA1 SHA512 TLSH