updata_260624[.]apk

Target
updata_260624.apk
Size 171KB
Sample260629-qcc2ysd171
SHA256 0c333047d22bb7147f5f95bd8562f96eb5326321fb269dcc889465e7c455bc73
MD5 80883531ffb3dd964d1f3a05d39a1cc0
SHA1 f8d3010b2381763018cca23a0d396d0f1dda47b4
SHA512 2dd74293d4a66b34391679a4443c2384803484ead97fde0ae68756468b7b7dded93a855896cdf215a96dc453d30d208e07da8842a9abd624e35f18504b76a2f4
SSDEEP 3072:Ogo7P4JADj2Z8VMQBsPrXrLc3LDwPjSJGg+lcwgndWSOEIZnNOoy:k7gUaL9D4EvgndWT5N7y
TLSH
T1B804F191B6FE4651FB7E973CCB3C948A06393E89CE00A31F7565728C0D726C35E61A26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
updata_260624.apk

File Explorer

updata_260624.apk

.apk 171KB

updata_260624.apk

SHA256 0c333047d22bb7147f5f95bd8562f96eb5326321fb269dcc889465e7c455bc73
MD5 80883531ffb3dd964d1f3a05d39a1cc0
SHA1 f8d3010b2381763018cca23a0d396d0f1dda47b4
SHA512 2dd74293d4a66b34391679a4443c2384803484ead97fde0ae68756468b7b7dded93a855896cdf215a96dc453d30d208e07da8842a9abd624e35f18504b76a2f4
SSDEEP 3072:Ogo7P4JADj2Z8VMQBsPrXrLc3LDwPjSJGg+lcwgndWSOEIZnNOoy:k7gUaL9D4EvgndWT5N7y
TLSH
T1B804F191B6FE4651FB7E973CCB3C948A06393E89CE00A31F7565728C0D726C35E61A26
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4a2b5cf06741a0e05fd42e88b89f8d45cac9c3d7885c3313d0aff8b2c811ed20

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.dtyqef.rgvw.qipsu

Android Permissions

updata_260624.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.POST_NOTIFICATIONS

android.permission.SEND_SMS

android.permission.READ_SMS

updata_260624.apk

File Signature issue

zxe5z.oog7rs.adwme.Macv67d

zxe5z.oog7rs.adwme.pob99l.Oifazzo

zxe5z.oog7rs.adwme.pob99l.U4napc9c

zxe5z.oog7rs.adwme.pob99l.Go9h4

zxe5z.oog7rs.adwme.knxl.Ncx2y

zxe5z.oog7rs.adwme.knpv8.Mznkfv4l

zxe5z.oog7rs.adwme.knpv8.Oxuatmr

zxe5z.oog7rs.adwme.knpv8.G0kv