4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

General

Target
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
Size 4.0MB
Sample260701-h6bf8aaz4t
SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
MD5 0da3a83b7462a477e29a409bc58f1db3
SHA1 c7526ae7e79d274fb369384d815ba5cb27915c60
SHA512 428dca4737e646490fdcc5104456ba85eb9e9ea98bc1c37ab2af5d365958c6fc7a91e99a48cb9d302db4a05a6cf0bfffaa6fbb0e76fec569c239163b401b78ca
SSDEEP 98304:ty3jQd9U2ffjr+xTGYOtxe4Bd2WgyVRKNZflMBd5cW:tyTYS2XUTUtxe4Bc3yCflhW
TLSH
T155161282F7C8AD2BCD77C03357B60A7B25468C468A46E7471954B37C98BBAC44B81FC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

File Explorer

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

.apk 4.0MB

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

SHA256 4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256
MD5 0da3a83b7462a477e29a409bc58f1db3
SHA1 c7526ae7e79d274fb369384d815ba5cb27915c60
SHA512 428dca4737e646490fdcc5104456ba85eb9e9ea98bc1c37ab2af5d365958c6fc7a91e99a48cb9d302db4a05a6cf0bfffaa6fbb0e76fec569c239163b401b78ca
SSDEEP 98304:ty3jQd9U2ffjr+xTGYOtxe4Bd2WgyVRKNZflMBd5cW:tyTYS2XUTUtxe4Bc3yCflhW
TLSH
T155161282F7C8AD2BCD77C03357B60A7B25468C468A46E7471954B37C98BBAC44B81FC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

831227002ef3537c7c9078dc03d01f347698b3dc

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=com.yktop.android.apps

Chains

Jan 1, 0001

com.yktop.android.apps

Android Permissions

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

com.yktop.android.apps.permission.C2D_MESSAGE

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

File Signature issue

core.com.packed.injects_core.Screen

webteam.displ.com.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

core.com.packed.injects_core.Worker

core.com.packed.SdkFcmMessagingService

core.com.packed.SdkFcmIdService

core.com.packed.scheduler.SmartSchedulerAlarmReceiverService

core.com.packed.scheduler.SmartSchedulerPeriodicTaskService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

core.com.packed.injects_core.CHandler

core.com.packed.scheduler.SmartSchedulerAlarmReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

core.com.packed.Provider

com.google.firebase.provider.FirebaseInitProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256

File Signature issue

core.com.packed.injects_core.Screen

webteam.displ.com.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

core.com.packed.injects_core.Worker

core.com.packed.SdkFcmMessagingService

core.com.packed.SdkFcmIdService

core.com.packed.scheduler.SmartSchedulerAlarmReceiverService

core.com.packed.scheduler.SmartSchedulerPeriodicTaskService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.iid.FirebaseInstanceIdService

core.com.packed.injects_core.CHandler

core.com.packed.scheduler.SmartSchedulerAlarmReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

core.com.packed.Provider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

4cc68830a108b03171c01e0b0f42d5257982c51f3e39bbe7a3b712a7e4baa256