c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

General

Target
c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14
Size 73.3MB
Sample260702-gsar4act61
SHA256 c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14
MD5 44f28896773d67652c2b9f22625a66dd
SHA1 46e48bacf09727b884c06d7ba9c5b705330e7c13
SHA512 d2cf41ca0ad7c9df6226cebad5cf6208bc5b1fb0a11deec0b06e02a75e79af3021bdb461d73ab716c0d4ca5ee2d4b6f106ebfca697a4f2f403fef6cc9ada2bbf
SSDEEP 786432:9/jyb0L+IGRRHuHmvjK7zGRtnFId3CpSleHL5:5jLzGRlhu7leHL5
TLSH
T144F7D043F059853AC8EAE538AB1F4632B2347C484796959B360CB3107FBB5E05F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

File Explorer

c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

.apk 73.3MB

c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

SHA256 c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14
MD5 44f28896773d67652c2b9f22625a66dd
SHA1 46e48bacf09727b884c06d7ba9c5b705330e7c13
SHA512 d2cf41ca0ad7c9df6226cebad5cf6208bc5b1fb0a11deec0b06e02a75e79af3021bdb461d73ab716c0d4ca5ee2d4b6f106ebfca697a4f2f403fef6cc9ada2bbf
SSDEEP 786432:9/jyb0L+IGRRHuHmvjK7zGRtnFId3CpSleHL5:5jLzGRlhu7leHL5
TLSH
T144F7D043F059853AC8EAE538AB1F4632B2347C484796959B360CB3107FBB5E05F66BE1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b6d4a34c36271f1a401feb7296c49bfe6e4fe92cb11464888df03c7d691a31cd

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Anton Tananaev,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

org.traccar.client

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.location.PassiveLocationReceiver

com.transistorsoft.locationmanager.location.SlcLocationReceiver

com.transistorsoft.locationmanager.geofence.GeofencingReceiver

com.transistorsoft.locationmanager.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACTIVITY_RECOGNITION

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.huawei.hms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.FOREGROUND_SERVICE_LOCATION

oppo.permission.OPPO_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

org.traccar.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14

File Signature issue

org.traccar.client.MainActivity

com.transistorsoft.locationmanager.activity.TSLocationManagerActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.transistorsoft.locationmanager.service.TrackingService

com.transistorsoft.locationmanager.service.LocationRequestService

com.transistorsoft.locationmanager.service.ActivityRecognitionService

com.transistorsoft.locationmanager.service.GeofencingService

com.transistorsoft.locationmanager.service.PolygonGeofencingService

com.transistorsoft.locationmanager.scheduler.ScheduleService

com.transistorsoft.locationmanager.scheduler.ScheduleJobService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.transistorsoft.locationmanager.service.FgsLaunchGate

com.transistorsoft.locationmanager.scheduler.ScheduleAlarmReceiver

com.transistorsoft.locationmanager.location.PassiveLocationReceiver

com.transistorsoft.locationmanager.location.SlcLocationReceiver

com.transistorsoft.locationmanager.geofence.GeofencingReceiver

com.transistorsoft.locationmanager.BootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.transistorsoft.locationmanager.util.LogFileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

com.google.mlkit.common.internal.MlKitInitProvider

Android Permissions

c84fa39061e52756c6ebc20f109ec85a235588a59b290b999adf09eb01782a14