tmpy8s8c3tt
- SHA256 3cc6e6617c1664c600a11cd855bc3e58e63d7d2a47e9dd0c3159fda856aa4b04
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
tmpy8s8c3tt.zip
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpy8s8c3tt.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpy8s8c3tt.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target tmpy8s8c3tt
- Size 7.3MB
- Sample260702-pdfnssf19k
- SHA256 3cc6e6617c1664c600a11cd855bc3e58e63d7d2a47e9dd0c3159fda856aa4b04
- MD5 910c8410c7212c8ccb8a0e4ae6f7045b
- SHA1 7af46c0388479eaa1fd034a205b006f7d5e31de7
- SHA512 99fbf17697f3c2777fb4c78732aa3c99e30258418ba04b45c2997d729957e8dfbf5a89d5e0dc61cbb20d0dfdd6e3e7ee13bf5242c404094e1027634f03cc1641
- SSDEEP 196608:c9W5AupzrAUueFp+3WC9pmXVdGY2S5EC9hX2AB:c9W5AupseFeTfcrGhKXX2Q
- TLSH T16376129AE308902FE97710326DBA122202571C57D983DF43A5A5720C2EB7B945FBEFD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Insecure Codesign Algorithm 2 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.armeabi_v7a.apk - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.armeabi_v7a.apk
File Explorer
-
tmpy8s8c3tt.zip 7.3MB
-
com.veilshort.ziadrama.apk.apk 7.1MB
-
config.arm64_v8a.apk.jar 60KB
-
config.armeabi_v7a.apk.jar 56KB
-
manifest.json350B
com.veilshort.ziadrama.apk
- SHA256 c757ae2c24dd6418af2b02177a2c5f1da6fc4d181a0a5279a743fd17c549ec5c
- MD5 f47af965533979dfbe37f4d1591b7814
- SHA1 12abaf882b4ec9eb111730288bcb71a8f01514bb
- SHA512 5fa1929dbed89358cd62eb083677d330e1e11438b05443fa7a3e06388f01c4f15f0d5b02f3c7b00dba0ed073552fd4293ec01a075d437e48c04371ed127cb801
- SSDEEP 196608:S9W5AupzrAUueFp+3WC9pmXVdGY2S5EC9hX2Ak:S9W5AupseFeTfcrGhKXX2v
- TLSH T10276129AE318902FE93710326EBA122201571C57D983DF43A5A5720C2EB7B945FBEFD4
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
46cc9f384f45cdd56200c2ebcae0c8b08c8563b38f957d38506e910129d965904d1c3a6d3a871e972a55388ec15e6e853edbc31126df507c32cce50ecaa81aa8
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
9b:e3:48:51:4a:57:ca:2a:da:84:e2:8a:b0:ef:db:00:15:70:0f:3c
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 17, 2026 - Jun 17, 2056
com.veilshort.ziadrama
com.veil.drama.VDLauncherActivity
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE
android.permission.RECEIVE_BOOT_COMPLETED
com.veilshort.ziadrama.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.android.vending.CHECK_LICENSE
com.veil.drama.VDPlayActivity
com.veil.drama.VDHistoryActivity
com.veil.drama.VDHomeActivity
com.veil.drama.VDLauncherActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.MAIN
com.facebook.FacebookActivity
com.veil.drama.VeilActivity
com.facebook.CustomTabMainActivity
com.facebook.CustomTabActivity
android.intent.action.VIEW
com.google.android.gms.ads.AdActivity
com.google.android.gms.ads.OutOfContextTestingActivity
com.google.android.gms.ads.NotificationHandlerActivity
com.google.android.gms.common.api.GoogleApiActivity
com.pairip.licensecheck.LicenseActivity
com.google.android.gms.ads.AdService
com.veil.drama.VDHomeService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.veil.drama.VDHistoryService
android.service.notification.NotificationListenerService
com.veil.drama.player_lib.VDPlayService
android.media.MediaRouteProviderService
android.media.MediaRoute2ProviderService
android.media.browse.MediaBrowserService
androidx.room.MultiInstanceInvalidationService
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.gms.ads.MobileAdsInitProvider
androidx.startup.InitializationProvider
com.veil.drama.VDLauncheProvider
com.samsung.android.intent.action.DEVICE_SEARCH
com.samsung.android.search.intent.ACTION_CONTENT_SEARCH
com.samsung.android.sdk.command.COMMAND_PROVIDER
config.arm64_v8a.apk
- SHA256 39e8a0cde64a1fd67ebef5618570b03c401f858c40b5529eb4fa4544138e0d78
- MD5 39bcfc7469eac2f9d1a9eda612bbfbf0
- SHA1 22fc340132e950a47350e94764850d2a37f96030
- SHA512 ae8109225e9b102936b9f30ae93fc60b60eb487180e809e2d409dab5271cbaf0b324dd320356ca7b57d822acf63d119a554eba5cb3b9dd5f95e9a26db7cab8f0
- SSDEEP 384:bSQ6qm+vysyTs8K9FPkqM3uSPQgvERyzbhUZQmsyS8tRAaFV1daEdV1IEkhVtfDb:ZvbyTsRnShQxsVG9FV1tdV1WtfD1DPR
- TLSH T12A537D6ED78CD823E6C8927C898A4F36BA31E484DB7143835628566DFD033D0DE16B75
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
6510e9dd62dcf4f9b0bfd7374ab8119a0e1412d2
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
9b:e3:48:51:4a:57:ca:2a:da:84:e2:8a:b0:ef:db:00:15:70:0f:3c
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 17, 2026 - Jun 17, 2056
config.armeabi_v7a.apk
- SHA256 e8411bf62fd1297f64342b2d249bf9dcd0d2dc7510bbe99eb650ed1e7ae6d149
- MD5 2f16b5cd6c14e56e95e042dee0a77421
- SHA1 e2d7aa2ae314633a2e9f47dabecd38181512eeb7
- SHA512 b4d4a18c0aa4388a7cb27364959d6cff4138d02c5fb0e7705827a13cb5ed5da992af44fb45df31668019b73f16042f951bb8c73f533d3940b22d073a2dc35bea
- SSDEEP 384:Hw8LUSACxF+GEjOnsIjC5tDCHg/LYQp+1g1FUWRE1xvuhVaKL6n:Q8kCPwjOZCTLLYY+1g1CWRE1xGaK4
- TLSH T1EB438D57A780CD0AD9A953397C4F87756F38CD41C5222B636E483B687F9A3F48E06718
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
10e3f891c04cd28665f3962a62c6ccfa5de2982f
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
9b:e3:48:51:4a:57:ca:2a:da:84:e2:8a:b0:ef:db:00:15:70:0f:3c
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 17, 2026 - Jun 17, 2056
manifest.json
- SHA256 57302ea07af2cdc073022cee05428277335deebacfc0e3fa0e9cd9268cc093bf
- MD5 48eaa7776230f9e4b4991bdf3343be14
- SHA1 b15f5f691c4a6ae53bc7ea0feaa86595d9448c2e
- SHA512 86efc10cb8997d66d590a3bdb792db09070155558d148e9666c19c22f3a938abeb9370ac1b391133558d724b8e2290921e54d611d16eac43197e88623192df8f
- TLSH T10EE04F35245D9C7FA305DFC5EA02149896FD1DB25C812EC9BADFAF0807382891286CB4
- MD5 SHA1 SHA512 TLSH