Downloader[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Downloader.apk
Size 37.4MB
Sample260704-vfcmtaas21
SHA256 16a77ad1ddbef5f8b10da2fce96c3dc40d5c65bb474ecff37cd983f7a0e65f3a
MD5 40d436a548af74c5c719fa2c2d56587f
SHA1 dd565d32e0e14c7e2eec88a6880be1bfa2f3d301
SHA512 792dc1151ab9476b7a0856bd077dddf30d10d4a056fb1dd37f36ea52afb9dba631d97c9bfc56259763ea732b346df75d5fa6b3eae4689fde06723d3107c1067a
SSDEEP 786432:zITsZyIiAIbR9vETM8Mv5aFB1mfz/0CE1qxxCY:0TsZyIiAIbk488Q1m70CE1aEY
TLSH
T18787D003E7565D22C5BE833658FA87147B319E4AA783A3431055F6B8FCF32D4DA992C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Downloader.apk

File Explorer

Downloader.apk

.apk 37.4MB

Downloader.apk

SHA256 16a77ad1ddbef5f8b10da2fce96c3dc40d5c65bb474ecff37cd983f7a0e65f3a
MD5 40d436a548af74c5c719fa2c2d56587f
SHA1 dd565d32e0e14c7e2eec88a6880be1bfa2f3d301
SHA512 792dc1151ab9476b7a0856bd077dddf30d10d4a056fb1dd37f36ea52afb9dba631d97c9bfc56259763ea732b346df75d5fa6b3eae4689fde06723d3107c1067a
SSDEEP 786432:zITsZyIiAIbR9vETM8Mv5aFB1mfz/0CE1qxxCY:0TsZyIiAIbk488Q1m70CE1aEY
TLSH
T18787D003E7565D22C5BE833658FA87147B319E4AA783A3431055F6B8FCF32D4DA992C8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

fc1eebfbe25813400438be8ee9d725fa5faa1e0dfd3b6d7e54b772a8cc729f3b

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=nzKdUlNGz,OU=nEnFkhoeqbA,O=vCqIFWFRXda,L=WUWlKkborbG,ST=kTFhDWuWHr,C=JP

io.github.besmartapps.n001

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

sg.bigo.ads.api.PopupAdActivity

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.mbridge.msdk.out.LoadingActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.applovin.sdk.AppLovinWebViewActivity

com.mbridge.msdk.activity.MBCommonActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.ironsource.sdk.controller.ControllerActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.google.android.gms.ads.NotificationHandlerActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.inmobi.ads.rendering.InMobiAdActivity

io.github.besmartapps.n001.MainActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

sg.bigo.ads.api.LandingStyleableActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.AudienceNetworkActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

io.github.besmartapps.n001.SplashActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

io.github.besmartapps.n001.nechJdSqHH

android.intent.action.MAIN

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.ironsource.sdk.controller.InterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

com.chartboost.sdk.view.CBImpressionActivity

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.adview.AppLovinFullscreenActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.LandscapeAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

sg.bigo.ads.api.CompanionAdActivity

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.core.telecom.internal.MuteStateReceiver

android.media.action.MICROPHONE_MUTE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

Android Permissions

Downloader.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.MANAGE_OWN_CALLS

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_FULL_SCREEN_INTENT

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.POST_NOTIFICATIONS

Sharing

General

Malware Config

Signatures

File Explorer

Downloader.apk

File Signature issue

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

sg.bigo.ads.api.PopupAdActivity

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.mbridge.msdk.out.LoadingActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.applovin.sdk.AppLovinWebViewActivity

com.mbridge.msdk.activity.MBCommonActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.ironsource.sdk.controller.ControllerActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.google.android.gms.ads.NotificationHandlerActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.inmobi.ads.rendering.InMobiAdActivity

io.github.besmartapps.n001.MainActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

sg.bigo.ads.api.LandingStyleableActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.google.android.gms.ads.AdActivity

com.facebook.ads.AudienceNetworkActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

io.github.besmartapps.n001.SplashActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

io.github.besmartapps.n001.nechJdSqHH

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.ironsource.sdk.controller.InterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

com.chartboost.sdk.view.CBImpressionActivity

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.adview.AppLovinFullscreenActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.LandscapeAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

sg.bigo.ads.api.CompanionAdActivity

com.chartboost.sdk.internal.video.repository.exoplayer.VideoRepositoryDownloadService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.work.impl.background.systemjob.SystemJobService

com.google.android.gms.measurement.AppMeasurementService

androidx.room.MultiInstanceInvalidationService

com.google.android.gms.ads.AdService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.google.firebase.components.ComponentDiscoveryService

androidx.core.telecom.internal.JetpackConnectionService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.profileinstaller.ProfileInstallReceiver