mizpa[.]apk | Triage™

General

Target
mizpa.apk
Size 17.5MB
Sample260706-gzzd2aex2n
SHA256 b66d8f1321de52c034d194861726be67a4ccb3a3aaffe51f0e13852d2f1d5653
MD5 1ed17062640bf689bfc36ea9ed6a30c0
SHA1 3bf552483577ec6900c5b21652a3d88e3249a625
SHA512 d29b51f5aa50a55ae012f7365d0b907bb4d0d0558603c1b514b574ecaec344b55f0655fba907ea6bb00d86a238f4f9164d26305b83fff1e9cda145c0ee41e914
SSDEEP 393216:XvphI3LUbfGV4vQeF8dvr9IBWQJYTviCZcGGlJMIDb/71d37kUd:vIbUbf3vQeFPUQJQ5PqJMgHXkUd
TLSH
T182072392FF64EE1EC83741331C8A5231651A9E1AC785960BDAAC372D38B75F40EC57E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
mizpa.apk

File Explorer

mizpa.apk

.apk 17.5MB

mizpa.apk

SHA256 b66d8f1321de52c034d194861726be67a4ccb3a3aaffe51f0e13852d2f1d5653
MD5 1ed17062640bf689bfc36ea9ed6a30c0
SHA1 3bf552483577ec6900c5b21652a3d88e3249a625
SHA512 d29b51f5aa50a55ae012f7365d0b907bb4d0d0558603c1b514b574ecaec344b55f0655fba907ea6bb00d86a238f4f9164d26305b83fff1e9cda145c0ee41e914
SSDEEP 393216:XvphI3LUbfGV4vQeF8dvr9IBWQJYTviCZcGGlJMIDb/71d37kUd:vIbUbf3vQeFPUQJQ5PqJMgHXkUd
TLSH
T182072392FF64EE1EC83741331C8A5231651A9E1AC785960BDAAC372D38B75F40EC57E8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

175fe02086d9da640ebbe99d277b3d907fe325ef155b366f18978a77e251f5b7

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MIZPA,O=FaroConnect

com.faroconnect.mizpa

Android Permissions

mizpa.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.faroconnect.mizpa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

mizpa.apk

File Signature issue

com.faroconnect.mizpa.MainActivity

com.yalantis.ucrop.UCropActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.faroconnect.mizpa.notify.MizpaMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.faroconnect.mizpa.reminder.PrayerReminderReceiver

com.faroconnect.mizpa.reminder.BootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Sharing

General

Malware Config

Signatures

File Explorer

mizpa.apk

File Signature issue

com.faroconnect.mizpa.MainActivity

com.yalantis.ucrop.UCropActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.faroconnect.mizpa.notify.MizpaMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.faroconnect.mizpa.reminder.PrayerReminderReceiver

com.faroconnect.mizpa.reminder.BootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

mizpa.apk