com[.]cubic[.]rmvgo[.]apk

Reason

error processing APK: binary.Read: invalid type [2]uint16

General

Target
com.cubic.rmvgo.apk
Size 37.6MB
Sample260709-1rx1sabs2w
SHA256 4ad62ef6b3ba2c9c4398794766fd470f0463c7e06b46a47e5242ba5f23649872
MD5 4d5581746b4291c314bdda328eaa635d
SHA1 363028f54061ad3983bcedff6e01ff9b1f4d406b
SHA512 8ee0aabc6547ffe46cab52847bfd0e9a025d5512b6145e63c4c7eeb4d5d982371fed460f7cd6b5c5d38472a0c0d23443a9add85be47d52ca9fc7fc3c99df926e
SSDEEP 393216:fndSnF9+ymLE+eHfc9fkVp93mhrK400NbNv0X22JO/Xwq1+sPnAV:1SnqE+eH05kVp93mZLv628nq8LV
TLSH
T1D487E143E3224E36EAFEA2310AF753546732E1C467834757980B91B8AF932D56758BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.cubic.rmvgo.apk

File Explorer

com.cubic.rmvgo.apk

.apk 37.6MB

com.cubic.rmvgo.apk

SHA256 4ad62ef6b3ba2c9c4398794766fd470f0463c7e06b46a47e5242ba5f23649872
MD5 4d5581746b4291c314bdda328eaa635d
SHA1 363028f54061ad3983bcedff6e01ff9b1f4d406b
SHA512 8ee0aabc6547ffe46cab52847bfd0e9a025d5512b6145e63c4c7eeb4d5d982371fed460f7cd6b5c5d38472a0c0d23443a9add85be47d52ca9fc7fc3c99df926e
SSDEEP 393216:fndSnF9+ymLE+eHfc9fkVp93mhrK400NbNv0X22JO/Xwq1+sPnAV:1SnqE+eH05kVp93mZLv628nq8LV
TLSH
T1D487E143E3224E36EAFEA2310AF753546732E1C467834757980B91B8AF932D56758BCC
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4daf826b580cd007041201f61057423164448da3a5068532748fad78d3b1a371ff434eb9ff5dcc1dee5ceb30a9533cb83d0af96e1a651d5c0b69b18f3d4acba0

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.cubic.rmvgo

Android Permissions

com.cubic.rmvgo.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACTIVITY_RECOGNITION

android.permission.POST_NOTIFICATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_SCAN

android.permission.NFC

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.cubic.rmvgo.permission.INTERAPP

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.BLUETOOTH_ADMIN

android.permission.RECEIVE_BOOT_COMPLETED

com.cubic.rmvgo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

Errors

General

Malware Config

Signatures

File Explorer

com.cubic.rmvgo.apk

File Signature issue

com.cubic.rmv30.MainActivity

com.cubic.rmv30.ui.tickets.deutschebahn.DBBookingActivity

de.hafas.qrscanner.QrScanActivity

de.hafas.app.debug.DebugInfoActivity

de.hafas.rmv.debug.RmvDebugActivity

de.hafas.app.debug.LogDetailsActivity

net.openid.appauth.AuthorizationManagementActivity

net.openid.appauth.RedirectUriReceiverActivity

com.braintreepayments.api.BraintreeDeepLinkActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.cubic.rmv30.RMVMessagingService

androidx.camera.core.impl.MetadataHolderService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.siemens.live.navigation.shared.core.presentation.service.LiveNavigationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.fairtiq.sdk.internal.services.tracking.TrackingServiceImpl

com.mapbox.common.LifecycleService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

de.hafas.notification.service.PushNotificationReceiver

com.siemens.live.navigation.shared.core.presentation.receiver.NotificationActionBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.mapbox.common.location.LocationUpdatesReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

org.matomo.sdk.extra.InstallReferrerReceiver

androidx.tracing.perfetto.TracingReceiver

androidx.tracing.perfetto.StartupTracingConfigStoreIsEnabledGate

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

de.hafas.app.HafasFileProvider

com.google.mlkit.common.internal.MlKitInitProvider

com.fairtiq.sdk.internal.telemetry.processTime.StartupTimeProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

com.cubic.rmvgo.apk