Resubmissions

09/07/2026, 12:22

260709-pj2s8abv7x7

09/07/2026, 12:17

260709-pf7v3aa18z7

General

  • Target
    V1A5bOPLszH6.apk
  • Size 10.5MB
  • Sample260709-pj2s8abv7x
  • SHA256 0ab7b85ac7f4d047f94d2dc371fe659ab279d68ac01716522edc0ebf6be61b02
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • V1A5bOPLszH6.apk
    .apk 10.5MB

V1A5bOPLszH6.apk

  • SHA256 0ab7b85ac7f4d047f94d2dc371fe659ab279d68ac01716522edc0ebf6be61b02
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
8ff1526e47ca81de5f28ae686c6634cba2300be7fce7a8222e1cd0b74d22295f
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
com.geljphy.dxy

Android Permissions

V1A5bOPLszH6.apk

Permissions

com.geljphy.dxy.DEVICE_SERVICE_RWROMX

com.geljphy.dxy.STORAGE_MONITOR_REQYRW

com.geljphy.dxy.SECURITY_SERVICE_GUYJRN

com.geljphy.dxy.BROADCAST_PROVIDER_ANYBOY

com.geljphy.dxy.BROADCAST_HANDLER_EHUQTB

com.geljphy.dxy.SENSOR_PROCESSOR_RSZOPL

com.geljphy.dxy.SECURITY_ACCESS_JRRIVA

com.geljphy.dxy.SECURITY_PROCESSOR_XCAVOS

com.geljphy.dxy.PUSH_PROVIDER_NUCEQO

com.geljphy.dxy.CACHE_SERVICE_UFIRVM

com.geljphy.dxy.TOKEN_HANDLER_NKOURR

com.geljphy.dxy.WORK_HANDLER_MRPFIF

com.geljphy.dxy.PERFORMANCE_CONTROL_MFZFPF

com.geljphy.dxy.CONTENT_PROCESSOR_VELBSG

com.geljphy.dxy.AUTH_PROCESSOR_NLESMW

com.geljphy.dxy.SCHEDULED_PROVIDER_JYOTWU

com.geljphy.dxy.DEVICE_CONTROL_VBGJHK

com.geljphy.dxy.WORK_PROVIDER_TAYJWM

com.geljphy.dxy.MESSAGE_CONTROL_MMQWUK

com.geljphy.dxy.SECURITY_ACCESS_JYLTUZ

com.geljphy.dxy.USAGE_PROCESSOR_CDVKNT

com.geljphy.dxy.SYNC_SERVICE_WBSCCU

com.geljphy.dxy.ALERT_PROCESSOR_HYJFDU

com.geljphy.dxy.CACHE_PROCESSOR_UIQUFC

com.geljphy.dxy.ALERT_PROCESSOR_LESYVT

com.geljphy.dxy.ALERT_MANAGER_SLVNEM

com.geljphy.dxy.PUSH_MONITOR_IHMUSC

com.geljphy.dxy.SOCKET_PROVIDER_QKWZQQ

com.geljphy.dxy.SCHEDULED_CONTROL_LSRUUL

com.geljphy.dxy.HARDWARE_HANDLER_PUQTLB

com.geljphy.dxy.ENCRYPTION_ACCESS_XLHIEW

com.geljphy.dxy.CACHE_HANDLER_QDBUGI

com.geljphy.dxy.SOCKET_MANAGER_ZQWPAO

com.geljphy.dxy.NETWORK_CONTROL_MBKBJR

com.geljphy.dxy.USAGE_MANAGER_VZEKQJ

com.geljphy.dxy.AUTH_HANDLER_QDVCRW

com.geljphy.dxy.SYNC_PROVIDER_CRYAHU

com.geljphy.dxy.SCHEDULED_MANAGER_BFGCAA

com.geljphy.dxy.WORK_SERVICE_PPHAGK

com.geljphy.dxy.SCHEDULED_PROVIDER_SLCOMC

com.geljphy.dxy.ALERT_PROCESSOR_OCMYAH

com.geljphy.dxy.SYNC_PROCESSOR_JTMKDC

com.geljphy.dxy.USAGE_ACCESS_XZNREZ

com.geljphy.dxy.CONTENT_PROCESSOR_CRZPUT

com.geljphy.dxy.SYNC_MONITOR_TAIFFZ

com.geljphy.dxy.MOTION_HANDLER_CKVPCP

com.geljphy.dxy.CACHE_PROVIDER_VTMAYK

com.geljphy.dxy.MOTION_PROCESSOR_GBYLAU

com.geljphy.dxy.PROXY_ACCESS_GBSWSC

android.permission.REQUEST_INSTALL_PACKAGES