d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e[.]zip

General

Target
d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.zip
Size 9.7MB
Sample260710-bm3m2acy2w
SHA256 2f4acdf383bb686a732f59f0c9be1fa719000e4c793d9560ebb4f62113ac5bb9
MD5 a6b8fbc6fd6a0f7c4eb39a50ae911d5e
SHA1 ef587dde99470f4e97bca80ce3ac55a0be5caa07
SHA512 844c6afce63b0e6430fd34dab365ef2372126e579af3de4336451b1bad2fd098ed5e90c527b76441896d10c7d70663631c2bcfe3693e191f1083e6fbdd95c064
SSDEEP 196608:k6lL4JHMtfC1PPq7XlHB0QmuNFqgZ7F19HYNGH4pqRUgt9U5:p4Otv7XlZNLZJrHNYOtq5
TLSH
T108A63379E427CFCE95D1B8AB4B18B04A64721DE47A43F23346D10255A3B304EECDBB66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.apk

File Explorer

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.zip

.zip 9.7MB
d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.apk

.apk 9.9MB

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.zip

SHA256 2f4acdf383bb686a732f59f0c9be1fa719000e4c793d9560ebb4f62113ac5bb9
MD5 a6b8fbc6fd6a0f7c4eb39a50ae911d5e
SHA1 ef587dde99470f4e97bca80ce3ac55a0be5caa07
SHA512 844c6afce63b0e6430fd34dab365ef2372126e579af3de4336451b1bad2fd098ed5e90c527b76441896d10c7d70663631c2bcfe3693e191f1083e6fbdd95c064
SSDEEP 196608:k6lL4JHMtfC1PPq7XlHB0QmuNFqgZ7F19HYNGH4pqRUgt9U5:p4Otv7XlZNLZJrHNYOtq5
TLSH
T108A63379E427CFCE95D1B8AB4B18B04A64721DE47A43F23346D10255A3B304EECDBB66
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.apk

SHA256 d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e
MD5 9d7630652dc5db0a22dfee2bd5c81ed5
SHA1 859c39672f03cc1a82120854db57f895ffa3d140
SHA512 0e7bd5df200adea070b5b083057aa99e8e487ebf6287eea233d8435364e91d1cebb7a9536e19ce6019703007e93c4a755cf41242e72baa8af0c15972b4a12412
SSDEEP 196608:X+zuU9MaFugJMDQKdkcPKvsntNH2wcKRPBuUxwmbDfxsvAYEC+mXw:uSeogJz6vCvxKPB2mPfRC7g
TLSH
T10CA63342F6FC8A3BE032D272559426786049BD29CA66334E7484736E70BB7DC8F857E1
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

File Signature issue

Digest

70e1164abab4df4b16ad4d48e24a99bf1615924796e5a3c61008117a1c0845ce

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=JXnmffFqnjM

com.ktgkqd.dmdcfepplv

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.zip

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.apk

File Signature issue

com.ktgkqd.dmdcfepplv.MainActivity

com.ktgkqd.dmdcfepplv.estLXvtEU

com.google.android.gms.common.api.GoogleApiActivity

com.ktgkqd.dmdcfepplv.eBTZ

com.ktgkqd.dmdcfepplv.FirebaseMessagingKeepAliveService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.ktgkqd.dmdcfepplv.eFxL

com.ktgkqd.dmdcfepplv.ewRymCyekVr

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.zip

d1d8f20d2aeb7283e24319320202bb9a786eb3387a027487bc83734de9c1507e.apk

File Signature issue

com.ktgkqd.dmdcfepplv.MainActivity

com.ktgkqd.dmdcfepplv.estLXvtEU

com.google.android.gms.common.api.GoogleApiActivity

com.ktgkqd.dmdcfepplv.eBTZ

com.ktgkqd.dmdcfepplv.FirebaseMessagingKeepAliveService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.ktgkqd.dmdcfepplv.eFxL

com.ktgkqd.dmdcfepplv.ewRymCyekVr

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider