Ready[.]apk | Triage™

Resubmissions

10/07/2026, 14:36

260710-rytr9sbs9k6

10/07/2026, 11:35

260710-nqagwaaw5l6

Sharing

Copy URL Twitter E-mail

General

Target
Ready.apk
Size 6.2MB
Sample260710-rytr9sbs9k
SHA256 47e94c3f41a227e123022609d833d42068401ba42abb0889a44edbdb2a61b47d
MD5 193242783502bd3a03eec05214985e16
SHA1 7861d77a8bbcec9a119d8f444e6828cf52aff122
SHA512 04f6b8d4112f07c23f3ccf9dc582944f8047b8bc74b5038c6c998691ead04816853aed269025ee95fd7d4612baede4f71842ee6835d12f3d9370937adb944999
SSDEEP 98304:leEy8ZkOOOz6unHDoKdTxDFe4AAnumznzBaTh0t0ewyFWfl:leE7kFOzNd5Fe4rnpzE+ndFK
TLSH
T15D66D037EA46CDE5E1BD567066B7CA09370F6ED6CCC00A7B4095B1CD6E335820AC968B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Ready.apk

File Explorer

Ready.apk

.apk 6.2MB

Ready.apk

SHA256 47e94c3f41a227e123022609d833d42068401ba42abb0889a44edbdb2a61b47d
MD5 193242783502bd3a03eec05214985e16
SHA1 7861d77a8bbcec9a119d8f444e6828cf52aff122
SHA512 04f6b8d4112f07c23f3ccf9dc582944f8047b8bc74b5038c6c998691ead04816853aed269025ee95fd7d4612baede4f71842ee6835d12f3d9370937adb944999
SSDEEP 98304:leEy8ZkOOOz6unHDoKdTxDFe4AAnumznzBaTh0t0ewyFWfl:leE7kFOzNd5Fe4rnpzE+ndFK
TLSH
T15D66D037EA46CDE5E1BD567066B7CA09370F6ED6CCC00A7B4095B1CD6E335820AC968B
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4dc5379dd4529532f3d1dda721999543e4f4eaf0ab9dd98a09af844187a648ba

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=US,L=US,ST=US,C=US

password.grok.revute

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.MainActivity

android.intent.action.CHOOSER android.intent.action.MAIN android.intent.action.VIEW android.intent.action.SEND android.intent.action.SEND_MULTIPLE android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_CHANGED com.ui.OnAlarmReceiver.ACTION_WIDGET_RECEIVER com.android.vending.billing.InAppBillingService.COIN com.android.vending.billing.InAppBillingService.COIO com.android.vending.billing.InAppBillingService.LUCM com.android.vending.billing.InAppBillingService.PROX ir.cafebazaar.pardakht.InAppBillingService.BIND ru.aaaaaaax.installer com.nokia.payment.iapenabler.InAppBillingService.BIND com.android.vending.billing.InAppBillingService.INST

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestAccess

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.FloatingView

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.cvrmjdmyjduegmfjvmoikjceqtbtaqgtatcyimgocqxwpıiuhf4.CraxsBrowser

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.CameraActvity

password.grok.revute.xyz

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestScreenCap

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.SecondActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.WakeupActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestUninstall

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestInstallPrim

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.installupdate

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.flyActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.OpenActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.OpenChrome

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestDrawOver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestDataUsage

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestVPN

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestPermissions

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestOPPOB

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestPermission2

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestKeyboard

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestBattery

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestAdmin

Android Permissions

Ready.apk

Permissions

android.permission.RECORD_AUDIO

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

oppo.permission.OPPO_COMPONENT_SAFE

oplus.permission.OPLUS_COMPONENT_SAFE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_FULL_SCREEN_INTENT

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Ready.apk

File Signature issue

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.MainActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestAccess

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.FloatingView

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.cvrmjdmyjduegmfjvmoikjceqtbtaqgtatcyimgocqxwpıiuhf4.CraxsBrowser

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.CameraActvity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestScreenCap

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.SecondActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.WakeupActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestUninstall

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestInstallPrim

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.installupdate

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.flyActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.OpenActivity

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.OpenChrome

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestDrawOver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestDataUsage

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestVPN

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestPermissions

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestOPPOB

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestPermission2

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestKeyboard

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestBattery

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.RequestAdmin

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.initializeService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.cvrmjdmyjduegmfjvmoikjceqtbtaqgtatcyimgocqxwpıiuhf4.CameraHandler

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.LocationService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.AccessService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.BackgroundWorker

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.CommandsService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.FirewallServices

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.StartScreenCapture

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.MyJobService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.frioptzottqzzwqtıjawkwgewujıfnzxhdewhqfjzfgqxzseuk3.KeyboardService

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.yrcklbzzjdncguuesqvjoyeltmgsdsyiiyvzwwgjtuqxxqvtrj5.CustomReceiver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.yrcklbzzjdncguuesqvjoyeltmgsdsyiiyvzwwgjtuqxxqvtrj5.BootReceiver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.yrcklbzzjdncguuesqvjoyeltmgsdsyiiyvzwwgjtuqxxqvtrj5.PackagesReceiver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.yrcklbzzjdncguuesqvjoyeltmgsdsyiiyvzwwgjtuqxxqvtrj5.ScreenReceiver

password.grok.nnurinuaıbqmxcceszvdqsyjirnylngtlvexrqbxsefmrsefoh2.yrcklbzzjdncguuesqvjoyeltmgsdsyiiyvzwwgjtuqxxqvtrj5.Datareciver

password.grok.AdminReceiver

androidx.core.content.FileProvider

androidx.core.content.FileProvider

Android Permissions

Ready.apk