nah.zip
- SHA256 42f9815b39fdbd74b92718923d9a76802ac9ec86c6b44bf08bb32be1f6293c87
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
nah/random.apk
Resource
android-33-x64-arm64-20260708-en
android-13-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
nah/random.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
nah/random.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
nah/random.apk
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
nah/random.apk
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
nah/random.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
General
- Target nah.zip
- Size 4.8MB
- Sample260711-nrat2abs81
- SHA256 42f9815b39fdbd74b92718923d9a76802ac9ec86c6b44bf08bb32be1f6293c87
- MD5 c43fe2ebcacc7d39174d5182b1784a38
- SHA1 7f00e1ab6448e967563818b327d353ab00db326a
- SHA512 cc3283a3d98eda273b77b75fe508d03b66099825c1e8f9ad268395345260af81f6c6e1d2a18da7c89cf436397bf5f1ef65799083e8df813dcb24c1ef45af0804
- SSDEEP 98304:ODkYBxRZz6wMQ7u//pA9PiD+72+h3Z84s0AeMI74dRyjAahcg35vdhIQaqQmovG8:O1hZz6wMQaGFIop8QOdRyM6hNjRZ4
- TLSH T17236337775BF301EAFAEB991A131BA62C368FEF653D120BA740401C32A83C52B561D75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 4 IoCs
description ioc Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows financial apps to read filtered sms messages. android.permission.SMS_FINANCIAL_TRANSACTIONS - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/nah/random.apk
File Explorer
-
nah.zip.zip 4.8MB
-
nah/random.apk.apk 6.3MB
nah/random.apk
- SHA256 4c79acfdf39f23f3c8b1516de48e82032a7978f244017caa571a16208f057535
- MD5 17a8cdfb76d694e08b7a07a29cb3e67e
- SHA1 fa19b15627b86248796e7933babf6685f6d5d281
- SHA512 091641bb9075492122b5ee4d27b6848378deac27cb026fea121cfc22bba2118447b86a644ce28df8864dd8adbbf504a468fa60d5dac769abee1b991027f09f7f
- SSDEEP 98304:OpNHr6z+A0GHW/iIMWC/AViJ/XDC3Que/C+pYMGSKKce4MtbZAOY9AaDcPpPnG/B:Op5/qZf9zC38/CfMGSuoZC0PZG/hbp+o
- TLSH T18B66E08CFB89D62BC4776532417A6726414B4C0A9E83EB57B958720C6CB76C50F8EBCC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
ccbfed2a93c1168f01c66b95bc7f6bbe74f0d4d8d3852263a6945688d67c5d4d
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.fireway.test
com.fireway.testing.MainActivity
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.SEND_SMS_NO_CONFIRMATION
android.permission.SMS_FINANCIAL_TRANSACTIONS
android.permission.WRITE_SMS
android.permission.MANAGE_DEVICE_POLICY_SMS
android.permission.BROADCAST_SMS
android.permission.MANAGE_DEVICE_POLICY_DEFAULT_SMS
android.permission.REBOOT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SIGNAL_REBOOT_READINESS
android.permission.MANAGE_DEVICE_POLICY_SAFE_BOOT
android.permission.BIND_RESUME_ON_REBOOT_SERVICE
android.permission.SHUTDOWN
com.fireway.testing.MainActivity
android.intent.action.MAIN
com.fireway.testing.DebugActivity
com.fireway.testing.SmsService
com.fireway.testing.BootReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT