download_34858816[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
download_34858816.apk
Size 39.5MB
Sample260712-ax2caabw4k
SHA256 be927005a1294caaa8225b8f70bea6d9c2d60253472fa25c756bc7883ab75a6a
MD5 7dbf5af36302a9b5b15841a84b11c644
SHA1 579402290f1ce23d0b2fcd1d9ceb4e7a2622010e
SHA512 1f502b68b5dd015db6b986d63dc7d37a53828013b4b4121bc403bc0c6fd1307ec1dfcad7de82e99ea13fd4bd1ff30735feae74d517fb83b6a79e4c975628cbe2
SSDEEP 786432:yZyIiAIb7xHU5/rRdd9SKExO0tN3s+q65MBfFiAWbt:yZyIiAIbJSDzdYxO0tpI65MBfxWbt
TLSH
T17197DF53A3169D32C4BD873964BE8740BB305B5697835742205AF3BCFCE37D0AA996C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
download_34858816.apk

File Explorer

download_34858816.apk

.apk 39.5MB

download_34858816.apk

SHA256 be927005a1294caaa8225b8f70bea6d9c2d60253472fa25c756bc7883ab75a6a
MD5 7dbf5af36302a9b5b15841a84b11c644
SHA1 579402290f1ce23d0b2fcd1d9ceb4e7a2622010e
SHA512 1f502b68b5dd015db6b986d63dc7d37a53828013b4b4121bc403bc0c6fd1307ec1dfcad7de82e99ea13fd4bd1ff30735feae74d517fb83b6a79e4c975628cbe2
SSDEEP 786432:yZyIiAIb7xHU5/rRdd9SKExO0tN3s+q65MBfFiAWbt:yZyIiAIbJSDzdYxO0tpI65MBfxWbt
TLSH
T17197DF53A3169D32C4BD873964BE8740BB305B5697835742205AF3BCFCE37D0AA996C8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

5a335224fd5ae8d39e8dea62214f52e1f7f581fc85204877d5324ec1c1b09eb3

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=JPwDORy,OU=wNzFcwQIJ,O=PhDoEJFsdh,L=OEQSRHK,ST=RfdEzyNXOMc,C=AQ

com.ht.boxingtraining

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

sg.bigo.ads.controller.form.AdFormActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

sg.bigo.ads.api.CompanionAdActivity

com.mbridge.msdk.activity.MBCommonActivity

com.inmobi.ads.rendering.InMobiAdActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.unity3d.services.ads.adunit.AdUnitActivity

sg.bigo.ads.api.LandingStyleableActivity

com.ironsource.sdk.controller.ControllerActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.google.android.gms.ads.AdActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.ht.training.SplashScreenAdmob

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.google.android.gms.common.api.GoogleApiActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

com.applovin.adview.AppLovinFullscreenActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ht.boxingtraining.VaoriAd

android.intent.action.MAIN

com.google.android.gms.ads.NotificationHandlerActivity

sg.bigo.ads.ad.splash.AdSplashActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.ht.training.CommonActivity

com.ht.training.News

com.ht.boxingtraining.RAMdzActivity0

com.mbridge.msdk.out.LoadingActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.applovin.sdk.AppLovinWebViewActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

sg.bigo.ads.api.AdActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.ht.boxingtraining.eBJKDDGRRVActivity1

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.ht.training.DomParserEg

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

sg.bigo.ads.api.PopupAdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

com.ht.training.MainActivity

sg.bigo.ads.api.LandscapeAdActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

com.ht.training.ContentView

com.chartboost.sdk.view.CBImpressionActivity

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.ht.training.WebViewAll

com.ironsource.sdk.controller.OpenUrlActivity

com.facebook.ads.AudienceNetworkActivity

com.ht.training.Videos

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.core.telecom.internal.MuteStateReceiver

android.media.action.MICROPHONE_MUTE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

com.ht.boxingtraining.SdGtKrZdrHOmReceiver6

android.intent.action.TIME_SET android.intent.action.MY_PACKAGE_REPLACED android.intent.action.MAIN

com.ht.boxingtraining.jsXbaAReceiver5

android.intent.action.BOOT_COMPLETED

com.ht.boxingtraining.aLFxuCPReceiver7

android.intent.action.LOCALE_CHANGED android.intent.action.MAIN android.intent.action.MY_PACKAGE_REPLACED android.intent.action.SEND

Android Permissions

download_34858816.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.INTERNET

android.permission.ACCESS_ADSERVICES_TOPICS

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_LOCATION

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.MANAGE_OWN_CALLS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_FULL_SCREEN_INTENT

Sharing

General

Malware Config

Signatures

File Explorer

download_34858816.apk

File Signature issue

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

sg.bigo.ads.controller.form.AdFormActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

sg.bigo.ads.api.CompanionAdActivity

com.mbridge.msdk.activity.MBCommonActivity

com.inmobi.ads.rendering.InMobiAdActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.unity3d.services.ads.adunit.AdUnitActivity

sg.bigo.ads.api.LandingStyleableActivity

com.ironsource.sdk.controller.ControllerActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.google.android.gms.ads.AdActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.ht.training.SplashScreenAdmob

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.google.android.gms.common.api.GoogleApiActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

com.applovin.adview.AppLovinFullscreenActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ht.boxingtraining.VaoriAd

com.google.android.gms.ads.NotificationHandlerActivity

sg.bigo.ads.ad.splash.AdSplashActivity

com.chartboost.sdk.internal.clickthrough.EmbeddedBrowserActivity

com.ht.training.CommonActivity

com.ht.training.News

com.ht.boxingtraining.RAMdzActivity0

com.mbridge.msdk.out.LoadingActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.applovin.sdk.AppLovinWebViewActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

sg.bigo.ads.api.AdActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.ht.boxingtraining.eBJKDDGRRVActivity1

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.ht.training.DomParserEg

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

sg.bigo.ads.api.PopupAdActivity

com.google.android.gms.ads.OutOfContextTestingActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

com.ht.training.MainActivity

sg.bigo.ads.api.LandscapeAdActivity

com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

com.ht.training.ContentView

com.chartboost.sdk.view.CBImpressionActivity

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.ht.training.WebViewAll

com.ironsource.sdk.controller.OpenUrlActivity

com.facebook.ads.AudienceNetworkActivity

com.ht.training.Videos

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity

com.ht.boxingtraining.duiGNRJsdqufoca

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.background.systemalarm.SystemAlarmService

com.ht.boxingtraining.lFwSPlFWFPOService2

androidx.work.impl.background.systemjob.SystemJobService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.ht.boxingtraining.okvdDXPzmService4

com.ht.boxingtraining.YvEVlDwService3