gen_signed[.]apk | Triage™

General

Target
gen_signed.apk
Size 38.3MB
Sample260712-tafa3sev71
SHA256 33d783f819e84cc67bbe7ae471939e978cf73768bd58a7d2d9c2160eed94544c
MD5 afb53edd5b9e569f7f7da3cbbf26300c
SHA1 476c872111ad9aa12a2c586ff1b924fecc5a900e
SHA512 f7d30691752d72321e53455d74735edfd694e4cb511659da2c992e1b9336648a0935ac8830e0b05d29dc0e494eb0046fc118c9c9ea42f8c4736ae21de7d2cc49
SSDEEP 393216:LQORB5hW3ZxtFjHNPkv65pHf13z53fyaFDf2ef2yG:sO3/WTbNPkv65pHf13zdLFDfZf7G
TLSH
T1A197AE13FB525D32DA6E533568F747056732AE8A77038B531048F6B86CB32C99B963C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
gen_signed.apk

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
gen_signed.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
gen_signed.apk

File Explorer

gen_signed.apk

.apk 38.3MB

gen_signed.apk

SHA256 33d783f819e84cc67bbe7ae471939e978cf73768bd58a7d2d9c2160eed94544c
MD5 afb53edd5b9e569f7f7da3cbbf26300c
SHA1 476c872111ad9aa12a2c586ff1b924fecc5a900e
SHA512 f7d30691752d72321e53455d74735edfd694e4cb511659da2c992e1b9336648a0935ac8830e0b05d29dc0e494eb0046fc118c9c9ea42f8c4736ae21de7d2cc49
SSDEEP 393216:LQORB5hW3ZxtFjHNPkv65pHf13z53fyaFDf2ef2yG:sO3/WTbNPkv65pHf13zdLFDfZf7G
TLSH
T1A197AE13FB525D32DA6E533568F747056732AE8A77038B531048F6B86CB32C99B963C8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

bcd9b0b26fd9a25e00a89b9447f5deb522e32f42

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

com.haruncavusoglu.zikirmatik

com.haruncavusoglu.zikirmatik.widget.ZikirmatikSmall

android.appwidget.action.APPWIDGET_UPDATE com.haruncavusoglu.zikirmatik.WIDGET_CLICK

com.haruncavusoglu.zikirmatik.widget.ZikirmatikLarge

android.appwidget.action.APPWIDGET_UPDATE com.haruncavusoglu.zikirmatik.WIDGET_CLICK

expo.modules.notifications.service.NotificationsService

expo.modules.notifications.NOTIFICATION_EVENT android.intent.action.BOOT_COMPLETED android.intent.action.REBOOT android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

gen_signed.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.haruncavusoglu.zikirmatik.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.android.vending.CHECK_LICENSE

gen_signed.apk

File Signature issue

com.haruncavusoglu.zikirmatik.MainActivity

expo.modules.notifications.service.NotificationForwarderActivity

com.google.android.gms.common.api.GoogleApiActivity

com.pairip.licensecheck.LicenseActivity

com.reactnativeandroidwidget.RNWidgetCollectionService

expo.modules.audio.service.AudioControlsService

expo.modules.notifications.service.ExpoFirebaseMessagingService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.haruncavusoglu.zikirmatik.widget.ZikirmatikSmall

com.haruncavusoglu.zikirmatik.widget.ZikirmatikLarge

expo.modules.notifications.service.NotificationsService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.reactnativeandroidwidget.RNWidgetImageProvider

expo.modules.filesystem.FileSystemFileProvider

expo.modules.sharing.SharingFileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider