build-225[.]apk | Triage™

General

Target
build-225.apk
Size 5.3MB
Sample260713-plergaa17s
SHA256 a486520ace3c71fed31c3f9bf652c9d4507290ac0b6151abb9363802a7f94054
MD5 e18e7d1297da33af302c93ca711952f2
SHA1 1e7a319f186e9d9a840d9ce8b6e0fecdfbff0449
SHA512 3bd9d2848937230def35e78e398fc41e98f308e3c5700ad224393fb1ab6ec5873588d40d8b0212916e1be2fc1ca4804d99b9f9fa7c1f949a93b9de24e11eb163
SSDEEP 98304:LtNZWARlY66y0faQkc6ol/fjK1D2JkqqbNQNdQG2F7UvAILSN+X:Lf5RlYdriPc6QfQD2JoONdSoAILSQ
TLSH
T1D44633D391C49A11F1DB163C52488458D83F78BAAE0ACB5C2B746B2DFC0F9D826549EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
build-225.apk

File Explorer

build-225.apk

.apk 5.3MB

build-225.apk

SHA256 a486520ace3c71fed31c3f9bf652c9d4507290ac0b6151abb9363802a7f94054
MD5 e18e7d1297da33af302c93ca711952f2
SHA1 1e7a319f186e9d9a840d9ce8b6e0fecdfbff0449
SHA512 3bd9d2848937230def35e78e398fc41e98f308e3c5700ad224393fb1ab6ec5873588d40d8b0212916e1be2fc1ca4804d99b9f9fa7c1f949a93b9de24e11eb163
SSDEEP 98304:LtNZWARlY66y0faQkc6ol/fjK1D2JkqqbNQNdQG2F7UvAILSN+X:Lf5RlYdriPc6QfQD2JoONdSoAILSQ
TLSH
T1D44633D391C49A11F1DB163C52488458D83F78BAAE0ACB5C2B746B2DFC0F9D826549EF
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

762ab3e2e3ad95001c0355b5fc8ea21fb308ef0b32193a89a76f5a70b91375c2

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=US,L=US,ST=US,C=US

net.plusplusservices4007

Android Permissions

build-225.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CELL_BROADCASTS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.WAKE_LOCK

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

build-225.apk

File Signature issue

zo.pgd.j.Fc8

zo.pgd.j.Xm1

zo.pgd.j.Qd9

zo.pgd.j.Elz

zo.pgd.j.Ec

zo.pgd.j.Odf4

zo.pgd.j.N6

zo.pgd.j.Z

zo.pgd.j.P

zo.pgd.j.Nef

zo.pgd.j.Tw

zo.pgd.j.Bfy

zo.pgd.j.Zfb

zo.pgd.j.Nec4

zo.pgd.j.Icc

zo.pgd.j.Gj

Sharing

General

Malware Config

Signatures

File Explorer

build-225.apk

File Signature issue

zo.pgd.j.Fc8

zo.pgd.j.Xm1

zo.pgd.j.Qd9

zo.pgd.j.Elz

zo.pgd.j.Ec

zo.pgd.j.Odf4

zo.pgd.j.N6

zo.pgd.j.Z

zo.pgd.j.P

zo.pgd.j.Nef

zo.pgd.j.Tw

zo.pgd.j.Bfy

zo.pgd.j.Zfb

zo.pgd.j.Nec4

zo.pgd.j.Icc

zo.pgd.j.Gj

Android Permissions

build-225.apk