com[.]honeygain[.]make[.]money_1[.]2[.]1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror[.]com[.]apk

Target
com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
Size 10.5MB
Sample260714-jctalsbs71
SHA256 e82e4e524e7b659b6a13ee51997738f7d75e6a4a33b2937591058d0f994d9bae
MD5 d41494c4c0d6e7042c16a982e5bc6362
SHA1 8c168fe3cf9d29737f860ffb407ab575e58481b8
SHA512 257f5bce9fc8d5772977f3d873d2bf3c19ae90a9dc823cf74db111a3ffd7fc54aba79da0b33157841b2132792ea5da58825c4ccc9f1e283ee07fb5cfe5b882c4
SSDEEP 196608:q/CHhW+fDPjWT/LmYySoi53YV+S7F0dw0h6j6nO0HGzQ+kyaKFO:DWTCZu5qF0GebHGzoKg
TLSH
T178B612C6FBE9D92FC8731072CC5B52F1265A4C268E82AF476448375C28B36E84F59BC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

File Explorer

com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

.apk 10.5MB

com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

SHA256 e82e4e524e7b659b6a13ee51997738f7d75e6a4a33b2937591058d0f994d9bae
MD5 d41494c4c0d6e7042c16a982e5bc6362
SHA1 8c168fe3cf9d29737f860ffb407ab575e58481b8
SHA512 257f5bce9fc8d5772977f3d873d2bf3c19ae90a9dc823cf74db111a3ffd7fc54aba79da0b33157841b2132792ea5da58825c4ccc9f1e283ee07fb5cfe5b882c4
SSDEEP 196608:q/CHhW+fDPjWT/LmYySoi53YV+S7F0dw0h6j6nO0HGzQ+kyaKFO:DWTCZu5qF0GebHGzoKg
TLSH
T178B612C6FBE9D92FC8731072CC5B52F1265A4C268E82AF476448375C28B36E84F59BC5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

26e77971f3589c30d0ec07ae3b2bec372a4d134977717faa164675efdd1c3020

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

O=Honeygain

com.honeygain.make.money

Android Permissions

com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE

android.permission.ACCESS_ADSERVICES_TOPICS

com.honeygain.make.money.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.honeygain.make.money_1.2.1-LP-UJ-81_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

File Signature issue

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

com.honeygain.app.ui.onboarding.OnboardingActivity

com.honeygain.app.ui.bottomnavigation.BottomNavigationActivity

com.honeygain.app.ui.noconnection.NoConnectionActivity

com.honeygain.app.ui.maintenance.MaintenanceActivity

com.honeygain.app.ui.splash.SplashActivity

com.facebook.CustomTabMainActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.honeygain.app.minion.service.ProxyService

com.honeygain.app.messaging.MessagingService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

com.microsoft.clarity.jobs.UploadSessionJob

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.honeygain.app.boot.BootReceiver

com.honeygain.app.feature.flags.FeatureFlagsUpdateRequestReceiver

com.honeygain.app.reporting.minion.MinionStateReportRequestReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

io.sentry.android.core.SentryInitProvider

io.sentry.android.core.SentryPerformanceProvider