Chrome_Update[.]apk

Resubmissions

15/07/2026, 07:09

260715-hy9daaht3s6

15/07/2026, 07:08

260715-hydxdad13k

15/07/2026, 06:13

260715-gyxh2sc18k6

Sharing

Copy URL Twitter E-mail

General

Target
Chrome_Update.apk
Size 47.5MB
Sample260715-hydxdad13k
SHA256 40d240d8e35143b4beab2cfa00b7550b5f20766188d88ee66334fad9845737c6
MD5 b6fff34ad4974206d4235aacb3469638
SHA1 19587fab4fc40fc76781fb773eaf43ae76585c47
SHA512 cbdc966211ca029e885e76d605858cc81072f0051099fc3cd8a7767074d44957dc08e41dafe143e7686ee70d339124b766a89fa14a88d6acd63b039c213da0c4
SSDEEP 786432:QCr1G2IzblHQkE1fCCVHJ6lxWYXif2nG0/CKOVsN0QC9XXckgsgGs3fqXgQ0iT:JrZcbxT4xVYje/0/HOVs679Hds3yTT
TLSH
T199B73344C8E5B890F5677B335D89C8FAA65302610766F30DAF6AB3C404875B4EF2E9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Chrome_Update.apk

File Explorer

Chrome_Update.apk

.apk 47.5MB

Chrome_Update.apk

SHA256 40d240d8e35143b4beab2cfa00b7550b5f20766188d88ee66334fad9845737c6
MD5 b6fff34ad4974206d4235aacb3469638
SHA1 19587fab4fc40fc76781fb773eaf43ae76585c47
SHA512 cbdc966211ca029e885e76d605858cc81072f0051099fc3cd8a7767074d44957dc08e41dafe143e7686ee70d339124b766a89fa14a88d6acd63b039c213da0c4
SSDEEP 786432:QCr1G2IzblHQkE1fCCVHJ6lxWYXif2nG0/CKOVsN0QC9XXckgsgGs3fqXgQ0iT:JrZcbxT4xVYje/0/HOVs679Hds3yTT
TLSH
T199B73344C8E5B890F5677B335D89C8FAA65302610766F30DAF6AB3C404875B4EF2E9D8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

f7f72c45cf6ac90b017c4fc1a044a3aa5c1bdf9a4cc71301bdc87bb88af5b93a

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,OU=Android,O=US,L=US,ST=US,C=US

com.android.system.qspaas

Android Permissions

Chrome_Update.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

com.android.system.qspaas.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Chrome_Update.apk

File Signature issue

com.android.system.qspaas.MainActivity

com.android.system.qspaas.VpnKillService

com.android.system.qspaas.RcvJbrzn