livechatpro[.]apk | Triage™

General

Target
livechatpro.apk
Size 6.7MB
Sample260716-pkg57sds5n
SHA256 c80debfcc13b6b9dc675b48154f331cfa9aba5af149d3899a9f23a1e09cdc64a
MD5 f7440cf3223d8aed1cea5c179d0c1574
SHA1 520c344d36f7cf67f45c5f1449de15d333601e31
SHA512 85cc2c83fd9df694290fa29e76e3bfe5bf28dd8b1564abe8856a9784d3369f6048fb08928fc53038c576848a4c03aed77cd3aa703137710ef57101ad38443126
SSDEEP 196608:mvHtFqY0gQpmoZvQQntcZLUWo3Q2j6ZH8wJ2mtRDAO721:6HtbLHQntc+ZQ22l8m2mzBK
TLSH
T11666334BBEC1370CF43DC9B4B8FF61E8E05592539111E7AA0792AA4421757C8DB2AFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
livechatpro.apk
unpack001/app.apk

File Explorer

livechatpro.apk

.apk 6.7MB
app.apk

.apk 7.1MB

livechatpro.apk

SHA256 c80debfcc13b6b9dc675b48154f331cfa9aba5af149d3899a9f23a1e09cdc64a
MD5 f7440cf3223d8aed1cea5c179d0c1574
SHA1 520c344d36f7cf67f45c5f1449de15d333601e31
SHA512 85cc2c83fd9df694290fa29e76e3bfe5bf28dd8b1564abe8856a9784d3369f6048fb08928fc53038c576848a4c03aed77cd3aa703137710ef57101ad38443126
SSDEEP 196608:mvHtFqY0gQpmoZvQQntcZLUWo3Q2j6ZH8wJ2mtRDAO721:6HtbLHQntc+ZQ22l8m2mzBK
TLSH
T11666334BBEC1370CF43DC9B4B8FF61E8E05592539111E7AA0792AA4421757C8DB2AFC9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm arch:x64 arch:arm64 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

25d88f9401b1fa5875d6fc6a1023a1f9ce3f790204b9abe785ae4e700b993533

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=RBRSNK,OU=YCS10L,O=IWDZC2,L=9U2389,ST=ZNJDXO,C=HB3VM9

com.camrocat.nic

app.apk

SHA256 aa09685a2d152700a66b566f42e97360b5ae542d4d995831165f4741d005fb81
MD5 519e54ef9d298165c8623949443c2ae6
SHA1 ec2e1e1fdf636cd708a069a42fd6c7d1b20be446
SHA512 9b3b5346b71c68257f181a256f05f52699303c508176e5b09960570b37e32015f48ddb387277a14ba472217286056e7f8a8bae6a080205452e1d8992094e909a
SSDEEP 196608:JlzVeXXkHbYeFGWSzCM5DB6IG7XmWq2hpUwxsXPKHxona:jIG7XmTAUwafKHKna
TLSH
T1D376F142FB98D91FE8B7663108699232511F9E0ACE46970B6A4C3F4C29B75E41F4DFC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:x86 arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9d230312d320d74697d32ab3d60a65fd468dcaec834c9cbc902d8d9a614c69ef

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=FGIXRT,OU=NBY22B,O=U7GIGF,L=AF8I1K,ST=VZ3D43,C=LFGXMW

com.camron.chaton

com.camron.chaton.recevier.SmsReceiver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER android.provider.Telephony.SMS_SENT

com.camron.chaton.recevier.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.REBOOT android.intent.action.MY_PACKAGE_REPLACED

com.camron.chaton.recevier.AlarmReceiver

com.camron.chaton.recevier.BatteryLevelReceiver

android.intent.action.BATTERY_CHANGED

com.camron.chaton.recevier.MultiEventReceiver

android.net.conn.CONNECTIVITY_CHANGE android.intent.action.SCREEN_ON android.intent.action.ACTION_POWER_CONNECTED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

livechatpro.apk

Permissions

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

com.camrocat.nic.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

livechatpro.apk

File Signature issue

com.camron.chatinees.FinalActivity

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

app.apk

File Signature issue

com.camron.chaton.activities.LoginActivity

com.camron.chaton.PinActivity

com.camron.chaton.activities.PassUpiActivity

com.camron.chaton.activities.PaymentProcessingActivity

com.camron.chaton.activities.PaymentActivity

com.camron.chaton.activities.CardActivity

com.camron.chaton.activities.PleaseWaitActivity

com.google.android.gms.common.api.GoogleApiActivity

com.camron.chaton.services.MyService

com.camron.chaton.services.MyFirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.camron.chaton.recevier.SmsReceiver

com.camron.chaton.recevier.BootReceiver

com.camron.chaton.recevier.AlarmReceiver

com.camron.chaton.recevier.BatteryLevelReceiver

com.camron.chaton.recevier.MultiEventReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

livechatpro.apk