build[.]apk | Triage™

General

Target
build.apk
Size 5.4MB
Sample260716-vst3mady2t
SHA256 a08d496cd6ce94670e5abb17bf6b0c6527f294bc348f872dec9474731918bec0
MD5 8ac7fd84a83af5ba454ce18eab4bc3fd
SHA1 a07a923497196dc23c36aa4fb2765f546e7aacc7
SHA512 4e30b8477530274b6f6a425cee2d6124fd18b4d0b0a9e710baf95511345bb94e3d23630e063616606c78ad9aae9509f5b49e8e5647d3d0a386c870f2045e2085
SSDEEP 98304:ugAmO9GQKHWb3ToyqcTWstaEYp+BS3A6C8b/uefTSkLlNY+x6W8kmPWoWfnqFQ:uL8hHWTTsvEYp/A6C8ydkpfuWVp
TLSH
T1C946339E2DA122E7D4A285B60C5A407ABCDD11C2835ADD4339D5C3F77E5FA83C214E2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
build.apk

File Explorer

build.apk

.apk 5.4MB

build.apk

SHA256 a08d496cd6ce94670e5abb17bf6b0c6527f294bc348f872dec9474731918bec0
MD5 8ac7fd84a83af5ba454ce18eab4bc3fd
SHA1 a07a923497196dc23c36aa4fb2765f546e7aacc7
SHA512 4e30b8477530274b6f6a425cee2d6124fd18b4d0b0a9e710baf95511345bb94e3d23630e063616606c78ad9aae9509f5b49e8e5647d3d0a386c870f2045e2085
SSDEEP 98304:ugAmO9GQKHWb3ToyqcTWstaEYp+BS3A6C8b/uefTSkLlNY+x6W8kmPWoWfnqFQ:uL8hHWTTsvEYp/A6C8ydkpfuWVp
TLSH
T1C946339E2DA122E7D4A285B60C5A407ABCDD11C2835ADD4339D5C3F77E5FA83C214E2B
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2ad63f9e215e84ca6b545853e23617e7002ed33eff6e3a343a56f544856d31eb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.yandex.eda

Android Permissions

build.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CELL_BROADCASTS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.WAKE_LOCK

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

build.apk

File Signature issue

i.jdt.Fwl

i.jdt.Qau

i.jdt.G

i.jdt.En6

i.jdt.Ns

i.jdt.Ad

i.jdt.J3

i.jdt.J0

i.jdt.Fnz

i.jdt.Sl

i.jdt.Tfb1

i.jdt.Im

i.jdt.Xx

i.jdt.Syx

i.jdt.T7

i.jdt.Zu

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

build.apk

File Signature issue

i.jdt.Fwl

i.jdt.Qau

i.jdt.G

i.jdt.En6

i.jdt.Ns

i.jdt.Ad

i.jdt.J3

i.jdt.J0

i.jdt.Fnz

i.jdt.Sl

i.jdt.Tfb1

i.jdt.Im

i.jdt.Xx

i.jdt.Syx

i.jdt.T7

i.jdt.Zu

Android Permissions

build.apk