installation[.]apk

General

Target
installation.apk
Size 6.0MB
Sample260718-ba7ffsa17l
SHA256 9d1eeb420a8d3cdeb9851404a335695ca556e28c647a4fa94caaf80e2d637d6a
MD5 b8f56cfac14fd78d0952e104a6daf37b
SHA1 c97460bb1c98d755da17fdbebbb4eed9b8af9569
SHA512 e48314b87ef627bd07f7373e7e13f5c9325c2138e01e50783edc1eb8a573e177631b35eb7feea25205402c05ed32b1403e3b0a4ecbd629e9f772875f4ec3e670
SSDEEP 98304:U69+A0GHGpdSW297U8AvkeaiEEppppTJE3KOLDAvjJCpXujHvALyOT2UPzQhOEI:cpdSo8AsatJldvjJCpXmvALT+RI
TLSH
T13356F188FB48D92BC477553345AB5732418B4D069E839763AAAC364C6CB76D40F8EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
installation.apk

File Explorer

installation.apk

.apk 6.0MB

installation.apk

SHA256 9d1eeb420a8d3cdeb9851404a335695ca556e28c647a4fa94caaf80e2d637d6a
MD5 b8f56cfac14fd78d0952e104a6daf37b
SHA1 c97460bb1c98d755da17fdbebbb4eed9b8af9569
SHA512 e48314b87ef627bd07f7373e7e13f5c9325c2138e01e50783edc1eb8a573e177631b35eb7feea25205402c05ed32b1403e3b0a4ecbd629e9f772875f4ec3e670
SSDEEP 98304:U69+A0GHGpdSW297U8AvkeaiEEppppTJE3KOLDAvjJCpXujHvALyOT2UPzQhOEI:cpdSo8AsatJldvjJCpXmvALT+RI
TLSH
T13356F188FB48D92BC477553345AB5732418B4D069E839763AAAC364C6CB76D40F8EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

64684eb61c60e0b549ffc80ce7931557059e0652cdc70856eb87e276c55489ba

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.androidxddevs.keylogger

android.permission.ACCESS_FINE_LOCATION android.permission.REBOOT android.permission.RECEIVE_BOOT_COMPLETED android.permission.SIGNAL_REBOOT_READINESS android.permission.MANAGE_DEVICE_POLICY_SAFE_BOOT android.permission.BIND_RESUME_ON_REBOOT_SERVICE android.permission.SHUTDOWN android.permission.MANAGE_DEVICE_ADMINS android.permission.QUERY_ADMIN_POLICY android.permission.BIND_DEVICE_ADMIN android.permission.BIND_ACCESSIBILITY_SERVICE android.permission.MANAGE_DEVICE_POLICY_ACCESSIBILITY android.permission.MANAGE_ACCESSIBILITY android.permission.OPEN_ACCESSIBILITY_DETAILS_SETTINGS android.permission.REVIEW_ACCESSIBILITY_SERVICES android.permission.MANAGE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.POST_NOTIFICATIONS android.permission.ACCESS_BACKGROUND_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CHANGE_WIFI_STATE android.permission.COMPANION_APPROVE_WIFI_CONNECTIONS android.permission.CONFIGURE_WIFI_DISPLAY android.permission.MANAGE_DEVICE_POLICY_WIFI android.permission.MANAGE_WIFI_COUNTRY_CODE android.permission.MANAGE_WIFI_INTERFACES android.permission.NEARBY_WIFI_DEVICES android.permission.OVERRIDE_WIFI_CONFIG android.permission.READ_WIFI_CREDENTIAL android.permission.RECEIVE_WIFI_CREDENTIAL_CHANGE android.permission.RESTART_WIFI_SUBSYSTEM android.permission.WIFI_ACCESS_COEX_UNSAFE_CHANNELS android.permission.WIFI_SET_DEVICE_MOBILITY_STATE android.permission.WIFI_UPDATE_COEX_UNSAFE_CHANNELS android.permission.WIFI_UPDATE_USABILITY_STATS_SCORE android.permission.ACCESS_NETWORK_CONDITIONS android.permission.ACCESS_NETWORK_STATE android.permission.BIND_NETWORK_RECOMMENDATION_SERVICE android.permission.BIND_TELEPHONY_NETWORK_SERVICE android.permission.BROADCAST_NETWORK_PRIVILEGED android.permission.CHANGE_NETWORK_STATE android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS android.permission.CONTROL_OEM_PAID_NETWORK_PREFERENCE android.permission.THREAD_NETWORK_PRIVILEGED android.permission.SCORE_NETWORKS android.permission.REQUEST_NETWORK_SCORES android.permission.READ_NETWORK_USAGE_HISTORY android.permission.OBSERVE_NETWORK_POLICY android.permission.NETWORK_STATS_PROVIDER android.permission.NETWORK_STACK android.permission.NETWORK_SIGNAL_STRENGTH_WAKEUP android.permission.NETWORK_SETUP_WIZARD android.permission.NETWORK_SETTINGS android.permission.NETWORK_SCAN android.permission.NETWORK_MANAGED_PROVISIONING android.permission.NETWORK_FACTORY android.permission.NETWORK_CARRIER_PROVISIONING android.permission.NETWORK_AIRPLANE_MODE android.permission.MODIFY_NETWORK_ACCOUNTING android.permission.MANAGE_WIFI_NETWORK_SELECTION android.permission.MANAGE_TEST_NETWORKS android.permission.MANAGE_ETHERNET_NETWORKS android.permission.MANAGE_DEVICE_POLICY_THREAD_NETWORK android.permission.MANAGE_DEVICE_POLICY_NETWORK_LOGGING android.permission.MANAGE_DEVICE_POLICY_MOBILE_NETWORK android.permission.TETHER_PRIVILEGED android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH_ADVERTISE android.permission.BLUETOOTH_CONNECT android.permission.BLUETOOTH_MAP android.permission.BLUETOOTH_PRIVILEGED android.permission.BLUETOOTH_SCAN android.permission.MANAGE_BLUETOOTH_WHEN_WIRELESS_CONSENT_REQUIRED android.permission.MANAGE_DEVICE_POLICY_BLUETOOTH android.permission.RECEIVE_BLUETOOTH_MAP

Android Permissions

installation.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.REBOOT

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SIGNAL_REBOOT_READINESS

android.permission.MANAGE_DEVICE_POLICY_SAFE_BOOT

android.permission.BIND_RESUME_ON_REBOOT_SERVICE

android.permission.SHUTDOWN

android.permission.MANAGE_DEVICE_ADMINS

android.permission.QUERY_ADMIN_POLICY

android.permission.BIND_DEVICE_ADMIN

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.MANAGE_DEVICE_POLICY_ACCESSIBILITY

android.permission.MANAGE_ACCESSIBILITY

android.permission.OPEN_ACCESSIBILITY_DETAILS_SETTINGS

android.permission.REVIEW_ACCESSIBILITY_SERVICES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.COMPANION_APPROVE_WIFI_CONNECTIONS

android.permission.CONFIGURE_WIFI_DISPLAY

android.permission.MANAGE_DEVICE_POLICY_WIFI

android.permission.MANAGE_WIFI_COUNTRY_CODE

android.permission.MANAGE_WIFI_INTERFACES

android.permission.NEARBY_WIFI_DEVICES

android.permission.OVERRIDE_WIFI_CONFIG

android.permission.READ_WIFI_CREDENTIAL

android.permission.RECEIVE_WIFI_CREDENTIAL_CHANGE

android.permission.RESTART_WIFI_SUBSYSTEM

android.permission.WIFI_ACCESS_COEX_UNSAFE_CHANNELS

android.permission.WIFI_SET_DEVICE_MOBILITY_STATE

android.permission.WIFI_UPDATE_COEX_UNSAFE_CHANNELS

android.permission.WIFI_UPDATE_USABILITY_STATS_SCORE

android.permission.ACCESS_NETWORK_CONDITIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.BIND_NETWORK_RECOMMENDATION_SERVICE

android.permission.BIND_TELEPHONY_NETWORK_SERVICE

android.permission.BROADCAST_NETWORK_PRIVILEGED

android.permission.CHANGE_NETWORK_STATE

android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS

android.permission.CONTROL_OEM_PAID_NETWORK_PREFERENCE

android.permission.THREAD_NETWORK_PRIVILEGED

android.permission.SCORE_NETWORKS

android.permission.REQUEST_NETWORK_SCORES

installation.apk

File Signature issue

.MainActivity

.DebugActivity

.MyAccessibilityService

.MyDeviceAdminReceiver

.BootReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

installation.apk

File Signature issue

.MainActivity

.DebugActivity

.MyAccessibilityService

.MyDeviceAdminReceiver

.BootReceiver

androidx.startup.InitializationProvider

Android Permissions

installation.apk