UltimaMarkets[.]apk

Resubmissions

18/07/2026, 16:10

260718-tmpqaaaw4w8

18/07/2026, 16:05

260718-tjmrhsfs5r8

18/07/2026, 16:00

260718-tfshlaat8x6

Sharing

Copy URL Twitter E-mail

General

Target
UltimaMarkets.apk
Size 90.0MB
Sample260718-tmpqaaaw4w
SHA256 80782407621fb3655f64b923170b2f5e7da128d8f82fb7b47dcb771c97546f94
MD5 20f7882ee050e947c29e33d400d485bc
SHA1 6faad63d3d54acf4435dda07418267ee4cfaf134
SHA512 084900700aff970d91ccccbfd5aa9d28bd3b402b8b6210db28490365a880da6942f8c84041408e04d14355720ea5446c182de9c043128388d5eec82dc5db3ad1
SSDEEP 1572864:PouSCZzcXooDYagkTSl/oMJoBg+aVc4FsmX89As+6uSw4k0jG31ILXF1AV:PouVZI4O89l/oMqBg+aVc4+mX16Vw4kJ
TLSH
T1B928239BA368185CDC312976585E353623A96C366F52E7DB2844372D3CF3AE08E05FE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
UltimaMarkets.apk

File Explorer

UltimaMarkets.apk

.apk 90.0MB

UltimaMarkets.apk

SHA256 80782407621fb3655f64b923170b2f5e7da128d8f82fb7b47dcb771c97546f94
MD5 20f7882ee050e947c29e33d400d485bc
SHA1 6faad63d3d54acf4435dda07418267ee4cfaf134
SHA512 084900700aff970d91ccccbfd5aa9d28bd3b402b8b6210db28490365a880da6942f8c84041408e04d14355720ea5446c182de9c043128388d5eec82dc5db3ad1
SSDEEP 1572864:PouSCZzcXooDYagkTSl/oMJoBg+aVc4FsmX89As+6uSw4k0jG31ILXF1AV:PouVZI4O89l/oMqBg+aVc4+mX16Vw4kJ
TLSH
T1B928239BA368185CDC312976585E353623A96C366F52E7DB2844372D3CF3AE08E05FE4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

whoami/all

File Signature issue

Digest

f8eaade6e741b69fda7f1e71bb5d3e05c5ca1d7c194c7375f0142cc8c4ed62ac

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=um,OU=ummarkets,O=ummarkets,L=um

cn.com.ummarkets

android.permission.POST_NOTIFICATIONS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.READ_MEDIA_AUDIO android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.TYPE_APPLICATION_OVERLAY android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE com.huawei.android.launcher.permission.CHANGE_BADGE com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE android.permission.USE_FINGERPRINT android.permission.WRITE_MEDIA_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.CAMERA android.permission.WRITE_SETTINGS android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_REPLACED android.permission.RESTART_PACKAGES android.permission.GET_TASKS android.permission.GET_ACCOUNTS android.permission.RECEIVE_BOOT_COMPLETED android.permission.REORDER_TASKS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK com.google.android.gms.permission.AD_ID android.permission.RECORD_AUDIO android.permission.VIBRATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.NFC android.permission.NFC android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.CALL_PHONE android.permission.USE_BIOMETRIC com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_AD_ID com.google.android.c2dm.permission.RECEIVE com.google.android.providers.gsf.permission.READ_GSERVICES cn.com.ummarkets.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE

cn.com.vau.page.start.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

cn.com.vau.trade.st.activity.StStrategyOrdersActivity

cn.com.vau.page.user.openAccoGuide.result.OpenAccountLvResultActivity

cn.com.vau.page.start.WelcomeActivity

cn.com.vau.MainActivity

cn.com.vau.action.MAIN

cn.com.vau.page.user.login.LoginActivity

cn.com.vau.page.user.login.VerificationActivity

cn.com.vau.home.activity.MainNewComerEventActivity

cn.com.vau.home.activity.FcmTransitActivity

cn.com.vau.action.FCM_TRANSIT

cn.com.vau.signals.live.NewLivingPlayerActivity

cn.com.vau.signals.live.NewHistoryPlayerActivity

cn.com.vau.ui.common.activity.ChooseYourThemeActivity

cn.com.vau.ui.common.activity.AccountErrorDialogActivity

cn.com.vau.ui.common.activity.LanguageActivity

cn.com.vau.ui.mine.activity.FeedbackFormActivity

cn.com.vau.ui.mine.activity.AccountActivityActivity

cn.com.vau.ui.deal.activity.LossOrderActivity

cn.com.vau.page.setting.activity.SecurityCodeSettingActivity

cn.com.vau.page.user.loginPwd.LoginPwdActivity

cn.com.vau.page.user.register.RegisterFirstActivity

cn.com.vau.trade.activity.ManageSymbolsActivity

cn.com.vau.page.user.accountManager.activity.AccountManagerActivity

cn.com.vau.page.common.selectArea.NewSelectAreaCodeActivity

cn.com.vau.trade.activity.SearchProductActivity

cn.com.vau.signals.activity.FiltersActivity

cn.com.vau.signals.activity.EconomicCalendarActivity

cn.com.vau.page.user.leverage.LeverageActivity

cn.com.vau.page.user.leverage.st.StLeverageActivity

cn.com.vau.page.photopreview.PhotoActivity

cn.com.vau.signals.activity.VideoDetailsActivity

cn.com.vau.signals.stsignal.activity.StProviderToPublicTradeActivity

cn.com.vau.profile.activity.manageFunds.FundsActivity

cn.com.vau.page.html.HtmlActivity

cn.com.vau.profile.activity.manageFundsDetails.FundsDetailsActivity

cn.com.vau.page.common.selectNation.NewSelectNationalityActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccoAsicActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccoAsicFifthActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccoAsicUploadActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccoAsicExampleActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccoAsicQuizActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccountFirstActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccountFirstSecondActivity

cn.com.vau.page.user.openAccountSecond.OpenAccountSecondActivity

cn.com.vau.page.user.openAccountThird.OpenAccountThirdActivity

cn.com.vau.page.user.openAccountForth.OpenAccountForthActivity

cn.com.vau.page.user.asicOpenAccount.activity.OpenAccountFifthActivity

cn.com.vau.page.user.openAccountFifth.OpenFifthAddressSelectActivity

cn.com.vau.page.user.openAccountFifth.OpenFifthAddressActivity

cn.com.vau.page.user.openAccountFifth.OpenFifthIdentifyActivity

cn.com.vau.page.user.openAccountFifth.OpenFifthIdentifyExampleActivity

cn.com.vau.page.user.openAccountFifth.OpenFifthAddressExampleActivity

cn.com.vau.page.user.openAccountFifth.UploadingActivity

cn.com.vau.page.user.openAccoGuide.same.OpenAccoSameNameActivity

cn.com.vau.page.user.openAccount.OpenAccountSuccessAsicActivity

cn.com.vau.profile.activity.changeLoginPWD.ChangeLoginPwdActivity

cn.com.vau.profile.activity.fundspwd.ChangeFundsPwdActivity

cn.com.vau.page.common.selectResidence.activity.NewSelectResidenceActivity

cn.com.vau.page.common.selectResidence.activity.NewSelectProvinceActivity

cn.com.vau.page.common.selectResidence.activity.NewSelectCityActivity

cn.com.vau.page.setting.activity.SettingActivity

cn.com.vau.trade.activity.HKLineChartActivity

cn.com.vau.trade.kchart.tradingview.ChartCandleLandscapeActivity

cn.com.vau.profile.activity.depositNew.DepositDetailsActivity

cn.com.vau.profile.activity.transferNew.TransferDetailsActivity

cn.com.vau.page.user.question.AsicQuestionnaireActivity

cn.com.vau.page.user.bindEmail.BindEmailActivity

cn.com.vau.page.customerservice.HelpCenterActivity

cn.com.vau.page.customerservice.support.ContactUsActivity

cn.com.vau.page.customerservice.help.FAQsActivity

cn.com.vau.profile.stfund.StFundsActivity

cn.com.vau.trade.st.activity.StStrategyAddOrRemoveFundsActivity

cn.com.vau.trade.st.activity.StStrategyUpdateSettingsActivity

cn.com.vau.signals.stsignal.activity.PersonalDetailsActivity

cn.com.vau.page.user.openAccoGuide.OpenAccoGuideBaseActivity

cn.com.vau.page.user.openAccoGuide.lv1.OpenAccoGuideLv1Activity

cn.com.vau.page.user.openAccoGuide.lv2.OpenAccoGuideLv2Activity

cn.com.vau.page.user.openAccoGuide.lv3.OpenAccoGuideLv3Activity

cn.com.vau.page.user.openAccoGuide.lv1.NewSelectCountryResidenceActivity

cn.com.vau.profile.activity.authentication.AuthenticationActivity

cn.com.vau.page.security.SecurityActivity

cn.com.vau.trade.activity.TradeSettingActivity

cn.com.vau.page.setting.activity.DeviceHistoryActivity

cn.com.vau.page.user.openAccoGuide.lv2.OpenUoloadPreviewActivity

cn.com.vau.signals.activity.H5DebugActivity

cn.com.vau.page.setting.activity.ConfigAndUnlockActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFABindActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFAResetActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFAVerifyActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.DisclaimerActivity

cn.com.vau.signals.stsignal.activity.StSignalDetailsActivity

cn.com.vau.signals.stsignal.activity.StStrategyDetailsActivity

cn.com.vau.signals.stsignal.activity.StStrategyCopyActivity

cn.com.vau.signals.stsignal.center.activity.StSignalCenterActivity

cn.com.vau.signals.stsignal.activity.StSignalSearchActivity

cn.com.vau.signals.stsignal.activity.StCreateAndEditStrategyActivity

cn.com.vau.signals.stsignal.activity.EditPersonalInfoActivity

cn.com.vau.signals.stsignal.activity.EditNicknameActivity

cn.com.vau.signals.stsignal.activity.StFollowListActivity

cn.com.vau.trade.activity.StStrategyPositionDetailsActivity

cn.com.vau.history.ui.HistoryActivity

cn.com.vau.history.ui.HistoryPositionDetailActivity

cn.com.vau.trade.activity.StStrategyHistoryDetailsActivity

cn.com.vau.trade.activity.TradesPositionDetailActivity

cn.com.vau.page.setting.activity.SwitchLineActivity

cn.com.vau.page.user.sumsub.SumsubPromptActivity

cn.com.vau.trade.activity.CloseByOrderActivity

cn.com.vau.trade.activity.ModifiedCloseConfigurationActivity

cn.com.vau.trade.activity.ModifiedCloseConfigurationEndActivity

cn.com.vau.profile.activity.passkey.PasskeySettingActivity

cn.com.vau.profile.activity.passkey.PasskeyAuthVerificationActivity

cn.com.vau.profile.activity.passkey.PasskeyCreatingActivity

cn.com.vau.profile.activity.pricealert.activity.CreatePriceAlertActivity

cn.com.vau.profile.activity.pricealert.activity.PriceAlterListActivity

cn.com.vau.profile.activity.pricealert.activity.PriceAlertsManageActivity

cn.com.vau.trade.activity.CloseHistoryActivity

cn.com.vau.trade.activity.BatchCloseDisclaimerActivity

cn.com.vau.trade.activity.KLineActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFASettingActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFAChangePromptActivity

cn.com.vau.profile.activity.twoFactorAuth.activity.TFAChangeActivity

cn.com.vau.page.notice.activity.NoticeActivity

cn.com.vau.page.notice.activity.NoticeSettingActivity

cn.com.vau.page.user.login.EnterPasswordActivity

cn.com.vau.page.html.NewHtmlActivity

cn.com.vau.page.user.openAccoGuide.demo.OpenDemoGuideActivity

cn.com.vau.page.coupon.CouponManagerActivity

cn.com.vau.page.coupon.couponUse.CouponDetailActivity

cn.com.vau.page.login.activity.SignUpActivity

cn.com.vau.page.login.activity.SignUpPwdActivity

cn.com.vau.page.login.activity.SignUpAsicActivity

cn.com.vau.page.login.activity.SignUpAsicPwdActivity

cn.com.vau.page.login.activity.BindEmailActivity

cn.com.vau.profile.activity.kycAuth.KycAuthActivity

cn.com.vau.profile.activity.kycLink.BindEmailKycActivity

cn.com.vau.profile.activity.kycLink.BindPhoneKycActivity

cn.com.vau.profile.activity.kycLink.ChangeLoginPwdKycActivity

cn.com.vau.profile.activity.kycLink.UpdateEmailKycActivity

cn.com.vau.page.login.activity.VerifyEmailCodeActivity

cn.com.vau.page.login.activity.VerifySmsCodeActivity

cn.com.vau.profile.activity.fundspwd.SetFundsPwdKycActivity

cn.com.vau.profile.activity.kycLink.UpdatePhoneKycActivity

cn.com.vau.ui.wallet.WalletMainActivity

cn.com.vau.ui.wallet.WalletCurrencyDetailActivity

cn.com.vau.ui.card.main.CardMainActivity

cn.com.vau.ui.card.address.CardOpenAddressActivity

cn.com.vau.ui.card.open.activity.OpenCardActivity

cn.com.vau.ui.card.open.activity.OpenCardResultActivity

cn.com.vau.ui.card.manage.activity.CardManageActivity

cn.com.vau.ui.card.manage.activity.CardOperationHistoryActivity

cn.com.vau.ui.card.manage.activity.CardOperationDetailsActivity

cn.com.vau.ui.card.manage.activity.CardFreezeResultActivity

cn.com.vau.ui.card.kyc.activity.KycPoiVerificationActivity

cn.com.vau.ui.card.kyc.activity.KycPoaVerificationActivity

cn.com.vau.ui.card.kyc.activity.KycResultActivity

cn.com.vau.ui.card.open.activity.UpgradeCardResultActivity

cn.com.vau.profile.activity.fundspwd.SetFundsPwdAsicActivity

cn.com.vau.page.login.activity.VerifySmsCodeNewActivity

cn.com.vau.trade.activity.SettingIndicatorActivity

cn.com.vau.trade.activity.SettingMoreActivity

cn.com.vau.trade.activity.IndicatorDetailActivity

com.idlefish.flutterboost.containers.FlutterBoostActivity

cn.com.vau.flutter.VauFlutterBoostActivity

cn.com.vau.signals.activity.PromoActivity

cn.com.vau.page.security.CardPaySettingActivity

cn.com.vau.ui.card.main.CardPayResultActivity

cn.com.vau.page.security.CardPasswordExemptPayActivity

cn.com.vau.ui.card.otp.activity.OTPActivity

cn.com.vau.page.setting.activity.DebugConfigActivity

cn.com.vau.signals.stsignal.activity.StStrategyOffersActivity

cn.com.vau.util.permission.PermissionActivity

cn.com.vau.signals.stsignal.activity.StEditStrategyMinActivity

com.lxj.xpopup.util.XPermission$PermissionActivity

com.sumsub.sns.internal.features.presentation.main.SNSAppActivity

zendesk.support.request.RequestActivity

zendesk.support.requestlist.RequestListActivity

zendesk.support.guide.ViewArticleActivity

zendesk.support.guide.HelpCenterActivity

zendesk.classic.messaging.MessagingActivity

zendesk.messaging.android.internal.conversationscreen.ConversationActivity

zendesk.messaging.android.internal.conversationscreen.ImageViewerActivity

zendesk.messaging.android.internal.conversationslistscreen.ConversationsListActivity

zendesk.messaging.android.internal.conversationslistscreen.ConversationsListComposeActivity

zendesk.messaging.android.internal.conversationscreen.ConversationComposeActivity

zendesk.answerbot.AnswerBotArticleActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW android.intent.action.VIEW

com.sensorsdata.analytics.android.sdk.dialog.SchemeActivity

android.intent.action.VIEW

com.blankj.utilcode.util.UtilsTransActivity4MainProcess

com.blankj.utilcode.util.UtilsTransActivity

com.facebook.CustomTabMainActivity

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Android Permissions

UltimaMarkets.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.TYPE_APPLICATION_OVERLAY

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

android.permission.USE_FINGERPRINT

android.permission.WRITE_MEDIA_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.WRITE_SETTINGS

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

com.google.android.gms.permission.AD_ID

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.NFC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.USE_BIOMETRIC

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

cn.com.ummarkets.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE