Lite[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Lite.apk
Size 3.0MB
Sample260719-pd98eaax4p
SHA256 ccf40d1f0ff1fc17b314b8f8b9d584291c5d9c65de00b284801660db69b7bf4a
MD5 02e749d64f1a88b363408fc047dafd8f
SHA1 80fdfe32e1a6ec576988b67e38a54ddbe60720c4
SHA512 17a82e814732f6c7a5dc52d110b829c20809faa4049759e76e272fd8cd75a4d43b0efd8896b88f726a2d3262a06904c4fa86370f70701f64f17c9fa04b5af26a
SSDEEP 49152:gnomTzusWlERP0qbe9zukxnmk6bTdHrEtShjTTcrl+P+4O/t7LKcGguGb4usozPJ:PmTz7e9xmFTRhjncakt7LKb3pus2RLhl
TLSH
T1ADE522E6EBD9CC2BECB261350D63C3719B16DD108A57EB673225366C18B77886F442D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Lite.apk

File Explorer

Lite.apk

.apk 3.0MB

Lite.apk

SHA256 ccf40d1f0ff1fc17b314b8f8b9d584291c5d9c65de00b284801660db69b7bf4a
MD5 02e749d64f1a88b363408fc047dafd8f
SHA1 80fdfe32e1a6ec576988b67e38a54ddbe60720c4
SHA512 17a82e814732f6c7a5dc52d110b829c20809faa4049759e76e272fd8cd75a4d43b0efd8896b88f726a2d3262a06904c4fa86370f70701f64f17c9fa04b5af26a
SSDEEP 49152:gnomTzusWlERP0qbe9zukxnmk6bTdHrEtShjTTcrl+P+4O/t7LKcGguGb4usozPJ:PmTz7e9xmFTRhjncakt7LKb3pus2RLhl
TLSH
T1ADE522E6EBD9CC2BECB261350D63C3719B16DD108A57EB673225366C18B77886F442D0
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

18b30aff4d5f742f7fbe4dfccb854956aea286278296dd1398783469958ef7c8

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Facebook Corporation,OU=Facebook,O=Facebook Mobile,L=Palo Alto,ST=CA,C=US

com.facebook.lite

android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.BATTERY_STATS android.permission.BROADCAST_STICKY android.permission.CALL_PHONE android.permission.CAMERA android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.GET_TASKS android.permission.INTERNET android.permission.READ_CALENDAR android.permission.READ_CONTACTS android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.READ_PHONE_STATE android.permission.READ_PHONE_NUMBERS android.permission.READ_PROFILE android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECORD_AUDIO android.permission.SYSTEM_ALERT_WINDOW android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.WRITE_CALENDAR android.permission.WRITE_CONTACTS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_MEDIA_VISUAL_USER_SELECTED com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.facebook.receiver.permission.ACCESS com.facebook.katana.provider.ACCESS com.facebook.orca.provider.ACCESS com.facebook.mlite.provider.ACCESS com.facebook.wakizashi.provider.ACCESS com.facebook.permission.prod.FB_APP_COMMUNICATION com.sec.android.provider.badge.permission.WRITE com.sec.android.provider.badge.permission.READ com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS android.permission.REORDER_TASKS android.permission.USE_FULL_SCREEN_INTENT android.permission.BIND_NOTIFICATION_LISTENER_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.CREDENTIAL_MANAGER_SET_ALLOWED_PROVIDERS com.google.android.gms.permission.AD_ID com.android.vending.BILLING android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.RUN_USER_INITIATED_JOBS android.permission.BLUETOOTH android.permission.POST_NOTIFICATIONS android.permission.FOREGROUND_SERVICE_MICROPHONE com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE com.facebook.services.identity.FEO2 com.facebook.lite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.facebook.lite.MainActivity

android.intent.action.MAIN com.facebook.lite.intent.action.SEND_AS_MESSAGE android.intent.action.VIEW

com.facebook.ads.AudienceNetworkActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.facebook.lite.rtc.RTCActivity

com.facebook.lite.webviewrtc.RTCIncomingCallActivity

com.facebook.lite.nativeRtc.NativeRtcCallActivity

com.facebook.lite.media.AlbumGalleryActivity

com.facebook.lite.platform.LoginGDPDialogActivityV2

com.facebook.lite.storagemanager.ManageStorageActivity

com.facebook.lite.bugreporter.screencast.ScreencastActivity

com.facebook.lite.inappbrowser.common.BrowserLiteProxyActivity

com.facebook.browser.lite.BrowserLiteActivity

com.facebook.lite.inappbrowser.activity.FBLiteBrowserLiteActivity

com.facebook.lite.deeplinking.UIQRE2EActivity

com.facebook.lite.waotp.WAOtpReceiveCodeActivity

com.whatsapp.otp.OTP_RETRIEVED

com.facebook.lite.openzeroratedcheckoutactivity.OpenZeroRatedCheckoutActivity

com.facebook.lite.notification.messaging.MuteThreadActivity

com.facebook.lite.silentapp.SilentAppActivity

com.facebook.lite.webviewrtc.RTCService

com.facebook.lite.download.DownloadService

com.facebook.lite.FbnsIntentService

com.facebook.lite.FbnsForegroundService

com.facebook.lite.notification.messaging.ArmadilloNotificationForegroundService

com.facebook.analyticslite.memory.MemoryDumpUploadService

com.facebook.rti.push.service.FbnsService

com.facebook.lite.notification.LiteFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.facebook.lite.intent.WakefulIntentService

com.facebook.lite.intent.PeriodicTaskJobService

com.facebook.lite.intent.WidgetTaskScheduleJobService

com.facebook.lite.analytics.BackgroundAnalyticsUploadJobService

com.facebook.lite.offline.BackgroundMsysSendJobService

com.facebook.lite.service.SnoozeNotificationService

com.facebook.lite.service.NotificationLoggingService

com.facebook.lite.service.NotificationQuickActionService

com.facebook.lite.service.AppInitService

com.facebook.lite.service.AppRestartService

com.facebook.lite.messagingapps.FirstPartyMessagingAppsDetectionService

com.facebook.lite.bugreporter.screencast.ScreencastService

com.facebook.lite.service.MediaUploadService

com.facebook.browser.lite.BrowserLiteIntentService

com.facebook.lite.browser.BrowserLiteCallbackService

com.facebook.browser.lite.BrowserLiteCallback

com.facebook.video.heroplayer.service.HeroKeepAliveService

com.facebook.appcomponentmanager.AppComponentManagerService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.facebook.videolite.api.VideoUploadForegroundService

com.facebook.videolite.api.VideoUploadJobService

com.facebook.videolite.api.jobscheduler.UploadJobSchedulerService

com.facebook.lite.rtc.impl.service.RtcService

com.facebook.analytics2.logger.service.LollipopUploadSafeService

com.facebook.analytics2.logger.legacy.uploader.LollipopUploadService

com.facebook.analytics2.logger.legacy.uploader.Analytics2UploadService

com.facebook.analytics2.logger.legacy.uploader.AlarmBasedUploadService

com.facebook.voltron.download.scheduledinstaller.OxygenScheduledInstallerJobService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheService

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppCacheJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.facebook.secure.packagefinder.PackageFinderService

com.facebook.secure.packagefinder.intent.ACTION_QUERY_PACKAGES

com.facebook.lite.access.accountmanager.AccountAuthenticatorService

android.accounts.AccountAuthenticator

com.facebook.lite.pretos.LiteAppComponentReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.rtc.IncomingCallReceiver

com.facebook.intent.action.prod.RTC_INCOMING_CALL com.facebook.intent.action.prod.RTC_INCOMING_CALL_DISCONNECTED

com.facebook.lite.campaign.CampaignReceiver

com.android.vending.INSTALL_REFERRER

com.facebook.lite.appManager.AppManagerReceiver

com.facebook.appmanager.POST_INSTALL_SSO

com.facebook.sharing.NativeShareSheetReceiver

com.facebook.lite.deviceid.FbLitePhoneIdRequestReceiver

com.facebook.GET_PHONE_ID

com.facebook.appupdate.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.facebook.lite.deviceid.FbLitePhoneIdUpdater$LocalBroadcastReceiver

com.facebook.lite.FbnsIntentService$CallbackReceiver

com.facebook.rti.fbns.intent.RECEIVE

com.facebook.lite.KeepWarmReceiver

com.facebook.rti.push.service.MqttSystemBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT

com.facebook.lite.notification.BadgePresenceReceiver

android.net.conn.USER_PRESENT

com.facebook.lite.notification.BadgeNotificationUtil$DeleteIntent

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.AppController$NetworkStateBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.facebook.lite.notification.PushNotificationLogBroadcastReceiver

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.notification.DirectReplyBroadcastReceiver

com.facebook.lite.notifications.messaging.impl.DeleteMessageNotificationBroadcastReceiver

com.facebook.lite.NOTIFICATION_DISMISS

com.facebook.lite.shortcuts.ShortcutCreationReceiver

com.facebook.lite.SHORTCUT_CREATED

com.facebook.lite.notification.LocalNotificationLogBroadcastReceiver

com.facebook.lite.LOCAL_NOTIFICATION_DISMISS

com.facebook.lite.notification.widget.receiver.NotificationsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.facebook.lite.notification.widget.receiver.NotificationsWidgetForceUpdateReceiver

com.facebook.lite.notification.widget.ACTION_FORCE_UPDATE

com.facebook.lite.notification.widget.receiver.NotificationsWidgetAppUpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.notification.NotificationsRemovalTimerReceiver

com.facebook.lite.NOTIFICATIONS_REMOVAL_TIMER_RECEIVER

com.facebook.lite.notification.BalanceSimulationNotificationBroadcastReceiver

com.facebook.lite.BALANCE_SIMULATION_NOTIFICATION

com.facebook.lite.notification.NotificationsSnoozeTimerReceiver

com.facebook.lite.NOTIFICATIONS_SNOOZE_TIMER_RECEIVER_FILTER_NAME

com.facebook.lite.notification.NotificationSchedulingReceiver

com.facebook.lite.NOTIFICATION_SCHEDULING_RECEIVER_FILTER_NAME

com.facebook.lite.browser.ChromeCustomTabsReceiver

com.facebook.lite.intent.IntentScheduler

ANDROID.INTENT.ACTION.BOOT_COMPLETED

com.facebook.lite.intent.WakefulIntentForwarder

com.facebook.lite.datausage.DataUsageBroadCastReceiver

android.intent.action.ACTION_SHUTDOWN android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED

com.facebook.lite.registration.EmptyAppNotifServiceReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

com.facebook.lite.waotp.WAOtpCodeReceiver

com.whatsapp.otp.OTP_RETRIEVED

com.facebook.lite.signal.FbliteFbnsClientSignalBroadcastReceiver

com.facebook.oxygen.services.fbns.SYS_ENTER

com.facebook.nobreak.CrashLoop$LastState

com.facebook.lite.nativeRtc.receiver.NotificationActionReceiver

com.facebook.lite.rtc.NotificationAction

com.facebook.analytics2.logger.legacy.uploader.HighPriUploadRetryReceiver

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppFlag

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IsManagedAppReceiver

com.facebook.oxygen.preloads.sdk.firstparty.managedappcache.IS_MANAGED_APP_CHANGED

com.facebook.oxygen.preloads.sdk.firstparty.settings.TosAcceptedFlag

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Android Permissions

Lite.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_CALENDAR

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PROFILE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_CALENDAR

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.facebook.receiver.permission.ACCESS

com.facebook.katana.provider.ACCESS

com.facebook.orca.provider.ACCESS

com.facebook.mlite.provider.ACCESS

com.facebook.wakizashi.provider.ACCESS

com.facebook.permission.prod.FB_APP_COMMUNICATION

com.sec.android.provider.badge.permission.WRITE

com.sec.android.provider.badge.permission.READ

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.USE_FULL_SCREEN_INTENT