dicktok[.]apk | Triage™

General

Target
dicktok.apk
Size 8.7MB
Sample260720-rfdckaew2s
SHA256 ef0f6d834c3f9223d1cc61c215e4be6763fed94476f78caefe75bdfaef2eaafe
MD5 f2272e2751ec55354e92b3813d8ebe08
SHA1 f6224dd9a70cb6788a66dfab66ffbc2371833ff3
SHA512 76606ac4ea961beaf61701d103635862e3a39d17b77d928d8aa5d02f6115849d1cf6785f873d364a45b6990b924c2afd76fe26e7b996fd4a751a8eb969b01c3e
SSDEEP 196608:mBj7UWDXZ9ABRRExEQ9h85/e3SQ8TktS3L:0XUW7KExxL85/e3WTkE3L
TLSH
T10596F147FB908965C8FA52B152BA4326370B9F228B43878B1550B1BD7CB35E42FD96CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
dicktok.apk

File Explorer

dicktok.apk

.apk 8.7MB

dicktok.apk

SHA256 ef0f6d834c3f9223d1cc61c215e4be6763fed94476f78caefe75bdfaef2eaafe
MD5 f2272e2751ec55354e92b3813d8ebe08
SHA1 f6224dd9a70cb6788a66dfab66ffbc2371833ff3
SHA512 76606ac4ea961beaf61701d103635862e3a39d17b77d928d8aa5d02f6115849d1cf6785f873d364a45b6990b924c2afd76fe26e7b996fd4a751a8eb969b01c3e
SSDEEP 196608:mBj7UWDXZ9ABRRExEQ9h85/e3SQ8TktS3L:0XUW7KExxL85/e3WTkE3L
TLSH
T10596F147FB908965C8FA52B152BA4326370B9F228B43878B1550B1BD7CB35E42FD96CC
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

95708dd189311bcedd555e93f2af43407d0b69b9dca0aecab49be0c9a7192b15

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=editor

wtdq.bnwelt.zvvfyhy

wtdq.bnwelt.zvvfyhy.Splasher

wtdq.bnwelt.zvvfyhy.HomeSIM

android.intent.action.MAIN

wtdq.bnwelt.zvvfyhy.HomeWallp

android.intent.action.MAIN

wtdq.bnwelt.zvvfyhy.HomeSmsung

android.intent.action.MAIN

wtdq.bnwelt.zvvfyhy.PlayS

android.intent.action.MAIN

wtdq.bnwelt.zvvfyhy.cjorjvuhsophjres

wtdq.bnwelt.zvvfyhy.gqriiqxujxftdfc

wtdq.bnwelt.zvvfyhy.gqhsjvkrddp

wtdq.bnwelt.zvvfyhy.pqxuwnwebjqw

wtdq.bnwelt.zvvfyhy.rlavrtwfkzhqehrz

wtdq.bnwelt.zvvfyhy.yozmjpasbb

wtdq.bnwelt.zvvfyhy.saybzwrfvm

wtdq.bnwelt.zvvfyhy.speakit

wtdq.bnwelt.zvvfyhy.wihapoixgicnyzyka

wtdq.bnwelt.zvvfyhy.xoybzzstwikkkojzqk

wtdq.bnwelt.zvvfyhy.dyywcpueyctg

wtdq.bnwelt.zvvfyhy.Toastit

wtdq.bnwelt.zvvfyhy.mxtlhljzn

wtdq.bnwelt.zvvfyhy.RequestAdm

wtdq.bnwelt.zvvfyhy.Inputmluhkluz

wtdq.bnwelt.zvvfyhy.oipynoxvnljbgfglika

wtdq.bnwelt.zvvfyhy.sgetlymhztgjydhko

wtdq.bnwelt.zvvfyhy.auktwrkajqaiwvdb

wtdq.bnwelt.zvvfyhy.jiuusmbizxukzqxaily

wtdq.bnwelt.zvvfyhy.cnnhbdvdceomgnqs

wtdq.bnwelt.zvvfyhy.mluhkluz

wtdq.bnwelt.zvvfyhy.gsnfxgtcpedlsmjwd

wtdq.bnwelt.zvvfyhy.tofront

wtdq.bnwelt.zvvfyhy.qiaoyohz

wtdq.bnwelt.zvvfyhy.sncmbkaqbddwbhwuz

wtdq.bnwelt.zvvfyhy.CallBacker

wtdq.bnwelt.zvvfyhy.knubjaszgy

wtdq.bnwelt.zvvfyhy.alarme

AppAlarm

wtdq.bnwelt.zvvfyhy.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

wtdq.bnwelt.zvvfyhy.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

dicktok.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_SMS

wtdq.bnwelt.zvvfyhy.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

dicktok.apk

File Signature issue

wtdq.bnwelt.zvvfyhy.Splasher

wtdq.bnwelt.zvvfyhy.HomeSIM

wtdq.bnwelt.zvvfyhy.HomeWallp

wtdq.bnwelt.zvvfyhy.HomeSmsung

wtdq.bnwelt.zvvfyhy.PlayS

wtdq.bnwelt.zvvfyhy.cjorjvuhsophjres

wtdq.bnwelt.zvvfyhy.gqriiqxujxftdfc

wtdq.bnwelt.zvvfyhy.gqhsjvkrddp

wtdq.bnwelt.zvvfyhy.pqxuwnwebjqw

wtdq.bnwelt.zvvfyhy.rlavrtwfkzhqehrz

wtdq.bnwelt.zvvfyhy.yozmjpasbb

wtdq.bnwelt.zvvfyhy.saybzwrfvm

wtdq.bnwelt.zvvfyhy.speakit

wtdq.bnwelt.zvvfyhy.wihapoixgicnyzyka

wtdq.bnwelt.zvvfyhy.xoybzzstwikkkojzqk

wtdq.bnwelt.zvvfyhy.dyywcpueyctg

wtdq.bnwelt.zvvfyhy.Toastit

wtdq.bnwelt.zvvfyhy.mxtlhljzn

wtdq.bnwelt.zvvfyhy.RequestAdm

wtdq.bnwelt.zvvfyhy.Inputmluhkluz

wtdq.bnwelt.zvvfyhy.oipynoxvnljbgfglika

wtdq.bnwelt.zvvfyhy.sgetlymhztgjydhko

wtdq.bnwelt.zvvfyhy.auktwrkajqaiwvdb

wtdq.bnwelt.zvvfyhy.jiuusmbizxukzqxaily

wtdq.bnwelt.zvvfyhy.cnnhbdvdceomgnqs

wtdq.bnwelt.zvvfyhy.mluhkluz

wtdq.bnwelt.zvvfyhy.gsnfxgtcpedlsmjwd

wtdq.bnwelt.zvvfyhy.tofront

wtdq.bnwelt.zvvfyhy.qiaoyohz

wtdq.bnwelt.zvvfyhy.sncmbkaqbddwbhwuz

wtdq.bnwelt.zvvfyhy.CallBacker

wtdq.bnwelt.zvvfyhy.knubjaszgy

wtdq.bnwelt.zvvfyhy.smdysldgeevoxvfu

wtdq.bnwelt.zvvfyhy.aztrhelf

wtdq.bnwelt.zvvfyhy.bpbmfndfridb

wtdq.bnwelt.zvvfyhy.hqfihxueuqkwug

wtdq.bnwelt.zvvfyhy.neirzwjt

wtdq.bnwelt.zvvfyhy.oahkoaxg

wtdq.bnwelt.zvvfyhy.tqviweqcxuxaedeyuw

wtdq.bnwelt.zvvfyhy.iotojeyijmqggtgb

wtdq.bnwelt.zvvfyhy.rvdjgfjaokfvpuxsd

wtdq.bnwelt.zvvfyhy.minserv

.wcfvqvftjuav

wtdq.bnwelt.zvvfyhy.DownloadForegroundService

wtdq.bnwelt.zvvfyhy.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

wtdq.bnwelt.zvvfyhy.alarme

wtdq.bnwelt.zvvfyhy.BootReceiver

wtdq.bnwelt.zvvfyhy.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

dicktok.apk