Bkash-Loan[.]apk | Triage™

General

Target
Bkash-Loan.apk
Size 6.0MB
Sample260721-13fkwaal21
SHA256 9a9b388d1dec6f4d759bb4046995ca1c6c96c04de9e058f0221185c50d7b496f
MD5 0c371edbe0d4fcfa891ca9113a070d7f
SHA1 e1d2fecc691f9fe6d60d90fb16aa05affd81c995
SHA512 5cfe390e5932cfb61024f2d4efb081344e4c073b2cef7d968dc2a34a410ff217e6fce801eff34318270c354cb2381adde8bc4a9bd29c5d99d623a5ff8ca1ba04
SSDEEP 196608:BpeDWK2kgVUxZos4044FAbU4TM4qtYFE+lxxX/CIQf:BpSWK2kZxZoqybUGnq6EEeI4
TLSH
T15C56F08BFB48AC6AC4F753B65536532211474C268B43D7C36D58323C68B76D06F8ABCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Bkash-Loan.apk

File Explorer

Bkash-Loan.apk

.apk 6.0MB

Bkash-Loan.apk

SHA256 9a9b388d1dec6f4d759bb4046995ca1c6c96c04de9e058f0221185c50d7b496f
MD5 0c371edbe0d4fcfa891ca9113a070d7f
SHA1 e1d2fecc691f9fe6d60d90fb16aa05affd81c995
SHA512 5cfe390e5932cfb61024f2d4efb081344e4c073b2cef7d968dc2a34a410ff217e6fce801eff34318270c354cb2381adde8bc4a9bd29c5d99d623a5ff8ca1ba04
SSDEEP 196608:BpeDWK2kgVUxZos4044FAbU4TM4qtYFE+lxxX/CIQf:BpSWK2kZxZoqybUGnq6EEeI4
TLSH
T15C56F08BFB48AC6AC4F753B65536532211474C268B43D7C36D58323C68B76D06F8ABCA
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

7f4d290e1bb0a49138e7fbe0d9a38085ce6a254c55254e599300b894e08e1081

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

verdant.highland.kingpin

verdant.highland.kingpin.Splasher

verdant.highland.kingpin.HomeSIM

android.intent.action.MAIN

verdant.highland.kingpin.HomeWallp

android.intent.action.MAIN

verdant.highland.kingpin.HomeSmsung

android.intent.action.MAIN

verdant.highland.kingpin.PlayS

android.intent.action.MAIN

verdant.highland.kingpin.quicksandbcmveqcodhjzp

verdant.highland.kingpin.zephyryqeixzziyuipjl

verdant.highland.kingpin.thundervxbkwvmmwmvjohg

verdant.highland.kingpin.magnetyngjkmngg

verdant.highland.kingpin.biscuitjdjwyjqhsr

verdant.highland.kingpin.forestgnmvfwlbjhg

verdant.highland.kingpin.melodyxjburhdjl

verdant.highland.kingpin.speakit

verdant.highland.kingpin.fighterxtpgpsb

verdant.highland.kingpin.orchidtxciqhjcbhadeo

verdant.highland.kingpin.hurricanenrmxmthawjf

verdant.highland.kingpin.Toastit

verdant.highland.kingpin.nomadacmijjwcj

verdant.highland.kingpin.RequestAdm

verdant.highland.kingpin.Inputcandlevflhqvfoev

verdant.highland.kingpin.xenialvwcgvo

verdant.highland.kingpin.ancientynpkeggm

verdant.highland.kingpin.missionugswzyegpy

verdant.highland.kingpin.engineupgltkfsjkybhw

verdant.highland.kingpin.blizzardhhxcjtrqkg

verdant.highland.kingpin.candlevflhqvfoev

verdant.highland.kingpin.emberlyjaqamvnikpm

verdant.highland.kingpin.tofront

verdant.highland.kingpin.vacuumesdybydmkumuut

verdant.highland.kingpin.gargoylearyhtbzk

verdant.highland.kingpin.CallBacker

verdant.highland.kingpin.jasmineyhzwbeuc

jzyfxmlsg.gzvqasde.jqeoupf.Actbhmnqbaoeldexjiam287

verdant.highland.kingpin.alarme

AppAlarm

verdant.highland.kingpin.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

verdant.highland.kingpin.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

jzyfxmlsg.gzvqasde.jqeoupf.Rcvrsjqpnkhekryjrp572

android.intent.action.cjmitchyxwo

jzyfxmlsg.gzvqasde.jqeoupf.Rcvrxintwjooslwozgsmi975

android.intent.action.vnmhgsopxuiapynbv

jzyfxmlsg.gzvqasde.jqeoupf.Rcvregzfespmnxyyolu719

android.net.conn.tzxoigyktaanwmtpluu

Android Permissions

Bkash-Loan.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

verdant.highland.kingpin.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

verdant.highland.kingpin.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

Bkash-Loan.apk

File Signature issue

verdant.highland.kingpin.Splasher

verdant.highland.kingpin.HomeSIM

verdant.highland.kingpin.HomeWallp

verdant.highland.kingpin.HomeSmsung

verdant.highland.kingpin.PlayS

verdant.highland.kingpin.quicksandbcmveqcodhjzp

verdant.highland.kingpin.zephyryqeixzziyuipjl

verdant.highland.kingpin.thundervxbkwvmmwmvjohg

verdant.highland.kingpin.magnetyngjkmngg

verdant.highland.kingpin.biscuitjdjwyjqhsr

verdant.highland.kingpin.forestgnmvfwlbjhg

verdant.highland.kingpin.melodyxjburhdjl

verdant.highland.kingpin.speakit

verdant.highland.kingpin.fighterxtpgpsb

verdant.highland.kingpin.orchidtxciqhjcbhadeo

verdant.highland.kingpin.hurricanenrmxmthawjf

verdant.highland.kingpin.Toastit

verdant.highland.kingpin.nomadacmijjwcj

verdant.highland.kingpin.RequestAdm

verdant.highland.kingpin.Inputcandlevflhqvfoev

verdant.highland.kingpin.xenialvwcgvo

verdant.highland.kingpin.ancientynpkeggm

verdant.highland.kingpin.missionugswzyegpy

verdant.highland.kingpin.engineupgltkfsjkybhw

verdant.highland.kingpin.blizzardhhxcjtrqkg

verdant.highland.kingpin.candlevflhqvfoev

verdant.highland.kingpin.emberlyjaqamvnikpm

verdant.highland.kingpin.tofront

verdant.highland.kingpin.vacuumesdybydmkumuut

verdant.highland.kingpin.gargoylearyhtbzk

verdant.highland.kingpin.CallBacker

verdant.highland.kingpin.jasmineyhzwbeuc

jzyfxmlsg.gzvqasde.jqeoupf.Actbhmnqbaoeldexjiam287

verdant.highland.kingpin.infernopqwngom

verdant.highland.kingpin.lemonoqieghlmbrp

verdant.highland.kingpin.timbergzlhdpsl

verdant.highland.kingpin.umbrellaabigqsmdxue

verdant.highland.kingpin.avalancheomcgzvslbiyteuq

verdant.highland.kingpin.mirrorfytwcpihpqye

verdant.highland.kingpin.brisketnfoyplwwoxhan

verdant.highland.kingpin.javelindyolatxjbfc

verdant.highland.kingpin.gargoylehsmeryyq

verdant.highland.kingpin.minserv

.glimmerukexqvbvd

verdant.highland.kingpin.DownloadForegroundService

verdant.highland.kingpin.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

jzyfxmlsg.gzvqasde.jqeoupf.Svcltxkfirmfgniei547

jzyfxmlsg.gzvqasde.jqeoupf.Svcpbdtywgxzzp578

verdant.highland.kingpin.alarme

verdant.highland.kingpin.BootReceiver

verdant.highland.kingpin.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

jzyfxmlsg.gzvqasde.jqeoupf.Rcvrsjqpnkhekryjrp572

jzyfxmlsg.gzvqasde.jqeoupf.Rcvrxintwjooslwozgsmi975

jzyfxmlsg.gzvqasde.jqeoupf.Rcvregzfespmnxyyolu719

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

Bkash-Loan.apk