com[.]drive[.]northernIreland[.]apk

General

Target
com.drive.northernIreland.apk
Size 11.5MB
Sample260721-slmc4adn6w
SHA256 ee84b316e9fbdf0c24e6bd53609b80e204a8bdc9a8a765c2e21c948b08104719
MD5 c4bd1b0cbdea342ccc748dee654963ca
SHA1 3527bfeff2617aed15f116d28e383fff15aa7591
SHA512 f49b670d644e68a3a87350d19d5c52bcc3fd86150b698986fcbaca3588bc6e8c14a350ec518cc0fc7ea5e15d67e8b85165dfe25129322a287fcce8aa24b26db2
SSDEEP 196608:lXpC4NaOoDL/T8lTewPVwc+viplRpeM7PWrc7GyaqjLIiFjsGdZS7WnQTzJfxxHr:DC4NaOoHLqVqcAipwMSrciyFF7dTnil3
TLSH
T1AEC62396E3DCA02FCD7A183245BA032127674C524987ABD37A54762C2DF76849F1EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.drive.northernIreland.apk

File Explorer

com.drive.northernIreland.apk

.apk 11.5MB

com.drive.northernIreland.apk

SHA256 ee84b316e9fbdf0c24e6bd53609b80e204a8bdc9a8a765c2e21c948b08104719
MD5 c4bd1b0cbdea342ccc748dee654963ca
SHA1 3527bfeff2617aed15f116d28e383fff15aa7591
SHA512 f49b670d644e68a3a87350d19d5c52bcc3fd86150b698986fcbaca3588bc6e8c14a350ec518cc0fc7ea5e15d67e8b85165dfe25129322a287fcce8aa24b26db2
SSDEEP 196608:lXpC4NaOoDL/T8lTewPVwc+viplRpeM7PWrc7GyaqjLIiFjsGdZS7WnQTzJfxxHr:DC4NaOoHLqVqcAipwMSrciyFF7dTnil3
TLSH
T1AEC62396E3DCA02FCD7A183245BA032127674C524987ABD37A54762C2DF76849F1EFC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

17996d26583f28fbb890398d76185e48ef3e4eaa90b5df86b20f51c107f5617a9fa7ad45e2b6596a1e67df95bcad4fcfbdfa5025a0d9f4df632f97513d21f752

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.drive.northernIreland

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.google.android.c2dm.intent.RECEIVE

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

EXTRA_CHOSEN_COMPONENT

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.mapbox.common.location.LocationUpdatesReceiver

com.mapbox.common.location.LocationUpdatesReceiver.ACTION_PROCESS_LOCATION_UPDATES

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

com.drive.northernIreland.apk

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_LOCATION

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.drive.northernIreland.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

com.drive.northernIreland.apk

File Signature issue

com.drive.northernIreland.MainActivity

com.yalantis.ucrop.UCropActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

com.eopeter.fluttermapboxnavigation.activity.NavigationActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.android.billingclient.api.ProxyBillingActivity

com.google.android.gms.common.api.GoogleApiActivity

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.metadata.ModuleDependencies

com.baseflow.geolocator.GeolocatorLocationService

com.lyokone.location.FlutterLocationService

com.mapbox.navigation.core.trip.service.NavigationNotificationService

com.google.firebase.messaging.FirebaseMessagingService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.mapbox.common.LifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.mapbox.common.location.LocationUpdatesReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

dev.fluttercommunity.plus.share.ShareFileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

com.drive.northernIreland.apk