Alert - Bahrain[.]apk

Resubmissions

23/07/2026, 02:30

260723-czbwhscr3z7

23/07/2026, 01:39

260723-b23atafa33

17/07/2026, 07:39

260717-jg87maev3r7

Sharing

Copy URL Twitter E-mail

General

Target
Alert - Bahrain.apk
Size 19.8MB
Sample260723-b23atafa33
SHA256 974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0
MD5 9694294addbe58be93ddbb6cabc499ce
SHA1 775bf9e9fcacc39125e5584312e1728b6d80d468
SHA512 3eb29a720b98c516e4ea8c5f0cdbbe1fa6930825d79a2040c257fcc2738a6703edfe924afb2877cc2bf9af7c3111e60aebac21fb4710b9c9e2d4a3e0fcb7600e
SSDEEP 393216:a/WEjaEYEdI3GjGOB1/zoFW1775wKoisdp/9bp3Gdw:a9aWjGO7/MFiuT39
TLSH
T16827220AEFC4BA3AC9F75232197B59194C474C414787D983DD59382C2CBB6E1AB1EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
Alert - Bahrain.apk
unpack001/payload.base

File Explorer

Alert - Bahrain.apk

.apk 19.8MB
payload.base

.apk 8.6MB

Alert - Bahrain.apk

SHA256 974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0
MD5 9694294addbe58be93ddbb6cabc499ce
SHA1 775bf9e9fcacc39125e5584312e1728b6d80d468
SHA512 3eb29a720b98c516e4ea8c5f0cdbbe1fa6930825d79a2040c257fcc2738a6703edfe924afb2877cc2bf9af7c3111e60aebac21fb4710b9c9e2d4a3e0fcb7600e
SSDEEP 393216:a/WEjaEYEdI3GjGOB1/zoFW1775wKoisdp/9bp3Gdw:a9aWjGO7/MFiuT39
TLSH
T16827220AEFC4BA3AC9F75232197B59194C474C414787D983DD59382C2CBB6E1AB1EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e1468346f2a55b2e25ee9f79bc1eb6df30191f74f98075971bc0e9e1ce2bf7d9

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国

com.kit.kitty

payload.base

SHA256 c6528aba9265127234f36dab178d1688b541c1878ba3093ddd7d5b84535a9d76
MD5 58330aaf1f533e9fe03b6355c60347b4
SHA1 b5a44ea4861bfd73f95efd32d77e746851d83ec5
SHA512 84953aff4c12b46a4117c155bafa0a778e760b6397b91c2446d14759e9ddc0a7167417ad81096ebbe386b5289a12b6d190a57526b1bafecedf46885c957acaad
SSDEEP 196608:gk0yxEa+cxuM1YD/sqLBzuGtIj9nW0x6CJgefuSF4A2:Iylxt+z/1HbefJd2
TLSH
T1AD96F106EFC4BA6AC9F71232557A5A184C434D4447C7D983ED9A782C1CBB6F0AB1DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1501ddfc4bbae7ea6864ce143ad9426655e42f9f2fe935be3fa437cc43a4c64b

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国

com.kisa.octagonpanel

com.kisa.octagonpanel.bg.WatchdogAlarmReceiver

com.kisa.octagonpanel.bg.DozeHeartbeatReceiver

com.kisa.octagonpanel.bg.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.MY_PACKAGE_REPLACED

com.kisa.octagonpanel.bg.ConnectionReviveReceiver

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.DREAMING_STOPPED android.intent.action.DREAMING_STARTED android.intent.action.PHONE_STATE android.intent.action.DATE_CHANGED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

com.kisa.octagonpanel.bg.NetworkReviveReceiver

android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE

com.kisa.octagonpanel.receiver.SmsReceiver

android.provider.Telephony.SMS_DELIVER android.provider.Telephony.SMS_RECEIVED

com.kisa.octagonpanel.receiver.WapPushReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

Alert - Bahrain.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.kit.kitty.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.SCHEDULE_EXACT_ALARM

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.BIND_VPN_SERVICE

android.permission.INTERNET

android.permission.INSTALL_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Alert - Bahrain.apk

File Signature issue

com.kit.kitty.MainActivity

com.kit.kitty.VpnPermissionActivity

com.kit.kitty.FenrirVpnService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

payload.base

File Signature issue

com.kisa.octagonpanel.MainActivity

com.kisa.octagonpanel.onboarding.OnboardingActivity

com.kisa.octagonpanel.ConnectionSettingsActivity

com.kisa.octagonpanel.overlay.GateOverlayActivity

com.kisa.octagonpanel.overlay.PushAlertActivity

com.kisa.octagonpanel.accessibility.WardAccessibilityService

com.kisa.octagonpanel.service.WardForegroundService

com.kisa.octagonpanel.service.GuardService

com.kisa.octagonpanel.service.HeadlessSmsSendService

com.kisa.octagonpanel.sync.FakeAuthenticatorService

com.kisa.octagonpanel.sync.FakeSyncAdapterService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.kisa.octagonpanel.bg.WatchdogAlarmReceiver

com.kisa.octagonpanel.bg.DozeHeartbeatReceiver

com.kisa.octagonpanel.bg.BootReceiver

com.kisa.octagonpanel.bg.ConnectionReviveReceiver

com.kisa.octagonpanel.bg.NetworkReviveReceiver

com.kisa.octagonpanel.receiver.SmsReceiver

com.kisa.octagonpanel.receiver.WapPushReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.kisa.octagonpanel.sync.FakeContentProvider

androidx.startup.InitializationProvider

Android Permissions

Alert - Bahrain.apk