Rubika-4[.]0[.]4(www[.]farsroid[.]com)[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
Rubika-4.0.4(www.farsroid.com).apk
Size 81.1MB
Sample260723-j5bahaae44
SHA256 75aa83d7096d557011e29d179f8ff43bf059fcfe68bc3f133bcc61576ce0d5d6
MD5 5d10fbb7c9358df5a46fbdd2ed6a2664
SHA1 ac78ad9944451d216edb7153cf12eb6c6e74dd2b
SHA512 f43942bf133ba331cf048d25da797dd1f502b6282593554962a31bbd07c8b933936f13f7cc58b2bbcae54bb6721b201c30be55db753285398c686252a7a71300
SSDEEP 1572864:avhVkK0kCUWAf5pN0RJ1RvweQ3DZOU5wJXSTeFAwqEgYKX0eHQpUrC:AXEGWAf5pN0RJnwx1wJigqxEpUG
TLSH
T1101822E7F3348C3DDA770676856A6031E9294E21C702B70F7808B72D69B73E24A497E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions.	android.permission.BIND_CHOOSER_TARGET_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Rubika-4.0.4(www.farsroid.com).apk

File Explorer

Rubika-4.0.4(www.farsroid.com).apk

.apk 81.1MB

Rubika-4.0.4(www.farsroid.com).apk

SHA256 75aa83d7096d557011e29d179f8ff43bf059fcfe68bc3f133bcc61576ce0d5d6
MD5 5d10fbb7c9358df5a46fbdd2ed6a2664
SHA1 ac78ad9944451d216edb7153cf12eb6c6e74dd2b
SHA512 f43942bf133ba331cf048d25da797dd1f502b6282593554962a31bbd07c8b933936f13f7cc58b2bbcae54bb6721b201c30be55db753285398c686252a7a71300
SSDEEP 1572864:avhVkK0kCUWAf5pN0RJ1RvweQ3DZOU5wJXSTeFAwqEgYKX0eHQpUrC:AXEGWAf5pN0RJnwx1wJigqxEpUG
TLSH
T1101822E7F3348C3DDA770676856A6031E9294E21C702B70F7808B72D69B73E24A497E5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2b23735c9d11cdd4ecfe1c32757a63fe8a01fd3d4ae09364b95d5484b1d9b877

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=aseman,OU=android,O=aseman,L=Tehran,ST=Tehran,C=021

app.rbmain.a

com.google.android.c2dm.permission.RECEIVE com.google.android.providers.gsf.permission.READ_GSERVICES android.permission.INTERNET android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.FOREGROUND_SERVICE_CAMERA android.permission.FOREGROUND_SERVICE_LOCATION android.permission.FOREGROUND_SERVICE_MICROPHONE android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.READ_EXTERNAL_STORAGE android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_MEDIA_AUDIO android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.VIBRATE android.permission.SYSTEM_ALERT_WINDOW android.permission.RECEIVE_BOOT_COMPLETED android.permission.USE_FINGERPRINT android.permission.USE_BIOMETRIC android.permission.INSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.CAMERA android.permission.BLUETOOTH android.permission.MANAGE_OWN_CALLS android.permission.USE_FULL_SCREEN_INTENT com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE android.permission.WRITE_EXTERNAL_STORAGE android.permission.BLUETOOTH_CONNECT android.permission.POST_NOTIFICATIONS com.google.android.gms.permission.AD_ID android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

org.rbmain.ui.LaunchActivity

android.intent.action.MAIN android.intent.action.SEND android.intent.action.SEND android.intent.action.SEND_MULTIPLE android.intent.action.SEND android.intent.action.SEND android.intent.action.SEND_MULTIPLE android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

org.rbmain.ui.BubbleActivity

org.rbmain.ui.ShareActivity

org.rbmain.ui.ExternalActionActivity

org.rbmain.passport.AUTHORIZE

org.rbmain.ui.ChatsWidgetConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

org.rbmain.ui.ContactsWidgetConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

ir.resaneh1.iptv.appUpdate.UpdateActivity

org.rbmain.ui.IntroActivity

org.rbmain.messenger.OpenChatReceiver

ir.appp.vod.ui.activity.videoPlayer.VodPlayerActivity

org.rbmain.ui.PopupNotificationActivity

org.rbmain.messenger.GoogleVoiceClientActivity

com.google.android.voicesearch.SEND_MESSAGE_TO_CONTACTS

org.rbmain.ui.VoIPPermissionActivity

org.rbmain.ui.VoIPFeedbackActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.journeyapps.barcodescanner.CaptureActivity

org.rbmain.messenger.GcmPushListenerService

com.google.firebase.MESSAGING_EVENT

androidMessenger.asemannotification.AsemanNotificationService

com.google.android.gms.measurement.AppMeasurementService

org.rbmain.messenger.AuthenticatorService

android.accounts.AccountAuthenticator

org.rbmain.messenger.ContactsSyncAdapterService

android.content.SyncAdapter

org.rbmain.messenger.KeepAliveJob

org.rbmain.messenger.BringAppForegroundService

org.rbmain.messenger.NotificationsService

org.rbmain.messenger.NotificationRepeat

org.rbmain.messenger.VideoEncodingService

org.rbmain.messenger.ImportingService

org.rbmain.messenger.LocationSharingService

org.rbmain.messenger.GoogleVoiceClientService

org.rbmain.messenger.MusicPlayerService

org.rbmain.messenger.MusicBrowserService

android.media.browse.MediaBrowserService

org.rbmain.messenger.voip.RubikaConnectionService

android.telecom.ConnectionService

org.rbmain.messenger.ChatsWidgetService

org.rbmain.messenger.ContactsWidgetService

ir.appp.vod.util.DownloadService

org.rbmain.messenger.voip.VoIPService

ir.resaneh1.iptv.musicplayer.NewMusicPlayerService

org.rbmain.messenger.WearDataLayerListenerService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

androidx.sharetarget.ChooserTargetServiceCompat

android.service.chooser.ChooserTargetService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

androidx.room.MultiInstanceInvalidationService

com.google.android.gms.measurement.AppMeasurementReceiver

org.rbmain.messenger.AutoMessageHeardReceiver

org.rbmain.messenger.ACTION_MESSAGE_HEARD

org.rbmain.messenger.NotificationsDisabledReceiver

android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED

org.rbmain.messenger.AutoMessageReplyReceiver

org.rbmain.messenger.ACTION_MESSAGE_REPLY

org.rbmain.messenger.SmsReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

org.rbmain.messenger.CallReceiver

android.intent.action.PHONE_STATE

org.rbmain.messenger.MusicPlayerReceiver

org.rbmain.android.musicplayer.close org.rbmain.android.musicplayer.pause org.rbmain.android.musicplayer.next org.rbmain.android.musicplayer.play org.rbmain.android.musicplayer.previous android.intent.action.MEDIA_BUTTON android.media.AUDIO_BECOMING_NOISY

org.rbmain.messenger.voip.VoIPMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

org.rbmain.messenger.AppStartReceiver

org.rbmain.start android.intent.action.BOOT_COMPLETED

org.rbmain.messenger.RefererReceiver

com.android.vending.INSTALL_REFERRER

org.rbmain.messenger.WearReplyReceiver

org.rbmain.messenger.StopLiveLocationReceiver

org.rbmain.messenger.PopupReplyReceiver

org.rbmain.messenger.NotificationCallbackReceiver

org.rbmain.messenger.ShareBroadcastReceiver

org.rbmain.messenger.CustomTabsCopyReceiver

org.rbmain.messenger.NotificationDismissReceiver

org.rbmain.messenger.voip.VoIPActionsReceiver

org.rbmain.messenger.ChatsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

org.rbmain.messenger.ContactsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

Rubika-4.0.4(www.farsroid.com).apk

Permissions

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.INSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.MANAGE_OWN_CALLS

android.permission.USE_FULL_SCREEN_INTENT

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.WRITE_EXTERNAL_STORAGE