vamino[.]apk | Triage™

General

Target
vamino.apk
Size 4.9MB
Sample260723-prdrcscn4x
SHA256 76b55c5fa1103e7d2efef1cff870aa0ca09342a2a2df211cf92a6333d04f3271
MD5 b538f4ec327d2d89d69c8ad36829867b
SHA1 a92e413c9934459260767bd68f3ab75905cc2276
SHA512 b9de83481146f35ad74e691db16da2aa8772adc2f7ef33f1afa7efca2a2c61de31783ab1af5b6f101c28c645508b2cbf8aaeef5f3446b5934be44ea1a3581ea8
SSDEEP 98304:VFjY7nJwONLigHjoA7g7RIo3Z4F8Cwlo/KrrD0b5nTmxtVksYNo:Tk7nSOtiooA7oRIPwglyLCg
TLSH
T16B36EF97FB49A96BC4F747B645365321124B8C268B43D7C35D18323C29BB6D07E8ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
vamino.apk

File Explorer

vamino.apk

.apk 4.9MB

vamino.apk

SHA256 76b55c5fa1103e7d2efef1cff870aa0ca09342a2a2df211cf92a6333d04f3271
MD5 b538f4ec327d2d89d69c8ad36829867b
SHA1 a92e413c9934459260767bd68f3ab75905cc2276
SHA512 b9de83481146f35ad74e691db16da2aa8772adc2f7ef33f1afa7efca2a2c61de31783ab1af5b6f101c28c645508b2cbf8aaeef5f3446b5934be44ea1a3581ea8
SSDEEP 98304:VFjY7nJwONLigHjoA7g7RIo3Z4F8Cwlo/KrrD0b5nTmxtVksYNo:Tk7nSOtiooA7oRIPwglyLCg
TLSH
T16B36EF97FB49A96BC4F747B645365321124B8C268B43D7C35D18323C29BB6D07E8ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

50d73165ed78a124c6075b745cd89060303d52e2e73b6ee9cbc70ea9b6f891ac

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=editor

neop.fqmrxy.dndawfc

neop.fqmrxy.dndawfc.Splasher

neop.fqmrxy.dndawfc.HomeSIM

android.intent.action.MAIN

neop.fqmrxy.dndawfc.HomeWallp

android.intent.action.MAIN

neop.fqmrxy.dndawfc.HomeSmsung

android.intent.action.MAIN

neop.fqmrxy.dndawfc.PlayS

android.intent.action.MAIN

neop.fqmrxy.dndawfc.xhaxfntbkiamslldees

neop.fqmrxy.dndawfc.umlnfktyzizxxxldli

neop.fqmrxy.dndawfc.sourbdwizeinvqmr

neop.fqmrxy.dndawfc.znirurangyxlzb

neop.fqmrxy.dndawfc.zjbmthfxeamdqmqap

neop.fqmrxy.dndawfc.onqjecnijmeii

neop.fqmrxy.dndawfc.irykpxhguzidx

neop.fqmrxy.dndawfc.speakit

neop.fqmrxy.dndawfc.ivajqhzlouefw

neop.fqmrxy.dndawfc.izvabzhuhdhu

neop.fqmrxy.dndawfc.zfdzrcgfpavxluhnl

neop.fqmrxy.dndawfc.Toastit

neop.fqmrxy.dndawfc.dofnwdtzgfpwdaixlz

neop.fqmrxy.dndawfc.RequestAdm

neop.fqmrxy.dndawfc.Inputfjwisztexi

neop.fqmrxy.dndawfc.fghgpptlu

neop.fqmrxy.dndawfc.ivamcutunega

neop.fqmrxy.dndawfc.owujqyalxllkvllvjyg

neop.fqmrxy.dndawfc.ysnhwcnvlrdkvosinz

neop.fqmrxy.dndawfc.qbuydiqanv

neop.fqmrxy.dndawfc.fjwisztexi

neop.fqmrxy.dndawfc.oluqxjmzipcpectj

neop.fqmrxy.dndawfc.tofront

neop.fqmrxy.dndawfc.fsmsidokw

neop.fqmrxy.dndawfc.helndploajqe

neop.fqmrxy.dndawfc.CallBacker

neop.fqmrxy.dndawfc.ggxqnqivqzspgcoqkqy

neop.fqmrxy.dndawfc.alarme

AppAlarm

neop.fqmrxy.dndawfc.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

neop.fqmrxy.dndawfc.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

vamino.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.READ_SMS

neop.fqmrxy.dndawfc.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

vamino.apk

File Signature issue

neop.fqmrxy.dndawfc.Splasher

neop.fqmrxy.dndawfc.HomeSIM

neop.fqmrxy.dndawfc.HomeWallp

neop.fqmrxy.dndawfc.HomeSmsung

neop.fqmrxy.dndawfc.PlayS

neop.fqmrxy.dndawfc.xhaxfntbkiamslldees

neop.fqmrxy.dndawfc.umlnfktyzizxxxldli

neop.fqmrxy.dndawfc.sourbdwizeinvqmr

neop.fqmrxy.dndawfc.znirurangyxlzb

neop.fqmrxy.dndawfc.zjbmthfxeamdqmqap

neop.fqmrxy.dndawfc.onqjecnijmeii

neop.fqmrxy.dndawfc.irykpxhguzidx

neop.fqmrxy.dndawfc.speakit

neop.fqmrxy.dndawfc.ivajqhzlouefw

neop.fqmrxy.dndawfc.izvabzhuhdhu

neop.fqmrxy.dndawfc.zfdzrcgfpavxluhnl

neop.fqmrxy.dndawfc.Toastit

neop.fqmrxy.dndawfc.dofnwdtzgfpwdaixlz

neop.fqmrxy.dndawfc.RequestAdm

neop.fqmrxy.dndawfc.Inputfjwisztexi

neop.fqmrxy.dndawfc.fghgpptlu

neop.fqmrxy.dndawfc.ivamcutunega

neop.fqmrxy.dndawfc.owujqyalxllkvllvjyg

neop.fqmrxy.dndawfc.ysnhwcnvlrdkvosinz

neop.fqmrxy.dndawfc.qbuydiqanv

neop.fqmrxy.dndawfc.fjwisztexi

neop.fqmrxy.dndawfc.oluqxjmzipcpectj

neop.fqmrxy.dndawfc.tofront

neop.fqmrxy.dndawfc.fsmsidokw

neop.fqmrxy.dndawfc.helndploajqe

neop.fqmrxy.dndawfc.CallBacker

neop.fqmrxy.dndawfc.ggxqnqivqzspgcoqkqy

neop.fqmrxy.dndawfc.yqfxmukluugjpiewiko

neop.fqmrxy.dndawfc.sqvqiuehqojes

neop.fqmrxy.dndawfc.xjfpowuqcthnug

neop.fqmrxy.dndawfc.xjdqqhdzj

neop.fqmrxy.dndawfc.shwltwxrofxsm

neop.fqmrxy.dndawfc.oqygawqlytb

neop.fqmrxy.dndawfc.gmrzeterewinb

neop.fqmrxy.dndawfc.xgdzpphmy

neop.fqmrxy.dndawfc.gbesamuirhuhqqjwzg

neop.fqmrxy.dndawfc.minserv

neop.fqmrxy.dndawfc.DownloadForegroundService

neop.fqmrxy.dndawfc.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

neop.fqmrxy.dndawfc.alarme

neop.fqmrxy.dndawfc.BootReceiver

neop.fqmrxy.dndawfc.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

vamino.apk