geap-mobile[.]rar | Triage™

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

resource
unpack001/geap-mobile/apk/Geap-atualizacao.apk

geap-mobile.rar

SHA256 ae25333b37376a5fe48ee2d8ef9527f6b9dc3fdb7b10a3f68cccf384dc6c6dfc
MD5 358f11c4ed0cc7d5362451c925c8ea9d
SHA1 7c2b0c02811ef8afe893766eba8d815c994376b8
SHA512 44b4650605be8a0977231d870bc7015aa87ac7f648ff8346ef5b1dd5899f503ecf35e7675861cfe89e2587bdf1c39fe74978c8ad99866adf28ff9fbd557eba24
SSDEEP 196608:cr3j8dcqQ9pe9Esyo/hr3G+B8Cgft3oBmYSfNp:cr3jNqCpe9fD/M+ydaB+p
TLSH
T1AC6633F7C941EFD3407252A79AB0DF3D8B6AB9E0F7801426D131F291D4896F84B9AC49
MD5 SHA1 SHA512 SSDEEP TLSH

geap-mobile/README.txt

SHA256 39dc9260c10decae26c257926890e2dae8af15795c5b03c54a2b04664d93d08b
MD5 6ba9ffdda107a6a64fd7720b0c670111
SHA1 2bd50b4674b49412f49848b89e82f6f284a702b2
SHA512 ebad95fedd6f5fc29f5799c20d13696a19becb6a193d7d336f96f8ec99810021f3148bf59f4b6847f35c6b26dce511bd1d1cbcfff02e56f379b14389622538f0
TLSH
T1EC014630B2D98D0AFB62EB4D676C0D36D8677C04DCAE69E98188745273E8794116CE2A
MD5 SHA1 SHA512 TLSH

geap-mobile/apk/Geap-atualizacao.apk

SHA256 6a176c87f24dfdffa2e6382b3bfab97b1053e5c1aa5e00106b8376bedbb38fc5
MD5 f8649514cc3b3b8edb61515fd8c9d6b2
SHA1 ff3ca48e07be952e08c269cde67bda89c2bcbf20
SHA512 f1340d23ddb8484368b72017f1ad82cbf6e210ed08fb01c60b5a7859b73269375a796ad82979c9cb29ab1f0ce0aab52c5477025c50e6c4fb800c973f69d8fd9e
SSDEEP 196608:Wv5WpXavfTwdT55pdntv7dW2jSNB3bnxgWRkMk4:asp/555N7vasWRkMk4
TLSH
T1B776230BD82D4C25DEE235793D08035F39331CA99720C25EB57182BBFBE3A96D58E265
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

f2f5798be2af857501d886c6c2cc8cc0baf069285d70cf681622aed394892882

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.hyatbw.nondiabketdic

geap-mobile/assets/icon.png

SHA256 7332c3449cfb3ab69a54efebeea9a066dfe94e410e019c1c5bce8002d1e76c46
MD5 9d4f5618800880dd2f22e3e43ba350b3
SHA1 bad760102bf3fc5afa52c1fcf298a946af36bfc6
SHA512 c078a0b729293776dd4e383a40c83b29340feae1bd761d3fbc5cb1106ff2296ede785155e0dc277a9163edeaf5ee788c049cc9cf83f7b9f1ad7e7fb940d3eab8
SSDEEP 1536:dl2YiRCEgMFGc6Gha5Oq+FRUXY1h1U+/I:CbCKFthxRUMh3A
TLSH
T14233D0118B61E7D2EA6C0BB8A8974FE56FF250DD14EA33330272F54A9CE53123E6D085
MD5 SHA1 SHA512 SSDEEP TLSH

geap-mobile/index.html

SHA256 a2a0d6d0dac622570f5e804de7bd5a2ba9a91185a8e335c8470764e31096cc4d
MD5 cc788a6aba828fd08ea9058ba83eb6cf
SHA1 196c665f16a3cff52f837926ae6e7c1f44c55d19
SHA512 0ec746a6bab0f9daeb036944cb46cc28efbd04f644f965a2cd51b441413b5e867661c4f6e4911970bef329560194f7114d63257655ee8885a8c7deb5bbfc7a44
SSDEEP 384:ntfDLyY/TlKN/yySeXiJyM/lN1e4mQGYFHgLkQ2yngStCbnVn/JMNa2yr2jIL:nBDLyYLlKN/OeXGLI4wCnMzq
TLSH
T16EF2513162F110267163D5D27A61178F2AA2E90BD90B8206B6EC27A5CFC7FD3DD6325C
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

geap-mobile.rar

geap-mobile/README.txt

geap-mobile/apk/Geap-atualizacao.apk

File Signature issue

com.hyatbw.nondiabketdic.PoufsActivity

com.hyatbw.nondiabketdic.EnthroniseActivity

com.hyatbw.nondiabketdic.IgnorantlyService

com.hyatbw.nondiabketdic.MutantReceiver

com.hyatbw.nondiabketdic.EmolumentalReceiver

com.hyatbw.nondiabketdic.WeakenedReceiver

geap-mobile/assets/icon.png

geap-mobile/index.html

Sharing

General

Malware Config

Signatures

File Explorer

geap-mobile.rar

geap-mobile/README.txt

geap-mobile/apk/Geap-atualizacao.apk

File Signature issue

com.hyatbw.nondiabketdic.PoufsActivity

com.hyatbw.nondiabketdic.EnthroniseActivity

com.hyatbw.nondiabketdic.IgnorantlyService

com.hyatbw.nondiabketdic.MutantReceiver

com.hyatbw.nondiabketdic.EmolumentalReceiver

com.hyatbw.nondiabketdic.WeakenedReceiver

geap-mobile/assets/icon.png

geap-mobile/index.html