ggfx634380[.]apk | Triage™

General

Target
ggfx634380.apk
Size 6.6MB
Sample260727-mapq7aad56
SHA256 f45c1bb5a0ba998a7dfa988cda1ac01a15d26985cea3fc9adc3d5203cca2ce8d
MD5 8036916b8a8715c599392281d1f94bf2
SHA1 62385b711c96437e9e5f3aae57c8d62f733d9a35
SHA512 3438d8852c18cd4b945114f05b5538887629f8cd7fd88ef2a7a89c4884fe759d7fb659cf83c014845a00d926ddacec94e0d53e26334279bd170d6df2869e0ab9
SSDEEP 196608:OaLFaXBrAdaijXVEH54R5/SbTH3YB+E25WalYLn:OaLFRjFEH5G/uz3u+EkYLn
TLSH
T1C2662329EAEEF826D037D1769339864364C4805C9A1CFA378636B94CCDE7C80D74AD9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
ggfx634380.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ggfx634380.apk

File Explorer

ggfx634380.apk

.apk 6.6MB

ggfx634380.apk

SHA256 f45c1bb5a0ba998a7dfa988cda1ac01a15d26985cea3fc9adc3d5203cca2ce8d
MD5 8036916b8a8715c599392281d1f94bf2
SHA1 62385b711c96437e9e5f3aae57c8d62f733d9a35
SHA512 3438d8852c18cd4b945114f05b5538887629f8cd7fd88ef2a7a89c4884fe759d7fb659cf83c014845a00d926ddacec94e0d53e26334279bd170d6df2869e0ab9
SSDEEP 196608:OaLFaXBrAdaijXVEH54R5/SbTH3YB+E25WalYLn:OaLFRjFEH5G/uz3u+EkYLn
TLSH
T1C2662329EAEEF826D037D1769339864364C4805C9A1CFA378636B94CCDE7C80D74AD9D
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm arch:arm64 arch:x86 arch:x64

Codesign digest Mismatch

File was altered after it was signed.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

3fd04242a059d627444681aba964aaaf33c14d8dc33659953c02538c1bde067b

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=ttll,OU=tl1785145240602,O=tl1785145240602,L=hongkong,ST=hongkong,C=hongkong

Chains

Jan 1, 0001

com.nryuvxtmjwgftjyhlsmum.xcapnomp.aqkmcsegwqe

Android Permissions

ggfx634380.apk

Permissions

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_MTK_MMHW

android.permission.GET_TASKS

android.permission.GET_PACKAGE_SIZE

android.permission.BATTERY_STATS

android.permission.RESTART_PACKAGES

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.gms.permission.AD_ID

ggfx634380.apk

File Signature issue

com.e4a.runtime.android.StartActivity

com.e4a.runtime.android.mainActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwEntryActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexSearchActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexDetailActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwCommunityActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwCommunityDetailActivity

com.moonbeam.treasurebox.hlw.ui.activity.PortraitPlayerActivity

com.e4a.runtime.components.impl.android.每日签到类库.SignActivity

com.e4a.runtime.components.impl.android.每日签到类库.WithdrawActivity

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

ggfx634380.apk

File Signature issue

com.e4a.runtime.android.StartActivity

com.e4a.runtime.android.mainActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwEntryActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexSearchActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwIndexDetailActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwCommunityActivity

com.moonbeam.treasurebox.hlw.ui.activity.HlwCommunityDetailActivity

com.moonbeam.treasurebox.hlw.ui.activity.PortraitPlayerActivity

com.e4a.runtime.components.impl.android.每日签到类库.SignActivity

com.e4a.runtime.components.impl.android.每日签到类库.WithdrawActivity

android.support.v4.content.FileProvider

Android Permissions

ggfx634380.apk