LuckyPatchers[.]com_Official_Installer_12[.]10[.]4[.]apk

General

Target
LuckyPatchers.com_Official_Installer_12.10.4.apk
Size 10.7MB
Sample260727-qbl88sshla
SHA256 d9e8e6bc2df1863b3d9be74f77f5fe79d30647248b0a0271c658c79cadeebb09
MD5 f9a0a3501f16fbcaca78e4b8541c91c2
SHA1 18e53482d2a975e7c1165c4d6dcd54b430da010e
SHA512 26337c7ec605b83aed2002dd021e1831d1286c002b20ef61977602a6f41339b5880df5f0412344e205bb1db9132c5fdc0c0154ee940e99a4496fd3f0dd716b74
SSDEEP 196608:8eTwsB3eipjUw2Lh/rJbqkKXjdeQuJ0SIT5zkn/DX7d4SLgb91v:8eT/OMUwmhqbXjd7Umo/DX7d4SLYH
TLSH
T13EB6CFEF36DC252AC83441B3C88DB57966974D7A5F43DA822C08372C34B36F45B49AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
LuckyPatchers.com_Official_Installer_12.10.4.apk

File Explorer

LuckyPatchers.com_Official_Installer_12.10.4.apk

.apk 10.7MB

LuckyPatchers.com_Official_Installer_12.10.4.apk

SHA256 d9e8e6bc2df1863b3d9be74f77f5fe79d30647248b0a0271c658c79cadeebb09
MD5 f9a0a3501f16fbcaca78e4b8541c91c2
SHA1 18e53482d2a975e7c1165c4d6dcd54b430da010e
SHA512 26337c7ec605b83aed2002dd021e1831d1286c002b20ef61977602a6f41339b5880df5f0412344e205bb1db9132c5fdc0c0154ee940e99a4496fd3f0dd716b74
SSDEEP 196608:8eTwsB3eipjUw2Lh/rJbqkKXjdeQuJ0SIT5zkn/DX7d4SLgb91v:8eT/OMUwmhqbXjd7Umo/DX7d4SLYH
TLSH
T13EB6CFEF36DC252AC83441B3C88DB57966974D7A5F43DA822C08372C34B36F45B49AE9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

f842289ea685004995b15575c8172a85bb268778b1448577d05208a701d7d406

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

ru.aaaaabah.installer

ru.aaaaabah.installer.PackageChangeReceiver

android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_CHANGED

ru.aaaaabah.installer.OnAlarmReceiver

com.ui.OnAlarmReceiver.ACTION_WIDGET_RECEIVER

ru.aaaaabah.installer.BinderBootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MEDIA_SCANNER_FINISHED android.intent.action.MEDIA_SCANNER_STARTED android.intent.action.MEDIA_MOUNTED android.intent.action.MEDIA_EJECT android.intent.action.MEDIA_UNMOUNTED android.intent.action.MEDIA_REMOVED

ru.aaaaabah.installer.OnBootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE android.intent.action.UMS_DISCONNECTED android.intent.action.POWER_DISCONNECTED android.intent.action.MY_PACKAGE_REPLACED

com.widgets.Widget5

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget5.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget5.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget4

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget4.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget4.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget1

android.appwidget.action.APPWIDGET_UPDATE

com.widgets.Widget3

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget3.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget3.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget2

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget2.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget2.ACTION_WIDGET_RECEIVER_Updater

Android Permissions

LuckyPatchers.com_Official_Installer_12.10.4.apk

Permissions

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_SUPERUSER

android.permission.INTERNET

android.permission.VIBRATE

com.android.vending.CHECK_LICENSE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.READ_EXTERNAL_STORAGE

com.huawei.permission.external_app_settings.USE_COMPONENT

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.Ad_ID

com.android.launcher.permission.INSTALL_SHORTCUT

com.google.android.gms.permission.AD_ID

LuckyPatchers.com_Official_Installer_12.10.4.apk

File Signature issue

ru.aaaaabah.installer.MainActivity

ru.aaaaabah.installer.SetPrefs

ru.aaaaabah.installer.BinderActivity

com.google.android.finsky.billing.iab.BuyActivity

com.widgets.WidgetConfigureActivity1

com.widgets.WidgetConfigureActivity2

ru.aaaaabah.installer.NotificationService

ru.aaaaabah.installer.PatchService

com.google.android.finsky.billing.iab.InAppBillingService

com.google.android.finsky.services.LicensingService

com.services.TestService

com.services.MyService

ru.aaaaabah.installer.PackageChangeReceiver

ru.aaaaabah.installer.OnAlarmReceiver

ru.aaaaabah.installer.BinderBootReceiver

ru.aaaaabah.installer.OnBootReceiver

com.widgets.Widget5

com.widgets.Widget4

com.widgets.Widget1

com.widgets.Widget3

com.widgets.Widget2

androidx.core.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

LuckyPatchers.com_Official_Installer_12.10.4.apk

File Signature issue

ru.aaaaabah.installer.MainActivity

ru.aaaaabah.installer.SetPrefs

ru.aaaaabah.installer.BinderActivity

com.google.android.finsky.billing.iab.BuyActivity

com.widgets.WidgetConfigureActivity1

com.widgets.WidgetConfigureActivity2

ru.aaaaabah.installer.NotificationService

ru.aaaaabah.installer.PatchService

com.google.android.finsky.billing.iab.InAppBillingService

com.google.android.finsky.services.LicensingService

com.services.TestService

com.services.MyService

ru.aaaaabah.installer.PackageChangeReceiver

ru.aaaaabah.installer.OnAlarmReceiver

ru.aaaaabah.installer.BinderBootReceiver

ru.aaaaabah.installer.OnBootReceiver

com.widgets.Widget5

com.widgets.Widget4

com.widgets.Widget1

com.widgets.Widget3

com.widgets.Widget2

androidx.core.content.FileProvider

Android Permissions

LuckyPatchers.com_Official_Installer_12.10.4.apk