pixrevolution | PaniniCollectors[.]apk

Resubmissions

13/08/2026, 20:22

260813-y5v28sxtgy10

13/08/2026, 19:44

30/07/2026, 17:53

30/07/2026, 17:09

17/02/2026, 21:42

Sharing

Copy URL Twitter E-mail

General

Target
PaniniCollectors.apk
Size 8.5MB
Sample260730-wgnxxadb93
SHA256 5a8d4eabd009a75ecc04f3f06489d393f082f963b406d0d3e8acbea568281c5f
MD5 9e9e998cbc39334bb8681e91ebc180c9
SHA1 5c9a836f888265f9b048b13d33b87aafd9266f72
SHA512 879f0ff94c5c26e951bd005db73723faf3a4dbe37525b31bb4631f18462cfdf24d5e25a403ce9c3754cedf2a661d8a7e883ffe00e8bc3213f85397e47f0d2080
SSDEEP 196608:ocvhbp1qgj9mL7XrqEww/iihowYPeozPlAV4ypYFZk1O+L13la:bNfRj0HbqEww/FhvYPO+yGktR3o
TLSH
T1E7962246BBE89E1FCC3380364F5A523252499E2BC753C343D964361C387B6E54E897EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan pixrevolution

Malware Config

Signatures

Family: PixRevolution
PixRevolution is an Android banking trojan first seen in 2026.
trojan pixrevolution

Detects PixRevolution Trojan 1 IoCs

resource	yara_rule
static1/unpack001/update.apk	family_pixrevolution

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
PaniniCollectors.apk
unpack001/update.apk

File Explorer

PaniniCollectors.apk

.apk 8.5MB
update.apk

.apk 1.3MB

PaniniCollectors.apk

SHA256 5a8d4eabd009a75ecc04f3f06489d393f082f963b406d0d3e8acbea568281c5f
MD5 9e9e998cbc39334bb8681e91ebc180c9
SHA1 5c9a836f888265f9b048b13d33b87aafd9266f72
SHA512 879f0ff94c5c26e951bd005db73723faf3a4dbe37525b31bb4631f18462cfdf24d5e25a403ce9c3754cedf2a661d8a7e883ffe00e8bc3213f85397e47f0d2080
SSDEEP 196608:ocvhbp1qgj9mL7XrqEww/iihowYPeozPlAV4ypYFZk1O+L13la:bNfRj0HbqEww/FhvYPO+yGktR3o
TLSH
T1E7962246BBE89E1FCC3380364F5A523252499E2BC753C343D964361C387B6E54E897EA
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

756d7f504c7ee259db2273b45e1c947e44f4c617bd1ba70fb627d5d876c99d32

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Digital Services,OU=Innovation Lab,O=Pulse Tech,L=Cuiabá,ST=MT,C=BR

br.commercial.portal

update.apk

SHA256 b8fa21bbd5261f2308a168c1f43b197220c0d37bdda0c4a1464be085a9f85300
MD5 3e281b8cccc2a422175a24d2e10a8058
SHA1 818954d331ce35ccf8e542a2f361a8474478a8d6
SHA512 bde5abefea7ea9d69f96b306a30982ae264d8d447a2a5d2c6f9c8eacd0d134383f5abd5c0522109fdd33901da0df21989468b8de593b6031fae421ef350b6878
SSDEEP 24576:GENr5+LOy739Sw/uvDHMU4zgdcHRAV25agmjm7N9HsRQVrZ:GEiLOy7NSwGvDHMkdcx2gmq7N/tZ
TLSH
T1F0558B42FBE99E2ECC7340364F5A9735161A9D23C743C343D968361C68BB6E40E897E9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Detects PixRevolution Trojan
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

61fb37d36f8cdabc531d4dfbecf000f9fec1cfb0efe78ffb55f48969144b5d01

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Service Platform,OU=Backend Team,O=Lumen Tech,L=Maceió,ST=AL,C=BR

br.company.app

Android Permissions

PaniniCollectors.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

br.commercial.portal.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

PaniniCollectors.apk

File Signature issue

br.commercial.portal.MainActivity

br.commercial.portal.LuukReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

update.apk

File Signature issue

br.company.app.MainActivity

br.company.app.ScreenCaptureService

br.company.app.TCPForegroundService

br.company.app.InitialService

br.company.app.BootReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider