MAX[.]apk | Triage™

Resubmissions

31/07/2026, 16:47

260731-valnjacj41

31/07/2026, 16:19

260731-tsneeabn5z8

Sharing

Copy URL Twitter E-mail

General

Target
MAX.apk
Size 127.0MB
Sample260731-valnjacj41
SHA256 b24f77ca8a8065b078962f3ca80db4e0484b0561c44cb0e6d120f6ae8dfdd727
MD5 ec9d6d28aff711009b6d9aa34d2c6bf9
SHA1 11db63b7385516ef5d1461e945393793768abd00
SHA512 7f7a2738ed5188815def05f342ce65c6d62dd0f9ff8b9207bed068d1584296f6ae9518cd9cbf9ad5bc14a9a9589618f8992f148808cec2dbd3f062ac38e015aa
SSDEEP 3145728:dJ+VWxww8LCIL5QeyYYbKu14ii7uUH9iD5:doVYKf5H3U
TLSH
T18358F102F60A0479E9E6B8B4C24F9172F6253C58837191EB6F45FB147A776D0AF3A780
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by NFC services to bind with the system. Allows apps to interact with NFC hardware.	android.permission.BIND_NFC_SERVICE
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE
Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications.	android.permission.BIND_TELECOM_CONNECTION_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
MAX.apk

File Explorer

MAX.apk

.apk 127.0MB

MAX.apk

SHA256 b24f77ca8a8065b078962f3ca80db4e0484b0561c44cb0e6d120f6ae8dfdd727
MD5 ec9d6d28aff711009b6d9aa34d2c6bf9
SHA1 11db63b7385516ef5d1461e945393793768abd00
SHA512 7f7a2738ed5188815def05f342ce65c6d62dd0f9ff8b9207bed068d1584296f6ae9518cd9cbf9ad5bc14a9a9589618f8992f148808cec2dbd3f062ac38e015aa
SSDEEP 3145728:dJ+VWxww8LCIL5QeyYYbKu14ii7uUH9iD5:doVYKf5H3U
TLSH
T18358F102F60A0479E9E6B8B4C24F9172F6253C58837191EB6F45FB147A776D0AF3A780
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

422feac421f9cd21f1e85126a6270636298a1912c6173e583a0d3870f6c15707

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Max Messenger,OU=COMMUNICATION PLATFORM,O=LLC COMMUNICATION PLATFORM,L=Moscow,ST=Moscow,C=RU

ru.oneme.app

android.permission.USE_FULL_SCREEN_INTENT android.permission.POST_NOTIFICATIONS android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.BLUETOOTH android.permission.BLUETOOTH_CONNECT android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.CAMERA android.permission.READ_EXTERNAL_STORAGE android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.VIBRATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.REQUEST_INSTALL_PACKAGES android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.RECORD_AUDIO android.permission.WAKE_LOCK android.permission.MODIFY_AUDIO_SETTINGS android.permission.FOREGROUND_SERVICE android.permission.USE_BIOMETRIC com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE android.permission.WRITE_EXTERNAL_STORAGE android.permission.NFC android.permission.VIBRATE android.permission.MANAGE_OWN_CALLS android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.FOREGROUND_SERVICE_PHONE_CALL android.permission.FOREGROUND_SERVICE_MICROPHONE android.permission.FOREGROUND_SERVICE_CAMERA android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.USE_FINGERPRINT com.google.android.gms.permission.AD_ID com.google.android.c2dm.permission.RECEIVE android.permission.CHANGE_NETWORK_STATE ru.oneme.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

one.me.android.utils.MultiaccountFeature$ToggleService

one.me.android.concurrent.SingleCoreFeature$ToggleService

one.me.android.concurrent.WatchdogFeature$ToggleService

one.me.android.concurrent.UseSystemThreadPoolQueueFeature$ToggleService

one.me.android.fresco.FrescoExecutorFeature$ToggleService

androidx.appcompat.app.AppLocalesMetadataHolderService

ru.ok.tamtam.android.services.RootNotificationService

one.me.webapp.util.WebAppNfcService

android.nfc.cardemulation.action.HOST_APDU_SERVICE

androidx.work.impl.foreground.SystemForegroundService

one.me.calls.impl.service.CallServiceImpl

android.telecom.ConnectionService

one.me.calls.impl.service.telecom.TelecomCallService

android.telecom.ConnectionService

one.me.calls.impl.service.VoIpCallService

one.me.calls.impl.service.CallScreenShareService

one.me.background.wake.BackgroundListenService

one.me.android.media.service.OneMeMediaSessionService

androidx.media3.session.MediaSessionService

one.me.sdk.vendor.push.FcmMessagingService

com.google.firebase.MESSAGING_EVENT

one.me.sdk.vendor.rustore.push.RustoreMessagingService

ru.rustore.sdk.pushclient.MESSAGING_EVENT

androidx.camera.core.impl.MetadataHolderService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

one.video.calls.sdk.upload.FileUploadService

ru.ok.android.externcalls.analytics.internal.upload.UploadService

ru.ok.android.onelog.action.UPLOAD

ru.ok.android.onelog.UploadService

ru.ok.android.onelog.action.UPLOAD

ru.rustore.sdk.metrics.internal.presentation.SendMetricsEventJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Android Permissions

MAX.apk

Permissions

android.permission.USE_FULL_SCREEN_INTENT

android.permission.POST_NOTIFICATIONS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.USE_BIOMETRIC

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.NFC

android.permission.VIBRATE

android.permission.MANAGE_OWN_CALLS

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_PHONE_CALL

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.USE_FINGERPRINT

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

MAX.apk

File Signature issue

one.me.android.MainActivity

one.me.android.deeplink.LinkInterceptorActivity

one.me.android.calls.CallNotifierFixActivity

one.me.transparent.TransparentActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

ru.rustore.sdk.activitylauncher.RuStoreActivityLauncher

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

one.me.android.utils.MultiaccountFeature$ToggleService

one.me.android.concurrent.SingleCoreFeature$ToggleService

one.me.android.concurrent.WatchdogFeature$ToggleService

one.me.android.concurrent.UseSystemThreadPoolQueueFeature$ToggleService

one.me.android.fresco.FrescoExecutorFeature$ToggleService

androidx.appcompat.app.AppLocalesMetadataHolderService

ru.ok.tamtam.android.services.RootNotificationService

one.me.webapp.util.WebAppNfcService

androidx.work.impl.foreground.SystemForegroundService

one.me.calls.impl.service.CallServiceImpl

one.me.calls.impl.service.telecom.TelecomCallService

one.me.calls.impl.service.VoIpCallService

one.me.calls.impl.service.CallScreenShareService

one.me.background.wake.BackgroundListenService

one.me.android.media.service.OneMeMediaSessionService

one.me.sdk.vendor.push.FcmMessagingService

one.me.sdk.vendor.rustore.push.RustoreMessagingService

androidx.camera.core.impl.MetadataHolderService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

one.video.calls.sdk.upload.FileUploadService

ru.ok.android.externcalls.analytics.internal.upload.UploadService

ru.ok.android.onelog.UploadService

ru.rustore.sdk.metrics.internal.presentation.SendMetricsEventJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

one.me.android.calls.CallNotifierBroadcastReceiver

one.me.android.initialization.BootCompletedReceiver

one.me.background.wake.BackgroundCheckReceiver

one.me.background.wake.BackgroundWakeBootReceiver

ru.rustore.sdk.pushclient.internal.arbiter.ArbiterBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

androidx.startup.InitializationProvider

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

one.me.android.notifications.NotificationsImagesProvider

ru.trace_flow.dps.internal.DpsInitProvider

one.me.transparent.AppInitProvider

ru.rustore.sdk.pushclient.provider.RuStorePushClientInitProvider

com.vk.push.core.deviceid.contentprovider.VkpnsDeviceIdContentProvider

ru.ok.tracer.startup.InitializationProvider

ru.ok.android.commons.app.ApplicationProvider

Android Permissions

MAX.apk