dexopt[.]sssgf[.]apk

General

Target
dexopt.sssgf.apk
Size 6.9MB
Sample260803-krt15ascnc
SHA256 3269a0116ce0915afdd32e8d87b05ae9f5c00fcf0a6729add39a6a87aaf30089
MD5 b7555d45ec31adc23ea13ff173926251
SHA1 eb53b2e264c2eb9561b75ece770a259d55319820
SHA512 b70075402ba6d11f8b2dfe059acf1320389d8a995ed722f699679017724276f99daf53f13bbcdc441082fa35cbfdcf17d2470ad22e6346ccbb8767467ceb2c7e
SSDEEP 196608:ymztyyGUWebdmCr+0B7ed2HoCdKyOG9cw:y0YUWepr+Ac2H0yOG9cw
TLSH
T11076E08AFFC6989AC0F35B33CD7591B541475C2647838A836D58B26D187B6F08E4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
dexopt.sssgf.apk

File Explorer

dexopt.sssgf.apk

.apk 6.9MB

dexopt.sssgf.apk

SHA256 3269a0116ce0915afdd32e8d87b05ae9f5c00fcf0a6729add39a6a87aaf30089
MD5 b7555d45ec31adc23ea13ff173926251
SHA1 eb53b2e264c2eb9561b75ece770a259d55319820
SHA512 b70075402ba6d11f8b2dfe059acf1320389d8a995ed722f699679017724276f99daf53f13bbcdc441082fa35cbfdcf17d2470ad22e6346ccbb8767467ceb2c7e
SSDEEP 196608:ymztyyGUWebdmCr+0B7ed2HoCdKyOG9cw:y0YUWepr+Ac2H0yOG9cw
TLSH
T11076E08AFFC6989AC0F35B33CD7591B541475C2647838A836D58B26D187B6F08E4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

da8b896ba76f5e43c94b9d29f83a86ebc9ea8f02357a349abf2af323c11d441e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

O=j4velin development

com.nmz.nmz

com.nmz.nmz.ServiceRestartReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED android.intent.action.USER_PRESENT com.nmz.nmz.RESTART_SERVICE com.nmz.nmz.DOZE_RESISTANT_ALARM

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

dexopt.sssgf.apk

Permissions

android.permission.INTERNET

android.permission.SCHEDULE_EXACT_ALARM

com.nmz.nmz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.USE_EXACT_ALARM

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.CHANGE_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

dexopt.sssgf.apk

File Signature issue

com.nmz.nmz.MainActivity

com.nmz.nmz.LoginActivity

com.nmz.nmz.AccessService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.nmz.nmz.ServiceRestartReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

dexopt.sssgf.apk

File Signature issue

com.nmz.nmz.MainActivity

com.nmz.nmz.LoginActivity

com.nmz.nmz.AccessService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.nmz.nmz.ServiceRestartReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

dexopt.sssgf.apk