v3[.]apk | Triage™

General

Target
v3.apk
Size 10.0MB
Sample260804-pd7saawtes
SHA256 cc67f44ee2d0a53cf1551e6493066b330c6b1b3746bc3c2ea2095560f7e23f60
MD5 05a208d6b848bb49247c0f91731004ef
SHA1 7d4ff44d7bb6520371cb8ed9bc17547cf8e69635
SHA512 0c92a930eafe1bcdffa46b34384fa2d17a0ad2ecf762e23d341cffd9cca1e80fbd7f168c901cf6914456c038e9e86fc57389a16f43ba227cb7ff68c613b06052
SSDEEP 196608:Qh6GZDjbLYpkiqjsVmjV5L9uzjRUxOHAKbVJ63C6VUWshbS6CVibySU5:gbLcqjsVyn9uzljgZeqL
TLSH
T136B6018BFB48A96BC4F793B245B65362414B4C764B43D6C3A918723C18B76D03F1ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
v3.apk

File Explorer

v3.apk

.apk 10.0MB

v3.apk

SHA256 cc67f44ee2d0a53cf1551e6493066b330c6b1b3746bc3c2ea2095560f7e23f60
MD5 05a208d6b848bb49247c0f91731004ef
SHA1 7d4ff44d7bb6520371cb8ed9bc17547cf8e69635
SHA512 0c92a930eafe1bcdffa46b34384fa2d17a0ad2ecf762e23d341cffd9cca1e80fbd7f168c901cf6914456c038e9e86fc57389a16f43ba227cb7ff68c613b06052
SSDEEP 196608:Qh6GZDjbLYpkiqjsVmjV5L9uzjRUxOHAKbVJ63C6VUWshbS6CVibySU5:gbLcqjsVyn9uzljgZeqL
TLSH
T136B6018BFB48A96BC4F793B245B65362414B4C764B43D6C3A918723C18B76D03F1ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c1e222566c910e831fca18483e7a483333ab8f3402d09ea3542491f3d13b2e63

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=adminl61852,OU=adminl61852,O=adminl61852,L=adminl61852,ST=adminl61852,C=adminl61852

q9286.v1798.t0162.s4779

q9286.v1798.t0162.s4779.OQ2T3HXf

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.USER_PRESENT android.intent.action.MY_PACKAGE_REPLACED com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT

q9286.v1798.t0162.s4779.UbsHkXRY

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.TIME_TICK android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Android Permissions

v3.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

q9286.v1798.t0162.s4779.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

v3.apk

File Signature issue

q9286.v1798.t0162.s4779.iqutbj

q9286.v1798.t0162.s4779.oaygaymq

q9286.v1798.t0162.s4779.slkmrrldvpw

q9286.v1798.t0162.s4779.sneuo

q9286.v1798.t0162.s4779.vqfzpxl

q9286.v1798.t0162.s4779.axkwevjmxwlo

q9286.v1798.t0162.s4779.gocgzdvn

q9286.v1798.t0162.s4779.xyuyb

q9286.v1798.t0162.s4779.ebixsc

q9286.v1798.t0162.s4779.ltbcbhhcmvx

q9286.v1798.t0162.s4779.bphncpblg

q9286.v1798.t0162.s4779.liecakuz

q9286.v1798.t0162.s4779.erstol

q9286.v1798.t0162.s4779.ctmejnnpddur

q9286.v1798.t0162.s4779.nzxznpafm

q9286.v1798.t0162.s4779.vrekizg

q9286.v1798.t0162.s4779.auedsyeoezjm

q9286.v1798.t0162.s4779.vhxrwj

q9286.v1798.t0162.s4779.ryrxrgwcc

q9286.v1798.t0162.s4779.P80pqKNQ

q9286.v1798.t0162.s4779.vqodzwfflp

q9286.v1798.t0162.s4779.gccrlhdotwe

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

q9286.v1798.t0162.s4779.OQ2T3HXf

q9286.v1798.t0162.s4779.UbsHkXRY

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

v3.apk

File Signature issue

q9286.v1798.t0162.s4779.iqutbj

q9286.v1798.t0162.s4779.oaygaymq

q9286.v1798.t0162.s4779.slkmrrldvpw

q9286.v1798.t0162.s4779.sneuo

q9286.v1798.t0162.s4779.vqfzpxl

q9286.v1798.t0162.s4779.axkwevjmxwlo

q9286.v1798.t0162.s4779.gocgzdvn

q9286.v1798.t0162.s4779.xyuyb

q9286.v1798.t0162.s4779.ebixsc

q9286.v1798.t0162.s4779.ltbcbhhcmvx

q9286.v1798.t0162.s4779.bphncpblg

q9286.v1798.t0162.s4779.liecakuz

q9286.v1798.t0162.s4779.erstol

q9286.v1798.t0162.s4779.ctmejnnpddur

q9286.v1798.t0162.s4779.nzxznpafm

q9286.v1798.t0162.s4779.vrekizg

q9286.v1798.t0162.s4779.auedsyeoezjm

q9286.v1798.t0162.s4779.vhxrwj

q9286.v1798.t0162.s4779.ryrxrgwcc

q9286.v1798.t0162.s4779.P80pqKNQ

q9286.v1798.t0162.s4779.vqodzwfflp

q9286.v1798.t0162.s4779.gccrlhdotwe

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

q9286.v1798.t0162.s4779.OQ2T3HXf

q9286.v1798.t0162.s4779.UbsHkXRY

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

v3.apk