RionLock[.]apk | Triage™

Resubmissions

07/08/2026, 16:10

260807-tms3ps11by

07/08/2026, 16:09

260807-tl51wazaje6

07/08/2026, 15:59

260807-te5rja1zas6

Sharing

Copy URL Twitter E-mail

General

Target
RionLock.apk
Size 11.2MB
Sample260807-tms3ps11by
SHA256 ff8772b74d7ae017fbafd8c0ffedaa06e9d1b922090d0b86904c28797b95893d
MD5 d161cbe4a2febfa2a672615bdd05699b
SHA1 458eb92c42ffdf4a1092b70d9655971b616eafb2
SHA512 b0b47fdfc430a3d6b182c29d132ad3ed1783aa951326b7fb3134c029f6603bf67c1288d8680edda00b4645807fd556fdb4f9f6395329202b17dc0727a494b3d0
SSDEEP 196608:MSrXSXRMnlI9jzyfylxuWlrvawRVU1RoGfcrptzz/HdHB:OXwejzyfylxhqnbMdz/Hv
TLSH
T169C612CAF7D8A91FC83B5072C5BE12B151474C068A83DF836D54760C68BBAD45F9ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
RionLock.apk

File Explorer

RionLock.apk

.apk 11.2MB

RionLock.apk

SHA256 ff8772b74d7ae017fbafd8c0ffedaa06e9d1b922090d0b86904c28797b95893d
MD5 d161cbe4a2febfa2a672615bdd05699b
SHA1 458eb92c42ffdf4a1092b70d9655971b616eafb2
SHA512 b0b47fdfc430a3d6b182c29d132ad3ed1783aa951326b7fb3134c029f6603bf67c1288d8680edda00b4645807fd556fdb4f9f6395329202b17dc0727a494b3d0
SSDEEP 196608:MSrXSXRMnlI9jzyfylxuWlrvawRVU1RoGfcrptzz/HdHB:OXwejzyfylxhqnbMdz/Hv
TLSH
T169C612CAF7D8A91FC83B5072C5BE12B151474C068A83DF836D54760C68BBAD45F9ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

808ad79fff482c770c04ada9ab6291b757531e0d2559d0345b79c195f5ca1bb1

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.rionlock.app

Android Permissions

RionLock.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

android.permission.KILL_BACKGROUND_PROCESSES

com.rionlock.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

RionLock.apk

File Signature issue

com.rionlock.app.MainActivity

com.rionlock.app.UnlockActivity

com.rionlock.app.services.RionLockAccessibilityService

com.rionlock.app.services.OverlayService

com.rionlock.app.receivers.BootReceiver

com.rionlock.app.receivers.UnlockNotificationReceiver

com.rionlock.app.receivers.RionDeviceAdminReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider