com.rimac.rimac_surrogas (1).apks
- SHA256 24892fdf1891837ae1d6622fa316063b144296af017902a19eb5cafb8af8fa2a
Overview
overview
7Static
static
6base.apk
android-9-x86
7base.apk
android-10-x64
7base.apk
android-11-x64
7split_conf...8a.jar
windows10-2004-x64
1split_conf...8a.jar
windows11-ltsc_2024-x64
1split_config.en.jar
windows10-2004-x64
1split_config.en.jar
windows11-ltsc_2024-x64
1split_config.es.jar
windows10-2004-x64
1split_config.es.jar
windows11-ltsc_2024-x64
1split_conf...pi.jar
windows10-2004-x64
1split_conf...pi.jar
windows11-ltsc_2024-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
base.apk
Resource
android-x86-arm-20260325-en
android-9-x86
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
base.apk
Resource
android-x64-20260325-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
base.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
split_config.arm64_v8a.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
split_config.arm64_v8a.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
split_config.en.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
split_config.en.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
split_config.es.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
split_config.es.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
split_config.xxhdpi.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
split_config.xxhdpi.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target com.rimac.rimac_surrogas (1).apks
- Size 78.8MB
- Sample260808-db2mps1yfx
- SHA256 24892fdf1891837ae1d6622fa316063b144296af017902a19eb5cafb8af8fa2a
- MD5 0d7727c8626ead40fc66f810f344bb2f
- SHA1 6b217fc7b6c8c7c55f0feafa727a1a0788e898f3
- SHA512 54517cf16a97071b839dd0cf0a4613a530f3c95e419f67df1903d68e96bb9380456e19e3bb8473d3b5390e8cba0816b3d3a2b3f71fd4822cfce61edc47ef69ee
- SSDEEP 1572864:TG9fQ/3mptOa0R69q+/wzVkjT3wNypXvW8tAFQFaFaFxz0FWFBFGFtPT/eTMFCFu:TGVQfMJ0RnrzVM3wKewA248/w83gDL2y
- TLSH T1B10833CD9AE70CE5E2969CCD47A5CBC24752E00F3D15C81EB46B83E82C1B315B4A97E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 10 IoCs
description ioc Required to be able to access the camera device. android.permission.CAMERA Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM - Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/split_config.arm64_v8a.apk unpack001/split_config.en.apk unpack001/split_config.es.apk unpack001/split_config.xxhdpi.apk - Untrusted Codesign Signers 4 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/split_config.arm64_v8a.apk unpack001/split_config.en.apk unpack001/split_config.es.apk unpack001/split_config.xxhdpi.apk
File Explorer
-
com.rimac.rimac_surrogas (1).apks.zip 78.8MB
-
base.apk.apk 70.4MB
-
split_config.arm64_v8a.apk.jar 25.7MB
-
split_config.en.apk.jar 100KB
-
split_config.es.apk.jar 60KB
-
split_config.xxhdpi.apk.jar 1.0MB
base.apk
- SHA256 db18d04340cda2157b5bb5fee85b3f68c3d73917e43847af95b6f788f892c6d3
- MD5 ee856817e65635959056f01ed78a0d80
- SHA1 5eeccb9bb600397c7fb9f65341dcadc91fab1ec3
- SHA512 24884e96e4254b8ffa52aab709aa6ba8132462344b7a9672276c519846e2f0ccf378a359a98b0b9e1bb8d17ef5e33a75f678ae36e022ab2941e8d10cfeabaf7a
- SSDEEP 1572864:DCU9rEx3EdKwFmLGn2L8WjDyGXuel3aW3hcFkFcFnFYFhFMFcFNF+FEFuF2FhFqU:DCUlE52KzLG2JjDvXuep3hcS6tSz6iHJ
- TLSH T17FF7339FE76608DDCEB548F04D3D82A24A625D592443BB3B352473583D332986EACFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
cfdd8b119aa357ec2b75c4f38f9b4ae9de34e3d72c112b97d3db8c7ffa08bfdb
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
O=Rimac
Subject
O=Rimac
Serial Number
4f:13:c5:8f
Issuer
O=Rimac
Timespan
Jan 16, 2012 - Dec 23, 2111
com.rimac.rimac_surrogas
.MainActivity
android.permission.INTERNET
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.POST_NOTIFICATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
android.permission.FOREGROUND_SERVICE
android.permission.MODIFY_AUDIO_SETTINGS
com.google.android.gms.permission.AD_ID
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.ACCESS_SUPERUSER
android.permission.READ_PHONE_STATE
android.permission.EXPAND_STATUS_BAR
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
com.samsung.android.mapsagent.permission.READ_APP_INFO
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE
android.permission.ACCESS_ADSERVICES_TOPICS
com.rimac.rimac_surrogas.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.VIBRATE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.ACCESS_NOTIFICATION_POLICY
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
com.chuckerteam.chucker.internal.ui.MainActivity
com.chuckerteam.chucker.internal.ui.transaction.TransactionActivity
com.chuckerteam.chucker.internal.ui.throwable.ThrowableActivity
pe.identia.flow.FlowActivity
pe.identia.camera.OPEN_FLOW
android.intent.action.OPEN_FLOW
com.adobe.marketing.mobile.AssuranceFullScreenTakeoverActivity
com.adobe.marketing.mobile.FullscreenMessageActivity
com.google.firebase.auth.internal.GenericIdpActivity
android.intent.action.VIEW
com.google.firebase.auth.internal.RecaptchaActivity
android.intent.action.VIEW
com.salesforce.marketingcloud.notifications.NotificationOpenActivity
com.salesforce.marketingcloud.messages.iam.IamModalActivity
com.salesforce.marketingcloud.messages.iam.IamBannerActivity
com.salesforce.marketingcloud.messages.iam.IamFullscreenActivity
com.salesforce.marketingcloud.messages.iam.IamFullImageFillActivity
com.adobe.marketing.mobile.assurance.internal.ui.AssuranceActivity
com.facebook.FacebookActivity
com.facebook.CustomTabMainActivity
com.facebook.CustomTabActivity
android.intent.action.VIEW
androidx.credentials.playservices.HiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
app.notifee.core.NotificationReceiverActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
.MyFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.messaging.FirebaseInstanceIdService
com.google.firebase.INSTANCE_ID_EVENT
com.chuckerteam.chucker.internal.support.ClearDatabaseService
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingHeadlessService
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.components.ComponentDiscoveryService
com.instana.android.performance.network.AppLifecycleIdentificationService
com.salesforce.marketingcloud.MCService
com.salesforce.marketingcloud.NotificationOpenedService
com.salesforce.marketingcloud.messages.push.MCFirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
org.altbeacon.beacon.service.BeaconService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
com.adobe.marketing.mobile.ExtensionDiscoveryService
androidx.camera.core.impl.MetadataHolderService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.android.gms.auth.api.signin.RevocationBoundService
com.salesforce.marketingcloud.sfmcsdk.SFMCSdkJobIntentService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
app.notifee.core.ReceiverService
app.notifee.core.ForegroundService
com.dieam.reactnativepushnotification.modules.RNPushNotificationActions
com.dieam.reactnativepushnotification.modules.RNPushNotificationPublisher
com.salesforce.marketingcloud.notifications.NotificationOpenedReceiver
com.salesforce.marketingcloud.notifications.OPEN
com.adobe.marketing.mobile.LocalNotificationHandler
io.invertase.firebase.messaging.ReactNativeFirebaseMessagingReceiver
com.google.android.c2dm.intent.RECEIVE
com.salesforce.marketingcloud.location.LocationReceiver
com.salesforce.marketingcloud.notifications.PushNotificationActionHandler
com.salesforce.marketingcloud.notifications.CAROUSEL_NEXT
com.salesforce.marketingcloud.notifications.CAROUSEL_PREVIOUS
com.salesforce.marketingcloud.MCReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.TIMEZONE_CHANGED
com.rimac.rimac_surrogas.com.salesforce.marketingcloud.WAKE_FOR_ALARM
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED
com.salesforce.marketingcloud.sfmcsdk.SFMCSdkReceiver
android.intent.action.MY_PACKAGE_REPLACED
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
app.notifee.core.RebootBroadcastReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
app.notifee.core.AlarmPermissionBroadcastReceiver
android.app.action.SCHEDULE_EXACT_ALARM_PERMISSION_STATE_CHANGED
app.notifee.core.NotificationAlarmReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
app.notifee.core.BlockStateBroadcastReceiver
android.app.action.APP_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED
android.app.action.NOTIFICATION_CHANNEL_GROUP_BLOCK_STATE_CHANGED
com.chuckerteam.chucker.internal.support.ChuckerFileProvider
com.reactnativecommunity.webview.RNCWebViewFileProvider
io.invertase.notifee.NotifeeInitProvider
io.invertase.firebase.app.ReactNativeFirebaseAppInitProvider
com.ReactNativeBlobUtil.Utils.FileProvider
com.imagepicker.ImagePickerProvider
cl.json.RNShareFileProvider
com.instana.android.performance.launchtime.StartupInitializer
com.salesforce.marketingcloud.MCInitContentProvider
androidx.startup.InitializationProvider
com.google.firebase.provider.FirebaseInitProvider
com.google.mlkit.common.internal.MlKitInitProvider
com.facebook.internal.FacebookInitProvider
com.salesforce.marketingcloud.sfmcsdk.SFMCSdkInitContentProvider
split_config.arm64_v8a.apk
- SHA256 128912a0d12692e64a4f76aaeab3600d0995718e9b8617be3e682d3dfb14cb67
- MD5 296460fbd416b2304d58d63f5e7f9d32
- SHA1 305b6b15bf03a96224827e9aa4ae0880b48d22c7
- SHA512 996e4f61822ad274098723cb91bc5922add95bd96c48e5fd1bfdd24a09bda5de8e7e1885556e08bb64228dfb4468783d0f0c1d5d080089d12005a11534640e73
- SSDEEP 196608:8x/tIsyzWrp8SyWohZyaPBmxIPacCICGA2cEB9XfSOnyH:q/tIs98lxhZyaPBmyScf1BfSKO
- TLSH T14E478C19774DA827DDC6B4FE8D0B0A9172267C04DA50D09E3C13C20FE9B77EA1B697A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
838f3184b061995cf949f5552af5a7e1f6f2613f
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
O=Rimac
Chains
Jan 1, 0001
Subject
O=Rimac
Serial Number
4f:13:c5:8f
Issuer
O=Rimac
Timespan
Jan 16, 2012 - Dec 23, 2111
split_config.en.apk
- SHA256 6c495fa143744fd0158f273cb3abf49ddfb46ea43c99b38fbf0f2b9637a39320
- MD5 d47e050344c689958969cd93cad4fa10
- SHA1 c674377e72215e79af2c6b6787a5b214d2d43007
- SHA512 47d5a9bcfa5062c1eed865d819f7f16a6e91b1fc68422cd91a4fe522745043a8f400b5863aa10c75bb9621acb623bbf394da75d27fd21b42391a852d005b5c2c
- SSDEEP 768:r0oYdTOY8VYmTSJUC621EPg4NONNfm656H1G:r4waP62qPgQaZm656Y
- TLSH T17AA32C1AA7520ACECE3788B81C565251113AFDA3DA526707E178336D2A3F1F46F893F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
1e4c1aea931c2e861db445745ec8da0a66bd4c68
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
O=Rimac
Chains
Jan 1, 0001
Subject
O=Rimac
Serial Number
4f:13:c5:8f
Issuer
O=Rimac
Timespan
Jan 16, 2012 - Dec 23, 2111
split_config.es.apk
- SHA256 a6ead87e5e0c9cebba703753641bc2b06e7e1152fbefea0d45093a8807491c88
- MD5 57658bb68db1f69f1111120399c93a96
- SHA1 2d339c518ed7253797884ebc90dd3247bdf437e6
- SHA512 0d0a7fa7f3d1f936f7aa71b6e499bed1ef2701b4898574b754fe161803db64722acc9ace0d9077c7d3d0b1d309d72a92520f19359d8696d1a18f93d0337f1a1a
- SSDEEP 768:o+fmVtnPIsts8k1+FFzxBi/j8rwPe0UHA2jZfcgvDESeja:oImVtPts8k1uBi78rwPbEA29fDbESe2
- TLSH T1CE536E16A1D20AD2CE36C9FC649783561178CEA31817A70765283369237F6F8BF4E7C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
46d2261621f7eb5bdeaacf1fca4830b9e308e2d2
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
O=Rimac
Chains
Jan 1, 0001
Subject
O=Rimac
Serial Number
4f:13:c5:8f
Issuer
O=Rimac
Timespan
Jan 16, 2012 - Dec 23, 2111
split_config.xxhdpi.apk
- SHA256 2a330b3cbe5883d8677a8967fe401eb161dcddb34cfe107943d048b36b0958ca
- MD5 38da0f298428a12b03feeea2ce480983
- SHA1 0df891fc092bd1867fb1fa42e393fc9ae23a9a11
- SHA512 99b11b8eecc222642ef602279029493b694df782ca69be8e73eec157565d65c7880d22afd8c35934190199cb02d06a5b090639a2348ccc67fefddb37d30ca38f
- SSDEEP 24576:NDBoOor7vJSBvHOW2MvnecOq2fDBoOor7vJSBvHOW2MrZeTlR:LlCR+24neO2dlCR+2KZ2R
- TLSH T1483512A3E76D042FEEBAD6B4487C226710299E120812BF422545F73E7D374879BA93D4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
20b16f8b4384943b6f87ef7965fb4a8600dfff44
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
O=Rimac
Chains
Jan 1, 0001
Subject
O=Rimac
Serial Number
4f:13:c5:8f
Issuer
O=Rimac
Timespan
Jan 16, 2012 - Dec 23, 2111