eisw[.]yffaqr[.]dznwpkq[.]apk

General

Target
eisw.yffaqr.dznwpkq.apk
Size 5.2MB
Sample260809-dv7ytsszev
SHA256 fb5eaf404c24bcfb1d190e6b96408829379a678710e2799c80bfbd58e6b506a0
MD5 ea214cee8dbca0d3e50d5eb6052bad1c
SHA1 f07e51657c163a88049be7c78d2d1790f3b8b9bb
SHA512 dd8b1cc41fcffa16e406aa338a13be2f5e27afedee189451ce004a90e71b5b605f911a49b6635a4048cc5385ada9be43af462948e685d9499536fe54c2eabc8c
SSDEEP 98304:eM8ZJo/KrrToc6UQ7U56h1fY5V+HoC3jtw8pfuaj:eMAn/6UQ4E/CkHL3pTpWaj
TLSH
T19846E08BFF48582AC4F753B2053A5321154B4C668B43D6C7AD58323C28B7AD06F9EADD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
eisw.yffaqr.dznwpkq.apk

File Explorer

eisw.yffaqr.dznwpkq.apk

.apk 5.2MB

eisw.yffaqr.dznwpkq.apk

SHA256 fb5eaf404c24bcfb1d190e6b96408829379a678710e2799c80bfbd58e6b506a0
MD5 ea214cee8dbca0d3e50d5eb6052bad1c
SHA1 f07e51657c163a88049be7c78d2d1790f3b8b9bb
SHA512 dd8b1cc41fcffa16e406aa338a13be2f5e27afedee189451ce004a90e71b5b605f911a49b6635a4048cc5385ada9be43af462948e685d9499536fe54c2eabc8c
SSDEEP 98304:eM8ZJo/KrrToc6UQ7U56h1fY5V+HoC3jtw8pfuaj:eMAn/6UQ4E/CkHL3pTpWaj
TLSH
T19846E08BFF48582AC4F753B2053A5321154B4C668B43D6C7AD58323C28B7AD06F9EADD
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4f07de793386984390404f51e6ff77ea7b3a483e9a1b1bf7403cf47d76f56995

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=editor

eisw.yffaqr.dznwpkq

eisw.yffaqr.dznwpkq.Splasher

eisw.yffaqr.dznwpkq.HomeSIM

android.intent.action.MAIN

eisw.yffaqr.dznwpkq.HomeWallp

android.intent.action.MAIN

eisw.yffaqr.dznwpkq.HomeSmsung

android.intent.action.MAIN

eisw.yffaqr.dznwpkq.PlayS

android.intent.action.MAIN

eisw.yffaqr.dznwpkq.dijzorzisykg

eisw.yffaqr.dznwpkq.ssnrtsjcfssvvmtuycl

eisw.yffaqr.dznwpkq.wfhcpkxqg

eisw.yffaqr.dznwpkq.mknejiww

eisw.yffaqr.dznwpkq.obnhudlqrntgrxm

eisw.yffaqr.dznwpkq.hvcheuhcqomr

eisw.yffaqr.dznwpkq.knxdkerizewdcmqo

eisw.yffaqr.dznwpkq.speakit

eisw.yffaqr.dznwpkq.lnxpfcxcwxrb

eisw.yffaqr.dznwpkq.rhrjxwvnftmegnsdf

eisw.yffaqr.dznwpkq.pezwsergacqzceyewh

eisw.yffaqr.dznwpkq.Toastit

eisw.yffaqr.dznwpkq.fzjcyhgmeakluibfwt

eisw.yffaqr.dznwpkq.RequestAdm

eisw.yffaqr.dznwpkq.Inputubkwakwqldbhyf

eisw.yffaqr.dznwpkq.svldqordbaztfabywd

eisw.yffaqr.dznwpkq.cjtnksfarrv

eisw.yffaqr.dznwpkq.tcuyvdswf

eisw.yffaqr.dznwpkq.nufkcjschoh

eisw.yffaqr.dznwpkq.xbqbamutvowqlhwxp

eisw.yffaqr.dznwpkq.ubkwakwqldbhyf

eisw.yffaqr.dznwpkq.vmmowqnczixxoavgl

eisw.yffaqr.dznwpkq.tofront

eisw.yffaqr.dznwpkq.prrbxquimxgsaminycr

eisw.yffaqr.dznwpkq.vpzruehprijwobuel

eisw.yffaqr.dznwpkq.CallBacker

eisw.yffaqr.dznwpkq.zmadtsqg

eisw.yffaqr.dznwpkq.alarme

AppAlarm

eisw.yffaqr.dznwpkq.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

eisw.yffaqr.dznwpkq.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

eisw.yffaqr.dznwpkq.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

eisw.yffaqr.dznwpkq.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

eisw.yffaqr.dznwpkq.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

eisw.yffaqr.dznwpkq.apk

File Signature issue

eisw.yffaqr.dznwpkq.Splasher

eisw.yffaqr.dznwpkq.HomeSIM

eisw.yffaqr.dznwpkq.HomeWallp

eisw.yffaqr.dznwpkq.HomeSmsung

eisw.yffaqr.dznwpkq.PlayS

eisw.yffaqr.dznwpkq.dijzorzisykg

eisw.yffaqr.dznwpkq.ssnrtsjcfssvvmtuycl

eisw.yffaqr.dznwpkq.wfhcpkxqg

eisw.yffaqr.dznwpkq.mknejiww

eisw.yffaqr.dznwpkq.obnhudlqrntgrxm

eisw.yffaqr.dznwpkq.hvcheuhcqomr

eisw.yffaqr.dznwpkq.knxdkerizewdcmqo

eisw.yffaqr.dznwpkq.speakit

eisw.yffaqr.dznwpkq.lnxpfcxcwxrb

eisw.yffaqr.dznwpkq.rhrjxwvnftmegnsdf

eisw.yffaqr.dznwpkq.pezwsergacqzceyewh

eisw.yffaqr.dznwpkq.Toastit

eisw.yffaqr.dznwpkq.fzjcyhgmeakluibfwt

eisw.yffaqr.dznwpkq.RequestAdm

eisw.yffaqr.dznwpkq.Inputubkwakwqldbhyf

eisw.yffaqr.dznwpkq.svldqordbaztfabywd

eisw.yffaqr.dznwpkq.cjtnksfarrv

eisw.yffaqr.dznwpkq.tcuyvdswf

eisw.yffaqr.dznwpkq.nufkcjschoh

eisw.yffaqr.dznwpkq.xbqbamutvowqlhwxp

eisw.yffaqr.dznwpkq.ubkwakwqldbhyf

eisw.yffaqr.dznwpkq.vmmowqnczixxoavgl

eisw.yffaqr.dznwpkq.tofront

eisw.yffaqr.dznwpkq.prrbxquimxgsaminycr

eisw.yffaqr.dznwpkq.vpzruehprijwobuel

eisw.yffaqr.dznwpkq.CallBacker

eisw.yffaqr.dznwpkq.zmadtsqg

eisw.yffaqr.dznwpkq.hdamktnycnbqvw

eisw.yffaqr.dznwpkq.lpcoxbxznudbfyxut

eisw.yffaqr.dznwpkq.zglyfitmo

eisw.yffaqr.dznwpkq.juulrjtlcvi

eisw.yffaqr.dznwpkq.ytlftaluzxsyocveza

eisw.yffaqr.dznwpkq.zftkgujgqxonndqe

eisw.yffaqr.dznwpkq.obuijcnuliekpo

eisw.yffaqr.dznwpkq.dkcseaiivdvtxtronot

eisw.yffaqr.dznwpkq.ruumjapiqmtdfnah

eisw.yffaqr.dznwpkq.minserv

.yqldmifmhqruuidu

eisw.yffaqr.dznwpkq.DownloadForegroundService

eisw.yffaqr.dznwpkq.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

eisw.yffaqr.dznwpkq.alarme

eisw.yffaqr.dznwpkq.BootReceiver

eisw.yffaqr.dznwpkq.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

eisw.yffaqr.dznwpkq.apk