hgal[.]njfouw[.]ufwuebg[.]apk

General

Target
hgal.njfouw.ufwuebg.apk
Size 3.9MB
Sample260809-dz4f7sge73
SHA256 3d0f83250ca70f9598a57828219c5e19e44534a63940e0a9abbb375d715aa306
MD5 9d8bb4163dbe2492f97bd726d5aaa130
SHA1 bd3650f8f1a3c2c99ac4f5c7a1c94f2d17723e69
SHA512 b8750d26aa75578b311328d6119a1197ef4bfda82faa11dd7c1aff55d805627d4f55a24dacddada59ff8391f2f6a826d30483c939771990bf3dc55916bc641df
SSDEEP 98304:tUlr9oY8wqrBeRaHnWKei5Dz3JRo/Krr7L+:tjYbmBHnWK35+
TLSH
T16316CE8BFB48A96AC4F753B24236532251474C2A8B43D6C76D58323C18B76D07F9EBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
hgal.njfouw.ufwuebg.apk

File Explorer

hgal.njfouw.ufwuebg.apk

.apk 3.9MB

hgal.njfouw.ufwuebg.apk

SHA256 3d0f83250ca70f9598a57828219c5e19e44534a63940e0a9abbb375d715aa306
MD5 9d8bb4163dbe2492f97bd726d5aaa130
SHA1 bd3650f8f1a3c2c99ac4f5c7a1c94f2d17723e69
SHA512 b8750d26aa75578b311328d6119a1197ef4bfda82faa11dd7c1aff55d805627d4f55a24dacddada59ff8391f2f6a826d30483c939771990bf3dc55916bc641df
SSDEEP 98304:tUlr9oY8wqrBeRaHnWKei5Dz3JRo/Krr7L+:tjYbmBHnWK35+
TLSH
T16316CE8BFB48A96AC4F753B24236532251474C2A8B43D6C76D58323C18B76D07F9EBC9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

69bc2fc0cd20b7e2421f98257a94f2b76c0e32433819df8de00e52a5736a7de4

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=editor

hgal.njfouw.ufwuebg

hgal.njfouw.ufwuebg.Splasher

hgal.njfouw.ufwuebg.HomeSIM

android.intent.action.MAIN

hgal.njfouw.ufwuebg.HomeWallp

android.intent.action.MAIN

hgal.njfouw.ufwuebg.HomeSmsung

android.intent.action.MAIN

hgal.njfouw.ufwuebg.PlayS

android.intent.action.MAIN

hgal.njfouw.ufwuebg.bfxjzwtbugsrxpj

hgal.njfouw.ufwuebg.uecvayyrfwetbwj

hgal.njfouw.ufwuebg.phdzuztonqadf

hgal.njfouw.ufwuebg.kbupzuzazbjgagwe

hgal.njfouw.ufwuebg.qtivurjzu

hgal.njfouw.ufwuebg.lmjjxidxg

hgal.njfouw.ufwuebg.wweusonqhlafe

hgal.njfouw.ufwuebg.speakit

hgal.njfouw.ufwuebg.ryvieblnggvif

hgal.njfouw.ufwuebg.knoganqfovm

hgal.njfouw.ufwuebg.pjtimxewpc

hgal.njfouw.ufwuebg.Toastit

hgal.njfouw.ufwuebg.gxfmlaoikncszdwkhg

hgal.njfouw.ufwuebg.RequestAdm

hgal.njfouw.ufwuebg.Inputghauutge

hgal.njfouw.ufwuebg.qopahoulqgvvnank

hgal.njfouw.ufwuebg.xqcshawgsaf

hgal.njfouw.ufwuebg.doqxhfsblvcdn

hgal.njfouw.ufwuebg.xbjrvxzhkezavbkiv

hgal.njfouw.ufwuebg.utgafddpswrsajwnim

hgal.njfouw.ufwuebg.ghauutge

hgal.njfouw.ufwuebg.nbqcjegr

hgal.njfouw.ufwuebg.tofront

hgal.njfouw.ufwuebg.vfiigpzoupqsfjrvfqs

hgal.njfouw.ufwuebg.impppwxywxe

hgal.njfouw.ufwuebg.CallBacker

hgal.njfouw.ufwuebg.fdctfwjvfujsq

hgal.njfouw.ufwuebg.alarme

AppAlarm

hgal.njfouw.ufwuebg.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

hgal.njfouw.ufwuebg.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

hgal.njfouw.ufwuebg.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

hgal.njfouw.ufwuebg.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

hgal.njfouw.ufwuebg.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

hgal.njfouw.ufwuebg.apk

File Signature issue

hgal.njfouw.ufwuebg.Splasher

hgal.njfouw.ufwuebg.HomeSIM

hgal.njfouw.ufwuebg.HomeWallp

hgal.njfouw.ufwuebg.HomeSmsung

hgal.njfouw.ufwuebg.PlayS

hgal.njfouw.ufwuebg.bfxjzwtbugsrxpj

hgal.njfouw.ufwuebg.uecvayyrfwetbwj

hgal.njfouw.ufwuebg.phdzuztonqadf

hgal.njfouw.ufwuebg.kbupzuzazbjgagwe

hgal.njfouw.ufwuebg.qtivurjzu

hgal.njfouw.ufwuebg.lmjjxidxg

hgal.njfouw.ufwuebg.wweusonqhlafe

hgal.njfouw.ufwuebg.speakit

hgal.njfouw.ufwuebg.ryvieblnggvif

hgal.njfouw.ufwuebg.knoganqfovm

hgal.njfouw.ufwuebg.pjtimxewpc

hgal.njfouw.ufwuebg.Toastit

hgal.njfouw.ufwuebg.gxfmlaoikncszdwkhg

hgal.njfouw.ufwuebg.RequestAdm

hgal.njfouw.ufwuebg.Inputghauutge

hgal.njfouw.ufwuebg.qopahoulqgvvnank

hgal.njfouw.ufwuebg.xqcshawgsaf

hgal.njfouw.ufwuebg.doqxhfsblvcdn

hgal.njfouw.ufwuebg.xbjrvxzhkezavbkiv

hgal.njfouw.ufwuebg.utgafddpswrsajwnim

hgal.njfouw.ufwuebg.ghauutge

hgal.njfouw.ufwuebg.nbqcjegr

hgal.njfouw.ufwuebg.tofront

hgal.njfouw.ufwuebg.vfiigpzoupqsfjrvfqs

hgal.njfouw.ufwuebg.impppwxywxe

hgal.njfouw.ufwuebg.CallBacker

hgal.njfouw.ufwuebg.fdctfwjvfujsq

hgal.njfouw.ufwuebg.kzgznafidsibyssxtdr

hgal.njfouw.ufwuebg.xxebjhwhxevelv

hgal.njfouw.ufwuebg.xxazvhbf

hgal.njfouw.ufwuebg.fvunfnfaidwaades

hgal.njfouw.ufwuebg.gczgmekitlbvrhqbupw

hgal.njfouw.ufwuebg.pelzobpkajtaxvwj

hgal.njfouw.ufwuebg.worcmdxezqbkuwz

hgal.njfouw.ufwuebg.pslpvudjnnjvmcz

hgal.njfouw.ufwuebg.nrqwrglopepczcpvt

hgal.njfouw.ufwuebg.minserv

.jnbobgpfdw

hgal.njfouw.ufwuebg.DownloadForegroundService

hgal.njfouw.ufwuebg.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

hgal.njfouw.ufwuebg.alarme

hgal.njfouw.ufwuebg.BootReceiver

hgal.njfouw.ufwuebg.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

hgal.njfouw.ufwuebg.apk