MT2[.]26[.]8[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
MT2.26.8.apk
Size 30.6MB
Sample260813-g5c3zstdnc
SHA256 e739b94ee11b420479b1c57237bb5cda796fccbaf5203b065662acd7355aba80
MD5 c1bde7afe300976812acfaee5d57cf69
SHA1 21c6581e42c99485f987300df60117943a7d0768
SHA512 dd4aeda7d0c8a9a19884d29a128d5e6e9857bf3262cab4f96485c00b5c1b2892d66d66032ccff840df4e7a03891598b4da67e46d28032ccfbf11d1468cec9da4
SSDEEP 786432:B+TpuNw1QsM+o4l4OuHChnPOv/pIFopydG1JvEUJxlZKgs+VE:B+uNw10+VKOZnPOvBIFYz15NxqgscE
TLSH
T1736723A2238854AEC5365176CC4A263B3AAB4CBD6767531315543B3E38F35F84F2DAC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
unpack001/filetransfer.apk

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
MT2.26.8.apk
unpack001/filetransfer.apk

File Explorer

MT2.26.8.apk

.apk 30.6MB
filetransfer.apk

.apk 18KB

MT2.26.8.apk

SHA256 e739b94ee11b420479b1c57237bb5cda796fccbaf5203b065662acd7355aba80
MD5 c1bde7afe300976812acfaee5d57cf69
SHA1 21c6581e42c99485f987300df60117943a7d0768
SHA512 dd4aeda7d0c8a9a19884d29a128d5e6e9857bf3262cab4f96485c00b5c1b2892d66d66032ccff840df4e7a03891598b4da67e46d28032ccfbf11d1468cec9da4
SSDEEP 786432:B+TpuNw1QsM+o4l4OuHChnPOv/pIFopydG1JvEUJxlZKgs+VE:B+uNw10+VKOZnPOvBIFYz15NxqgscE
TLSH
T1736723A2238854AEC5365176CC4A263B3AAB4CBD6767531315543B3E38F35F84F2DAC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

83a0fbfa632ebd4c6eb841f713d71500c49d23c5082f442287ce56aae8f83299

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=bin

bin.mt.plus

bin.mt.plus.Main

bin.mt.plus.ShortcutActivity

l.᩺ۚۚ

l.ۡۚۚ

l.ۡۧۚ

l.ۘ֫ۚ

l.ᩳ֫ۚ

l.֨ۖۧ

l.ܽ᩸ۧ

l.ۜ֨ۧ

l.ۖܽۧ

l.ۤܽۧ

l.ۨ֫ۧ

l.ᩴ᩷ۧ

l.᩺ܰܶ

l.ᩳۢܶ

l.ۡۖ᩷

l.ܰۛܶ

l.ۨۢۗ

l.֡۬ۗ

l.ܶ۬ۗ

l.ܺۢۗ

l.ܽ۠ۗ

l.ۧᩳۗ

l.ۢ۠ۗ

l.ۨᩳۗ

l.ۚ᩹ۗ

l.ۜ᩹ۗ

android.intent.action.VIEW

l.ᩳ۟ۗ

l.ۗ֫ۧ

l.᩸᩸ۨ

l.ۛۨۧ

l.ۢܺۧ

l.۬֫ۧ

l.ۖ֫ۧ

l.ۚ֫ۚ

l.ܿۚܺ

l.ۜܳܶ

l.ۚ֡ܶ

l.ۡ۬ܶ

l.᩷۬ܶ

l.۠ۢܶ

l.֡۬ܶ

l.ۨܳܶ

l.ۗۚۚ

l.ᩳ᩸ۨ

l.᩹ᩴۚ

l.ۜܺۚ

l.ᩴۖۚ

l.ۜۧۚ

l.ۛۡۨ

l.ۢ᩺ۨ

l.۬ۡۨ

l.֡ۡۨ

l.۠ᩴۚ

l.ۘۤۧ

l.ܿ֡ܶ

l.ۛۡ᩷

l.֡ۜ᩷

l.ۢۛܺ

l.ۡۙۚ

l.᩵ۙۚ

l.ۢ֫ۨ

l.ۛܽۨ

l.ۗۜۨ

l.ᩴܿ᩷

l.۬ۤۚ

l.᩵ܰۚ

l.֫ۧۚ

l.ۙۚۚ

android.intent.action.GET_CONTENT

l.ܽܳۚ

l.᩸֫ۚ

l.ᩳ᩹ܶ

l.֡᩹ܶ

l.ܳܺۧ

l.ۛܶۚ

l.֫᩵ۗ

l.ۚۜۗ

l.ۗܽۗ

l.᩵᩸ۚ

l.۠᩺ۚ

l.ۘ᩺ۚ

l.֡᩺ۚ

l.ܽ᩺ۚ

l.ۖ᩻ܶ

l.ۛ᩺ۚ

l.ᩳ᩺ۚ

l.ܰۨۨ

l.᩷ۨۨ

l.ܳۤۧ

bin.mt.plus.WXPayEntryActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

l.ܿۖۚ

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

filetransfer.apk

SHA256 96055a6e6694d6c6578b4dff108b83275758096af4a193c2701de354a26c7603
MD5 fed901fecf7df630a4f77432aa6d09c4
SHA1 e36169eb5414092ce5d25c194fadf85eca6c29cc
SHA512 7a8612b767e1c6d6d7c0b2d3d7671ca18e33df385be725e53ee64cf7c3bac04d2e8425c75d4dbba7adae713789b3fd214acbd30bec91388865c86fef9baf2b39
SSDEEP 384:JXhjYqi39Lw1w+AVX1Ctjo5d7BsqehoY5R3v6wAoAqykWrc:BhkF3Bw1xnU5d7GoyR3v653kz
TLSH
T13A82BF93EB474897C3B9767DE13D11C3697840BF6777AB5D4C10F89AEC089440E521B9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

72096c59a3b3a27a6bb03abeefbc57d64e4d4a5a

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=bin

Chains

Jan 1, 0001

bin.mt.filetransfer

Android Permissions

MT2.26.8.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_SUPERUSER

com.android.permission.GET_INSTALLED_APPS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

moe.shizuku.manager.permission.API_V23

bin.mt.plus.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.rosan.dhizuku.permission.API