e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

General

Target
e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35
Size 67.3MB
Sample260814-e5g1tscp9s
SHA256 e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35
MD5 8ab9099bb2bf8d7ade5c34f359b9965f
SHA1 07671cfe34b5d80da203be3f35410702254591e6
SHA512 6b3d945bc41f728ee652dd9decf0fa801ffb434e75cd82d7dc45cee25279f033984c279207cae40a57a62c04d20170a56bda9dfa352fcdf8536dfac8861aa258
SSDEEP 786432:M6wxcRVqbgL+IYkVW5U8EQjK7zGRPQVe3u6:KxcWszYRi8ETVUu6
TLSH
T14BF7D043F05D453AC8EBE538EB6E4572B330384942E2959B394C93117F9B6F04FA6BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

File Explorer

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

.apk 67.3MB

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

SHA256 e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35
MD5 8ab9099bb2bf8d7ade5c34f359b9965f
SHA1 07671cfe34b5d80da203be3f35410702254591e6
SHA512 6b3d945bc41f728ee652dd9decf0fa801ffb434e75cd82d7dc45cee25279f033984c279207cae40a57a62c04d20170a56bda9dfa352fcdf8536dfac8861aa258
SSDEEP 786432:M6wxcRVqbgL+IYkVW5U8EQjK7zGRPQVe3u6:KxcWszYRi8ETVUu6
TLSH
T14BF7D043F05D453AC8EBE538EB6E4572B330384942E2959B394C93117F9B6F04FA6BA1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2528d2d7ae28f11a53ad02ac96ccdbb805e8e12aa79258d859791c0a34923fe2

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Anton Tananaev,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

org.traccar.client

Android Permissions

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACTIVITY_RECOGNITION

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

org.traccar.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

File Signature issue

org.traccar.client.MainActivity

org.traccar.client.PermissionActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

androidx.camera.core.impl.MetadataHolderService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

org.traccar.client.TrackerService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

org.traccar.client.BootReceiver

org.traccar.client.ActivityRecognitionReceiver

org.traccar.client.GeofenceReceiver

org.traccar.client.HeartbeatReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

dev.fluttercommunity.plus.share.ShareFileProvider

com.google.firebase.provider.FirebaseInitProvider

com.google.mlkit.common.internal.MlKitInitProvider

org.traccar.client.TrackerStartup

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35

File Signature issue

org.traccar.client.MainActivity

org.traccar.client.PermissionActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

androidx.camera.core.impl.MetadataHolderService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

org.traccar.client.TrackerService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

org.traccar.client.BootReceiver

org.traccar.client.ActivityRecognitionReceiver

org.traccar.client.GeofenceReceiver

org.traccar.client.HeartbeatReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

dev.fluttercommunity.plus.share.ShareFileProvider

com.google.firebase.provider.FirebaseInitProvider

com.google.mlkit.common.internal.MlKitInitProvider

org.traccar.client.TrackerStartup

androidx.startup.InitializationProvider

Android Permissions

e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35