Earth Recycle (9)[.]apk

General

Target
Earth Recycle (9).apk
Size 6.6MB
Sample260814-lmgexahj21
SHA256 d0371716ccdd2a3994577b9d98d2255a7b0bd338e6fe464d4d4209aa1e23041d
MD5 3d5c359eb43851f0119b4c9f2d92bf8b
SHA1 cfe5fb802c94628c92d21c66442bf872ebc09169
SHA512 baeb0880063bc01dd43e9e4bb5db43857bb321cfb6ebb399390ab6c25ca415c409c2254dfb4c4e7eca5fe995de3e984150179be972ae2765b5899b13e378759c
SSDEEP 196608:zuhJ6897BISzhMUdrsJDa40DIFKgAwoFlFKx:qOmpd3gVyDKoAx
TLSH
T1AD660147FB44592BC0F753B2023A5722164B8D668B4397C7AD64353C28B7AD07F9AACC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Earth Recycle (9).apk

File Explorer

Earth Recycle (9).apk

.apk 6.6MB

Earth Recycle (9).apk

SHA256 d0371716ccdd2a3994577b9d98d2255a7b0bd338e6fe464d4d4209aa1e23041d
MD5 3d5c359eb43851f0119b4c9f2d92bf8b
SHA1 cfe5fb802c94628c92d21c66442bf872ebc09169
SHA512 baeb0880063bc01dd43e9e4bb5db43857bb321cfb6ebb399390ab6c25ca415c409c2254dfb4c4e7eca5fe995de3e984150179be972ae2765b5899b13e378759c
SSDEEP 196608:zuhJ6897BISzhMUdrsJDa40DIFKgAwoFlFKx:qOmpd3gVyDKoAx
TLSH
T1AD660147FB44592BC0F753B2023A5722164B8D668B4397C7AD64353C28B7AD07F9AACC
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

82046b71f1ed95f15692b6b56d801ee5c5c470cf8628b7da0a675b4437bc1133

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=editor

hopb.luekyj.xvtcgfw

hopb.luekyj.xvtcgfw.Splasher

hopb.luekyj.xvtcgfw.HomeSIM

android.intent.action.MAIN

hopb.luekyj.xvtcgfw.HomeWallp

android.intent.action.MAIN

hopb.luekyj.xvtcgfw.HomeSmsung

android.intent.action.MAIN

hopb.luekyj.xvtcgfw.PlayS

android.intent.action.MAIN

hopb.luekyj.xvtcgfw.asdfqyvpujjlzjx

hopb.luekyj.xvtcgfw.neddcmwrhna

hopb.luekyj.xvtcgfw.hkanpdrd

hopb.luekyj.xvtcgfw.urbmcqitbmqr

hopb.luekyj.xvtcgfw.thbrinuuo

hopb.luekyj.xvtcgfw.onhepfomhl

hopb.luekyj.xvtcgfw.zhvxbnwx

hopb.luekyj.xvtcgfw.speakit

hopb.luekyj.xvtcgfw.tdtphblcgxikkcntdwt

hopb.luekyj.xvtcgfw.ykdggtvcsxrlpyteg

hopb.luekyj.xvtcgfw.kvqqliruqwjttsfz

hopb.luekyj.xvtcgfw.Toastit

hopb.luekyj.xvtcgfw.atrcqtsvk

hopb.luekyj.xvtcgfw.RequestAdm

hopb.luekyj.xvtcgfw.Inputbrqjkjuxhkvjuqkfh

hopb.luekyj.xvtcgfw.fzwbxyokftyr

hopb.luekyj.xvtcgfw.hxnskplrumms

hopb.luekyj.xvtcgfw.fsebwmdbbrc

hopb.luekyj.xvtcgfw.xgudrowvtgev

hopb.luekyj.xvtcgfw.mxsbvxwpuc

hopb.luekyj.xvtcgfw.brqjkjuxhkvjuqkfh

hopb.luekyj.xvtcgfw.wvjyfbse

hopb.luekyj.xvtcgfw.tofront

hopb.luekyj.xvtcgfw.xfucuwkgtpqicy

hopb.luekyj.xvtcgfw.risxljzjri

hopb.luekyj.xvtcgfw.CallBacker

hopb.luekyj.xvtcgfw.jrxyklsxxpubwzbzuei

hopb.luekyj.xvtcgfw.alarme

AppAlarm

hopb.luekyj.xvtcgfw.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

hopb.luekyj.xvtcgfw.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

.MyDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

Earth Recycle (9).apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

hopb.luekyj.xvtcgfw.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Earth Recycle (9).apk

File Signature issue

hopb.luekyj.xvtcgfw.Splasher

hopb.luekyj.xvtcgfw.HomeSIM

hopb.luekyj.xvtcgfw.HomeWallp

hopb.luekyj.xvtcgfw.HomeSmsung

hopb.luekyj.xvtcgfw.PlayS

hopb.luekyj.xvtcgfw.asdfqyvpujjlzjx

hopb.luekyj.xvtcgfw.neddcmwrhna

hopb.luekyj.xvtcgfw.hkanpdrd

hopb.luekyj.xvtcgfw.urbmcqitbmqr

hopb.luekyj.xvtcgfw.thbrinuuo

hopb.luekyj.xvtcgfw.onhepfomhl

hopb.luekyj.xvtcgfw.zhvxbnwx

hopb.luekyj.xvtcgfw.speakit

hopb.luekyj.xvtcgfw.tdtphblcgxikkcntdwt

hopb.luekyj.xvtcgfw.ykdggtvcsxrlpyteg

hopb.luekyj.xvtcgfw.kvqqliruqwjttsfz

hopb.luekyj.xvtcgfw.Toastit

hopb.luekyj.xvtcgfw.atrcqtsvk

hopb.luekyj.xvtcgfw.RequestAdm

hopb.luekyj.xvtcgfw.Inputbrqjkjuxhkvjuqkfh

hopb.luekyj.xvtcgfw.fzwbxyokftyr

hopb.luekyj.xvtcgfw.hxnskplrumms

hopb.luekyj.xvtcgfw.fsebwmdbbrc

hopb.luekyj.xvtcgfw.xgudrowvtgev

hopb.luekyj.xvtcgfw.mxsbvxwpuc

hopb.luekyj.xvtcgfw.brqjkjuxhkvjuqkfh

hopb.luekyj.xvtcgfw.wvjyfbse

hopb.luekyj.xvtcgfw.tofront

hopb.luekyj.xvtcgfw.xfucuwkgtpqicy

hopb.luekyj.xvtcgfw.risxljzjri

hopb.luekyj.xvtcgfw.CallBacker

hopb.luekyj.xvtcgfw.jrxyklsxxpubwzbzuei

hopb.luekyj.xvtcgfw.reoyadykopdnrueo

hopb.luekyj.xvtcgfw.arqyxoaf

hopb.luekyj.xvtcgfw.ahhunbymcwaoastcr

hopb.luekyj.xvtcgfw.qeaxyfvaycwepfcc

hopb.luekyj.xvtcgfw.yimacqztikhbosx

hopb.luekyj.xvtcgfw.mjkxjgkdigji

hopb.luekyj.xvtcgfw.rowidyrnaqlz

hopb.luekyj.xvtcgfw.rsmrkpnhjllvjtxatdr

hopb.luekyj.xvtcgfw.mowxquodyypj

hopb.luekyj.xvtcgfw.minserv

.xbfimespvmly

hopb.luekyj.xvtcgfw.DownloadForegroundService

hopb.luekyj.xvtcgfw.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

hopb.luekyj.xvtcgfw.alarme

hopb.luekyj.xvtcgfw.BootReceiver

hopb.luekyj.xvtcgfw.ResetServices

.MyDeviceAdminReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

Earth Recycle (9).apk