6098a436094f1e3e8721fb87ff36781a1a283711cc0388f608723a18132607c4.apk
- SHA256 6098a436094f1e3e8721fb87ff36781a1a283711cc0388f608723a18132607c4
-
Root, emulator and instrumentation-framework detection
Probes for superuser binaries, emulator build properties and dynamic instrumentation frameworks. Malware uses these checks to stay dormant inside analysis environments, so a sample matching this rule with an otherwise empty behavioural report should be treated as evasive rather than benign.
-
Scripted prompt coaching the user to enable Accessibility
Contains step-by-step instructional text walking the victim through enabling an accessibility service. Because Android deliberately makes this flow difficult, malware ships explicit coaching copy; the presence of such a script alongside an accessibility service is a strong abuse indicator.
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Jan 1, 0001