8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe[.]apk

General

Target
8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk
Size 1.4MB
Sample260817-eylensek8w
SHA256 8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe
MD5 f7d52cd712a6cc34b2ba8833af107fd1
SHA1 8f37b442613dae153b57558b582b3a678220e309
SHA512 0c589ad8fea5453df0f7bc9f9acb31f36ee876b1c84eb979d127e0401c6116fe285bebd7c634833786bd0fc4d799049bfa1a02c3ec094205db23e1b388f8d55d
SSDEEP 24576:e3W3BW9f5P5MRNFsUdyTIXNtnbHVJ/I0NXzw5ZrFU7SLMuBUVrMUBsycgwDpo6N:e36kPYtdyW3/dIBU7SL1mMQsycgwDH
TLSH
T17665F186B7C1AC2FCCB7C4350F5A8325A6569D57C687D307A9943A3C6EBB7D00E48AC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

File Explorer

8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

.apk 1.4MB

8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

SHA256 8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe
MD5 f7d52cd712a6cc34b2ba8833af107fd1
SHA1 8f37b442613dae153b57558b582b3a678220e309
SHA512 0c589ad8fea5453df0f7bc9f9acb31f36ee876b1c84eb979d127e0401c6116fe285bebd7c634833786bd0fc4d799049bfa1a02c3ec094205db23e1b388f8d55d
SSDEEP 24576:e3W3BW9f5P5MRNFsUdyTIXNtnbHVJ/I0NXzw5ZrFU7SLMuBUVrMUBsycgwDpo6N:e36kPYtdyW3/dIBU7SL1mMQsycgwDH
TLSH
T17665F186B7C1AC2FCCB7C4350F5A8325A6569D57C687D307A9943A3C6EBB7D00E48AC4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

3d7ba7fb46efc6675b7784d622a07f9d4e81ed60

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

com.didwalkbdvz

Android Permissions

8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.ADD_VOICEMAIL

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.Manifest.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.USES_POLICY_FORCE_LOCK

android.permission.VIBRATE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

android.permission.PACKAGE_USAGE_STATS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

File Explorer

8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk

File Signature issue

com.didwalkbdvz.p089z

com.didwalkbdvz.p062z

com.didwalkbdvz.p044a

com.didwalkbdvz.p080w

com.didwalkbdvz.p090q

com.didwalkbdvz.p063t

com.didwalkbdvz.p025c

com.didwalkbdvz.p038b

com.didwalkbdvz.p023a

com.didwalkbdvz.p021v

com.didwalkbdvz.p061g

com.didwalkbdvz.p045x

com.didwalkbdvz.sytxosqqwexvtwz

com.didwalkbdvz.rbonngdninxpjh

com.didwalkbdvz.zgvfzrqlppgqkrp

com.didwalkbdvz.eepxrpvqjuz

com.didwalkbdvz.trljjpbmxlfd

com.didwalkbdvz.njrenfahpwzeqt

com.didwalkbdvz.owmfvispex

com.didwalkbdvz.fblpbxcmxsi

com.didwalkbdvz.p039w

com.didwalkbdvz.p076n

com.didwalkbdvz.p037n

com.didwalkbdvz.LogSrv

com.didwalkbdvz.p097c

com.didwalkbdvz.p050g

com.didwalkbdvz.p016b

com.didwalkbdvz.p064j

com.didwalkbdvz.p090d

com.didwalkbdvz.p066n

com.didwalkbdvz.p066d

com.didwalkbdvz.p045r

com.didwalkbdvz.viudmgpfyn

com.didwalkbdvz.wvgocbfmnec

com.didwalkbdvz.znwqqpashpofej

com.didwalkbdvz.zipqispnvli

com.didwalkbdvz.p071z

com.didwalkbdvz.p080b

com.didwalkbdvz.p070k

com.didwalkbdvz.p013j

com.didwalkbdvz.p047t

com.didwalkbdvz.p023h

com.didwalkbdvz.p022u

com.didwalkbdvz.p088o

com.didwalkbdvz.gcrmmlnbrstm

com.didwalkbdvz.ocmlrcmhpxawgo

com.didwalkbdvz.fbmwftoxouwoslq

com.didwalkbdvz.svfpwxyvacee

com.didwalkbdvz.iwpemdewxit

com.didwalkbdvz.ytdyqiiicpr

Android Permissions

8b661478539c2d037c3a6cbdb595c3b55097927d2dad338c96bcafd8926e91fe.apk