Resubmissions

18/08/2026, 12:35

260818-psmqnabk5x7

18/08/2026, 12:30

260818-ppvbbssdlb7

General

  • Target
    Nivo.apk
  • Size 1.6MB
  • Sample260818-ppvbbssdlb
  • SHA256 fd9df391ae0eebb6969c635d1e78a0ea5cf987cb27bd143e0ac58efda6af6c27
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Nivo.apk
    .apk 1.6MB

Nivo.apk

  • SHA256 fd9df391ae0eebb6969c635d1e78a0ea5cf987cb27bd143e0ac58efda6af6c27
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
f26bcf8e170c3230d8f4d7ca355bd2f48cc1a47979e7ab04c8d07dd9cfb090dc
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
com.dcto.pwre

Android Permissions

Nivo.apk

Permissions

com.dcto.pwre.permission.84561DBD28

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.dcto.pwre.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION