4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.zip
- SHA256 7ee0463baf7a43562aa8374e5023cf644925849963bee72fe0337fa85bf256da
Password
infected
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk
Resource
android-x86-arm-20260325-en
android-9-x86
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk
Resource
android-x64-20260325-en
android-10-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
payload.apk
Resource
android-x86-arm-20260325-en
android-9-x86
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
payload.apk
Resource
android-x64-20260325-en
android-10-x64
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
payload.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
8 signatures
150 seconds
General
- Target 4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.zip
- Size 28.3MB
- Sample260819-wh5l2sstd1
- SHA256 7ee0463baf7a43562aa8374e5023cf644925849963bee72fe0337fa85bf256da
- MD5 b3245e33f952c40689ac75305bc245cb
- SHA1 0b8c323845e970ac038d63e9bd1edcfbf8ff8d33
- SHA512 78994f593ead699a31d3e5274b2890c9b3e578abafe3162726aafaceec849001a5c9f39c64d104af2b48be38d3d00566dcda0f879e554e9ee65860a3da6d432c
- SSDEEP 786432:V3WZ3/TPiDyOmkqhNwT/sQ10PARNuaKCX+XSTMbytQ:V3WZPTTRhCl1EhLnbytQ
- TLSH T13F5733F5E9169E51697463CF9004CE2B376E56BA4F23E8A09F35C0D3A64DA72F180E0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 2 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows an app to post notifications. android.permission.POST_NOTIFICATIONS - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk unpack002/payload.base
File Explorer
-
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.zip.zip 28.3MB
-
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk.apk 29.9MB
-
payload.base.apk 13.7MB
4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk
- SHA256 4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff
- MD5 e673f474ef3fbfb60c9ae9c32829d4bf
- SHA1 44c4be3ecc83a30db2483eb9895e30ec48fb6eaf
- SHA512 903ab32139331c0fcd72bdaf3f99081252a2622861f43be495a1fa6ac695757b4906bce36dc14cdedde8001346dadb7c301ce1e3cacb1cea1c4056c4bcda7c3e
- SSDEEP 786432:ctCiCLBpRFLh2AeNlUCwCeoJeZcFQGUBuLbXOQgJ:ctCiCLBTFLhpeNlBwCeoJEcFQGKuLLUJ
- TLSH T1DB67231AEFC87A6BC5F74236587A55254C430C44838BCA82EE9A752C2C776F1B71DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
84943a588822477c3b3c608b65e87501c063d3c392bb58d066fac08b06f14dcf
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Subject
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Serial Number
04:5f:f9:a3
Issuer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Timespan
Apr 25, 2021 - Aug 26, 3020
com.jojo.sellfupdater
com.jojo.sellfupdater.MainActivity
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
com.jojo.sellfupdater.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.POST_NOTIFICATIONS
com.jojo.sellfupdater.MainActivity
android.intent.action.MAIN
com.jojo.sellfupdater.PermissionObserverService
com.jojo.sellfupdater.InstallationReceiver
com.jojo.sellfupdater.INSTALL_RESULT
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.startup.InitializationProvider
payload.base
- SHA256 5df90a0393f61cfbb3d7893801428ced22516890828da35fba93d4ec47c42725
- MD5 b6b2ded385e7cca688beb3618aa9d643
- SHA1 7af30b6113a329f9ab0e6a72e0509624698330c4
- SHA512 d2f5457d81fdbbbf252b7a2806d5c290c79039b25352300cd0f0ca4217cce6cfcc8bc5c1cfc087ee7a16d0c8d57208fa43cb7b6bf970f03c3a2fd84677955dc3
- SSDEEP 393216:PYB8tMONZWIsH53s7gYB8t8wYB8tDYB8tAoUUMyjeYB8t5/UlZ:ghONZUcddf81MmjtlZ
- TLSH T1ADE6120AEFC87A6BC5F35236487A59294C430D4447C7D983AD99752C18BB6F0BB1EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
7b361ce7cba5346428ba8161088bb10f762f687318747a394fa1652c1483fabb
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Subject
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Serial Number
04:5f:f9:a3
Issuer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
Timespan
Apr 25, 2021 - Aug 26, 3020
com.kisa.octagonpanel
com.kisa.octagonpanel.MainActivity
android.permission.READ_SMS
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.SEND_SMS
android.permission.INTERNET
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
com.kisa.octagonpanel.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.QUERY_ALL_PACKAGES
android.permission.BIND_VPN_SERVICE
android.permission.ACCESS_NETWORK_STATE
com.kisa.octagonpanel.MainActivity
android.intent.action.MAIN
com.kisa.octagonpanel.onboarding.OnboardingActivity
com.kisa.octagonpanel.ConnectionSettingsActivity
com.kisa.octagonpanel.overlay.GateOverlayActivity
com.kisa.octagonpanel.accessibility.WardAccessibilityService
android.accessibilityservice.AccessibilityService
com.kisa.octagonpanel.service.WardForegroundService
com.kisa.octagonpanel.receiver.SmsReceiver
android.provider.Telephony.SMS_RECEIVED
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION