LuckyPatchers[.]com_Official_Installer_12[.]10[.]8[.]apk

General

Target
LuckyPatchers.com_Official_Installer_12.10.8.apk
Size 12.0MB
Sample260820-2hb8dsgb35
SHA256 173d45974a49cf1be45bc8d634dc7402feb238aa658c382752ebf82043cb354d
MD5 0c8eb40005f2e2fbcbe275c05d95a9de
SHA1 0fcc1d49a7d4902842b0c03b5307f815867ffd7f
SHA512 a6b657df41f18749e4f6f6728e6ddc7b686676d270c735d8f2ccef4168cf3795949faa9e9862e100e8137d3c2ff464695d57b986713b774a7ea871d1d741dcaf
SSDEEP 196608:f4TSu7FWbCOIjdGWuJ0SIsNzkuz3svdAa+9WGQT:tMFWbmjdfUpo83svdA19I
TLSH
T1B9C6DFEF32DC252AC43442B7C88DB47966A74D7A5F43DA826C08372C34B36F45B496E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
LuckyPatchers.com_Official_Installer_12.10.8.apk

File Explorer

LuckyPatchers.com_Official_Installer_12.10.8.apk

.apk 12.0MB

LuckyPatchers.com_Official_Installer_12.10.8.apk

SHA256 173d45974a49cf1be45bc8d634dc7402feb238aa658c382752ebf82043cb354d
MD5 0c8eb40005f2e2fbcbe275c05d95a9de
SHA1 0fcc1d49a7d4902842b0c03b5307f815867ffd7f
SHA512 a6b657df41f18749e4f6f6728e6ddc7b686676d270c735d8f2ccef4168cf3795949faa9e9862e100e8137d3c2ff464695d57b986713b774a7ea871d1d741dcaf
SSDEEP 196608:f4TSu7FWbCOIjdGWuJ0SIsNzkuz3svdAa+9WGQT:tMFWbmjdfUpo83svdA19I
TLSH
T1B9C6DFEF32DC252AC43442B7C88DB47966A74D7A5F43DA826C08372C34B36F45B496E9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2e2f1287dbeea25b1b13068779ed2ec90050c3b05331b77678b54dfb990b257e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

ru.aaaaabar.installer

ru.aaaaabar.installer.PackageChangeReceiver

android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_CHANGED

ru.aaaaabar.installer.OnAlarmReceiver

com.ui.OnAlarmReceiver.ACTION_WIDGET_RECEIVER

ru.aaaaabar.installer.BinderBootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MEDIA_SCANNER_FINISHED android.intent.action.MEDIA_SCANNER_STARTED android.intent.action.MEDIA_MOUNTED android.intent.action.MEDIA_EJECT android.intent.action.MEDIA_UNMOUNTED android.intent.action.MEDIA_REMOVED

ru.aaaaabar.installer.OnBootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE android.intent.action.UMS_DISCONNECTED android.intent.action.POWER_DISCONNECTED android.intent.action.MY_PACKAGE_REPLACED

com.widgets.Widget5

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget5.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget5.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget4

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget4.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget4.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget1

android.appwidget.action.APPWIDGET_UPDATE

com.widgets.Widget3

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget3.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget3.ACTION_WIDGET_RECEIVER_Updater

com.widgets.Widget2

android.appwidget.action.APPWIDGET_UPDATE com.ui.widgets.Widget2.ACTION_WIDGET_RECEIVER com.ui.widgets.Widget2.ACTION_WIDGET_RECEIVER_Updater

Android Permissions

LuckyPatchers.com_Official_Installer_12.10.8.apk

Permissions

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_SUPERUSER

android.permission.INTERNET

android.permission.VIBRATE

com.android.vending.CHECK_LICENSE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.READ_EXTERNAL_STORAGE

com.huawei.permission.external_app_settings.USE_COMPONENT

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.Ad_ID

com.android.launcher.permission.INSTALL_SHORTCUT

com.google.android.gms.permission.AD_ID

LuckyPatchers.com_Official_Installer_12.10.8.apk

File Signature issue

ru.aaaaabar.installer.MainActivity

ru.aaaaabar.installer.SetPrefs

ru.aaaaabar.installer.BinderActivity

com.google.android.finsky.billing.iab.BuyActivity

com.widgets.WidgetConfigureActivity1

com.widgets.WidgetConfigureActivity2

ru.aaaaabar.installer.NotificationService

ru.aaaaabar.installer.PatchService

com.google.android.finsky.billing.iab.InAppBillingService

com.google.android.finsky.services.LicensingService

com.services.TestService

com.services.MyService

ru.aaaaabar.installer.PackageChangeReceiver

ru.aaaaabar.installer.OnAlarmReceiver

ru.aaaaabar.installer.BinderBootReceiver

ru.aaaaabar.installer.OnBootReceiver

com.widgets.Widget5

com.widgets.Widget4

com.widgets.Widget1

com.widgets.Widget3

com.widgets.Widget2

androidx.core.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

LuckyPatchers.com_Official_Installer_12.10.8.apk

File Signature issue

ru.aaaaabar.installer.MainActivity

ru.aaaaabar.installer.SetPrefs

ru.aaaaabar.installer.BinderActivity

com.google.android.finsky.billing.iab.BuyActivity

com.widgets.WidgetConfigureActivity1

com.widgets.WidgetConfigureActivity2

ru.aaaaabar.installer.NotificationService

ru.aaaaabar.installer.PatchService

com.google.android.finsky.billing.iab.InAppBillingService

com.google.android.finsky.services.LicensingService

com.services.TestService

com.services.MyService

ru.aaaaabar.installer.PackageChangeReceiver

ru.aaaaabar.installer.OnAlarmReceiver

ru.aaaaabar.installer.BinderBootReceiver

ru.aaaaabar.installer.OnBootReceiver

com.widgets.Widget5

com.widgets.Widget4

com.widgets.Widget1

com.widgets.Widget3

com.widgets.Widget2

androidx.core.content.FileProvider

Android Permissions

LuckyPatchers.com_Official_Installer_12.10.8.apk