com.alightcreative.motion_5.0.273.1028425.xapk
- SHA256 ca666f974bc5d420471c9a1596aca9f5daf105f63f33e72553c20794c45adbda
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
com.alightcreative.motion.apk
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
config.arm64_v8a.jar
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
config.en.jar
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.xxhdpi.jar
Resource
android-35-x64-arm64-20260325-en
android-15-x64
0 signatures
150 seconds
General
- Target com.alightcreative.motion_5.0.273.1028425.xapk
- Size 191.2MB
- Sample260820-ldm64ace22
- SHA256 ca666f974bc5d420471c9a1596aca9f5daf105f63f33e72553c20794c45adbda
- MD5 eadbc215d78b1e2fb203a3c80950785c
- SHA1 7f146439d519705f273d05e881a55e11f9ae7acb
- SHA512 3fe882c9c864a3534e5f1e588bbd9b02a4cf2e26f21cde2fac8f7a665ecb56a890db5387e6a4c0611ce40a5dfcbc2f7c92884704044c01fd130d26ed06bc6bf9
- SSDEEP 1572864:NiJ0l+aGw4fVbN/VX342DOSEO3QREfR8qDY36DhUflcKMYKzy0:caGTtlVX3xDkRKZD4WKnKW0
- TLSH T1B8A8AEC2EF490C33D68AB57C61F64F60F7316949C24693932005B7B4ADA22D97F7A2B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 6 IoCs
description ioc Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker. android.permission.READ_MEDIA_VISUAL_USER_SELECTED Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.xxhdpi.apk - Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.xxhdpi.apk - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.xxhdpi.apk
File Explorer
-
com.alightcreative.motion_5.0.273.1028425.xapk.zip 191.2MB
-
com.alightcreative.motion.apk.apk 137.4MB
-
config.arm64_v8a.apk.jar 50.9MB
-
config.en.apk.jar 240KB
-
config.xxhdpi.apk.jar 2.7MB
-
manifest.json1KB
com.alightcreative.motion.apk
- SHA256 dac82ea99bb5456c9ea6c305aa39e407c7327b9822a17c5ac9a1676dd79e169c
- MD5 4dfdbcfebd1238e1fa9c5fbcfe84e53b
- SHA1 6e8efda07c2f75509d12aaab0ee40ed350bd2d02
- SHA512 7cd732584943f4ebf2f69e2cd75c44bf9c2daf677a9eb49d38a7af14733540ac2f681038b831d96b90f0ae4e034c42c67f90d23af490e6cadf3c9e136d4e6c58
- SSDEEP 1572864:tiJ0l+aGw4fVbN/VX342DOSEO3QREfR8qDY36DhUfL:8aGTtlVX3xDkRKZD4z
- TLSH T17D688CC1DF410833D5AEB93935FA8F20FB21AA49D38B53521008B7B4ADB169A7F751B4
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
94cff1fbf0b899216db4eebd6a6e8833f5636130b603b3ca8bcb46fe70c4c85b7d27ad777cfc4bc0ccf024d9d070eb1702fbfb10e954278945ffcd46fcb345a8
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
04:c7:59:84:40:72:e6:5c:16:87:00:31:ea:08:14:43:ab:d6:9f:6d
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Apr 5, 2018 - Apr 5, 2048
com.alightcreative.motion
com.alightcreative.app.motion.activities.main.MainActivity
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.VIBRATE
com.google.android.gms.permission.AD_ID
com.android.vending.BILLING
com.android.vending.CHECK_LICENSE
android.permission.ACCESS_WIFI_STATE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_TOPICS
com.google.android.c2dm.permission.RECEIVE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE
android.permission.FOREGROUND_SERVICE
com.alightcreative.motion.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.alightcreative.app.motion.activities.DeviceMismatchNoticeActivity
com.bendingspoons.uicomponent.opensource.OpenSourceLibrariesActivity
com.alightcreative.monetization.stackedintro.StackedOffersPaywallActivity
com.alightcreative.app.motion.activities.main.MainActivity
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
com.alightcreative.app.motion.activities.EditActivity
com.alightcreative.app.motion.activities.AboutActivity
com.alightcreative.app.motion.activities.SaveToStorageActivity
com.alightcreative.app.motion.activities.ColorPickerActivity
com.alightcreative.app.motion.activities.main.newfeature.NewFeaturePagerActivity
com.facebook.FacebookActivity
com.facebook.CustomTabActivity
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
com.alightcreative.app.motion.activities.SettingsActivity
com.alightcreative.app.motion.activities.mediabrowser.MediaBrowser
com.alightcreative.app.motion.activities.audiobrowser.AudioBrowserActivity
com.alightcreative.importer.xml.ui.ImportActivity
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
com.alightcreative.app.motion.activities.MyAccountActivity
com.alightcreative.app.motion.tutorial.TutorialActivity
com.alightcreative.app.motion.activities.ManageAccountActivity
com.alightcreative.app.motion.activities.AgreeDeleteAccountActivity
com.alightcreative.export.preview.ExportPreviewActivity
com.alightcreative.app.motion.activities.DevSettingsActivity
com.alightcreative.app.motion.activities.effectbrowser.EffectBrowserActivity
com.alightcreative.app.motion.activities.FontBrowserActivity
com.alightcreative.importer.projectpackage.ElementDownloadActivity
com.alightcreative.monetization.ui.PaywallActivity
com.alightcreative.app.motion.activities.survey.SurveyActivity
com.alightcreative.onboarding.ui.OnboardingActivity
com.alightcreative.template.importpreview.ui.TemplateImportPreviewActivity
com.alightcreative.maineditor.presetpreview.ui.PresetPreviewActivity
com.alightcreative.app.motion.activities.creatorprogram.rewardlist.CreatorRewardListActivity
com.alightcreative.app.motion.activities.creatorprogram.redeem.RedeemTokensActivity
com.alightcreative.app.motion.activities.creatorprogram.qas.ui.QAsActivity
com.alightcreative.app.motion.ranking.ui.editprofile.EditProfileActivity
com.bendingspoons.forceupdater.internal.ForceUpdateActivity
com.bendingspoons.injet.ui.InjetPresenterActivity
com.bendingspoons.injet.ui.InjetClearBackgroundPresenterActivity
com.bendingspoons.adorable.internal.HardcodedAdActivity
com.bendingspoons.oracle.secretmenu.RedeemGiftCodeActivity
com.bendingspoons.oracle.OracleLoginActivity
com.bendingspoons.oracle.impl.authentication.OracleAuthLauncherActivity
com.bendingspoons.oracle.impl.authentication.OracleCallbackActivity
android.intent.action.VIEW
com.bendingspoons.concierge.ui.secretmenu.IDsActivity
com.firebase.ui.auth.KickoffActivity
com.firebase.ui.auth.ui.idp.SingleSignInActivity
com.firebase.ui.auth.ui.credentials.CredentialSaveActivity
com.firebase.ui.auth.ui.email.RecoverPasswordActivity
com.firebase.ui.auth.ui.email.EmailActivity
com.firebase.ui.auth.ui.phone.PhoneActivity
com.firebase.ui.auth.ui.idp.WelcomeBackIdpPrompt
com.firebase.ui.auth.ui.email.WelcomeBackPasswordPrompt
com.firebase.ui.auth.ui.email.WelcomeBackEmailLinkPrompt
com.firebase.ui.auth.ui.email.EmailLinkCatcherActivity
com.firebase.ui.auth.ui.email.EmailLinkErrorRecoveryActivity
com.firebase.ui.auth.ui.idp.AuthMethodPickerActivity
com.google.firebase.auth.internal.GenericIdpActivity
android.intent.action.VIEW
com.google.firebase.auth.internal.RecaptchaActivity
android.intent.action.VIEW
androidx.credentials.playservices.HiddenActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.bendingspoons.secretmenu.ui.SecretMenuActivity
com.bendingspoons.secretmenu.ui.items.exit.ExitActivity
com.facebook.CustomTabMainActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.applovin.adview.AppLovinFullscreenActivity
com.applovin.adview.AppLovinFullscreenImmersiveActivity
com.applovin.sdk.AppLovinWebViewActivity
com.applovin.mediation.MaxDebuggerActivity
com.applovin.mediation.MaxDebuggerDetailActivity
com.applovin.mediation.MaxDebuggerMultiAdActivity
com.applovin.mediation.MaxDebuggerAdUnitsListActivity
com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity
com.applovin.mediation.MaxDebuggerAdUnitDetailActivity
com.applovin.mediation.MaxDebuggerCmpNetworksListActivity
com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity
com.applovin.mediation.MaxDebuggerTcfInfoListActivity
com.applovin.mediation.MaxDebuggerTcfStringActivity
com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity
com.applovin.mediation.MaxDebuggerTestModeNetworkActivity
com.applovin.mediation.MaxDebuggerUnifiedFlowActivity
com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity
com.applovin.creative.MaxCreativeDebuggerActivity
com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.gms.ads.AdActivity
com.google.android.gms.ads.OutOfContextTestingActivity
com.google.android.gms.ads.NotificationHandlerActivity
androidx.compose.ui.tooling.PreviewActivity
com.facebook.ads.AudienceNetworkActivity
com.vungle.ads.internal.ui.VungleActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity
com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity
com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore
com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity
com.fyber.inneractive.sdk.activities.FyberReportAdActivity
com.pairip.licensecheck.LicenseActivity
com.google.firebase.components.ComponentDiscoveryService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.android.gms.auth.api.signin.RevocationBoundService
com.applovin.impl.adview.activity.FullscreenAdService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.android.gms.ads.AdService
com.google.firebase.sessions.SessionLifecycleService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.alightcreative.share.ChooserResultReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED
com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver
com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
androidx.core.content.FileProvider
com.firebase.ui.auth.data.client.AuthUiInitProvider
com.applovin.sdk.AppLovinInitProvider
com.google.android.gms.ads.MobileAdsInitProvider
com.google.firebase.provider.FirebaseInitProvider
com.facebook.internal.FacebookInitProvider
androidx.startup.InitializationProvider
com.facebook.ads.AudienceNetworkContentProvider
com.vungle.ads.VungleProvider
com.pairip.licensecheck.LicenseContentProvider
config.arm64_v8a.apk
- SHA256 731e80019dd1788f0d62d42a3673163db7007f02aa82d09b752e333f7dbc191e
- MD5 42c9ab953761f3109ebc4e3c6ae1a340
- SHA1 fde51e32cd13569da23ef9940c174def8feff382
- SHA512 cfebcfc006347e6643b348fb3ddea89a23cbc0296989dfa241707616bad7f791efc53a7249f411f3d2ee06d6ca88a8170b76d48778061862280a309a0997b178
- SSDEEP 393216:7ynGTXqCIMY9Gf9GgtmVsVZ0MrqSAYKkbP/PzMNKqKPk4Pl7:7yUXqRQqVsL0MjAYKkbP/PzMNKqKPRPl
- TLSH T188C78E16E90D6C2ADBC5B5FC468603E0B13534598854E3C73813CA6AED873E9C63F7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
f01984d4661367c0564d0fa67558f2be2ec48cb4
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
04:c7:59:84:40:72:e6:5c:16:87:00:31:ea:08:14:43:ab:d6:9f:6d
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Apr 5, 2018 - Apr 5, 2048
config.en.apk
- SHA256 7001720e01809b86c7e7210ae8042375ab422ef5fdc7457d2444a69efc911e35
- MD5 32ba266aaf2de36d033440de631764d3
- SHA1 45cb43d7926b8836df0e113bfa778b1dd0ff7c90
- SHA512 91b0cb607864ed424df4657b57056dad15c850a1079ef2e9046d2ab2959d28666a7790f9bff2f693f237eac2cb474adfbb477492cbfe89aa6d27c2c7ce588a90
- SSDEEP 768:ErRJrvnOPLShdYshzAjtOFP1/JvHKiOpJ++LL3JTJAhgDaqfp0:ErRJrkmhSshMkF5pxSgwL3FOSaua
- TLSH T17B346046AB52961ECD37C4782C9783552429FD03DE434B07E9B0361C29BF6E1AF962F8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
ccfa8a36756b88582ab769bf9ce115fa7154da1a
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
04:c7:59:84:40:72:e6:5c:16:87:00:31:ea:08:14:43:ab:d6:9f:6d
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Apr 5, 2018 - Apr 5, 2048
config.xxhdpi.apk
- SHA256 46252ad8ddfc8f3d2d86574d1c1ecab4512a072d1c5136a2b74fe864ffe46777
- MD5 a6eaa703ace910dcad31c30de931cc5d
- SHA1 f8ffac1ac9b35616b7ff10fe793c4f3819b54740
- SHA512 a03570f32fd9dd411677d4350f060078823b47d1b0ff2030b54c0fcd7ea804e4356f405273085be256aec0488445d78216e7540473140c119cd999dfd136092c
- SSDEEP 49152:8F5VZPwoGzZGsUnZtkqvU3sVHwx/QP/L3S5JffBPilamc3za4Pj8IH+:KvZIPMZSQHjwrPi8mc3z9j9+
- TLSH T1AAD533F6C229A563DC33C57287B946D261924CC42CA9DF17A229F11EABF3C419E95FC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
850e3101909b8b23d760908bf45174192d77c8f0
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
04:c7:59:84:40:72:e6:5c:16:87:00:31:ea:08:14:43:ab:d6:9f:6d
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Apr 5, 2018 - Apr 5, 2048
manifest.json
- SHA256 1f86aae15accb1eab10c13006aa98672e481c5c6045e19606e294d24d4e2f22b
- MD5 0d4529bddfe11b437b90b64e3c6f4a4a
- SHA1 247facb804908302309e05b589229732c7596c40
- SHA512 9198d93ab7d0d1cb8492f9a2254242ca1a20b60e475abcd0dd254917532cf45ffae828720b13d77ee084bd13b4b3cbbcde927d75134556aa4aa77a4f3705037f
- TLSH T115313B679F394B33A4ACEA52B13C48C84DB90B8312F429CCDE965E61361EC812791FD5
- MD5 SHA1 SHA512 TLSH