5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d[.]zip

Sharing

Copy URL Twitter E-mail

Reason

error processing APK: binary.Read: invalid type [2]uint16

General

Target
5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.zip
Size 16.2MB
Sample260820-xhxf4stdpc
SHA256 4c1eb69ed647e01ab077872596146301d551ef7bba1ea411aae7e7a5e73e1077
MD5 88c5bdffecdfe7884a99b61df1594889
SHA1 36688be9741196500e2cae5465c74958f231b219
SHA512 4d2c0559e147d993ad7b56e2f6e2a7d9e2c7acd765ce3e634eca4cee9e8bb7a5c38ab13659964f3b0effe6d962da7c4c25606a31276dfcabe2100adf57d79f9f
SSDEEP 393216:mRsrG3WKfBjKUR5jmBLgJXBLBkBlD0X6QLRZRLFs0+2+487KXso:m6rG3WIdLyLcRdW2XxRZ3s5uP
TLSH
T16B073372700D846BCB6926FE8B0BBEA4A4D378F38D7C16E458ED79DF50C08C56993285
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.apk

File Explorer

5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.zip

.zip 16.2MB
5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.apk

.apk 17.0MB

5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.zip

SHA256 4c1eb69ed647e01ab077872596146301d551ef7bba1ea411aae7e7a5e73e1077
MD5 88c5bdffecdfe7884a99b61df1594889
SHA1 36688be9741196500e2cae5465c74958f231b219
SHA512 4d2c0559e147d993ad7b56e2f6e2a7d9e2c7acd765ce3e634eca4cee9e8bb7a5c38ab13659964f3b0effe6d962da7c4c25606a31276dfcabe2100adf57d79f9f
SSDEEP 393216:mRsrG3WKfBjKUR5jmBLgJXBLBkBlD0X6QLRZRLFs0+2+487KXso:m6rG3WIdLyLcRdW2XxRZ3s5uP
TLSH
T16B073372700D846BCB6926FE8B0BBEA4A4D378F38D7C16E458ED79DF50C08C56993285
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d.apk

SHA256 5b8e04cf2b647df686f9be2fc3186cdcc070dff5ba772fb9848c8cd0f2a5427d
MD5 5a379d50f81158b0e239d82c70223a5a
SHA1 ac304635b9aef721a3035c70950ca67f1d6f13dd
SHA512 30b5d91cad35f0be25d248292bed175ba1558e67c5f21ffa10a4e8f1f4f3a1f1510a2593623ce03a0ee58144f339c40c0b8dd1db9ecf255603917797c732dfbb
SSDEEP 393216:pPLgXV+AOhqcxmq/EZMIM/rLr9o6hwaxaneAu0AW8OsXq:NLUM06mq/xIM/rNo2AneT5D6
TLSH
T15C07235BF32C942FC57754328EBA6322419B0147CA83AF57FA54911C1AABAC85F1EFC4
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

File Signature issue

Digest

6d060bd0c479a52d99f02d788c87b5ebe3b18ebbc4d7ed88c9319b31332dc09c7b36fb2c2c122d5299583354f92919b0d756eeeab84e5b6be4f29b37bd04bc37

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.cleanfile.bigkits.vepro

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.cleanfile.bigkits.vepro.loading.LoadingActivity

android.intent.action.MAIN

com.cleanfile.bigkits.vepro.prompt.FloatPromptActivity

com.cleanfile.bigkits.vepro.picture.PictureCompressedActivity

com.mbridge.msdk.activity.MBCommonActivity

com.cleanfile.bigkits.vepro.picture.compressing.PictureCompressingActivity

com.cleanfile.bigkits.vepro.hint.HintFolderActivity

com.ironsource.sdk.controller.ControllerActivity

com.cleanfile.bigkits.vepro.prompt.UrlPromptActivity

com.cleanfile.bigkits.vepro.scan.ScanActivity

com.applovin.mediation.MaxDebuggerTestModeNetworkActivity

com.facebook.CustomTabMainActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity

com.cleanfile.bigkits.vepro.hint.UninstallHintActivity

com.google.android.libraries.ads.mobile.sdk.common.AdActivity

com.cleanfile.bigkits.vepro.memory.MemoryUsageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.applovin.mediation.MaxDebuggerAdUnitDetailActivity

com.applovin.mediation.MaxDebuggerActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.applovin.mediation.MaxDebuggerTcfStringActivity

com.applovin.mediation.MaxDebuggerCmpNetworksListActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.cleanfile.bigkits.vepro.access.FileAccessActivity

com.ironsource.mediationsdk.testSuite.TestSuiteActivity

com.cleanfile.bigkits.vepro.main.MainActivity

android.intent.action.MAIN

com.cleanfile.bigkits.vepro.device.DeviceInfoActivity

com.applovin.mediation.MaxDebuggerDetailActivity

com.vungle.ads.internal.ui.VungleActivity

com.cleanfile.bigkits.vepro.access.UsageAccessActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.mbridge.msdk.out.LoadingActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.cleanfile.bigkits.vepro.prompt.AccessPromptActivity

com.cleanfile.bigkits.vepro.guide.GuideActivity

com.applovin.adview.AppLovinFullscreenActivity

com.cleanfile.bigkits.vepro.file.BigFileCleanerActivity

com.cleanfile.bigkits.vepro.settings.SettingsActivity

com.cleanfile.bigkits.vepro.usage.AppUsageActivity

com.facebook.ads.AudienceNetworkActivity

com.applovin.sdk.AppLovinWebViewActivity

com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity

com.cleanfile.bigkits.vepro.app.AppManagerActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.cleanfile.bigkits.vepro.result.ResultActivity

com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity

com.cleanfile.bigkits.vepro.picture.PictureCompressActivity

com.cleanfile.bigkits.vepro.access.FloatAccessActivity

com.applovin.creative.MaxCreativeDebuggerActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity

com.ironsource.sdk.controller.InterstitialActivity

com.applovin.mediation.MaxDebuggerMultiAdActivity

com.cleanfile.bigkits.vepro.picture.PictureCompressorActivity

com.applovin.adview.AppLovinFullscreenImmersiveActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.cleanfile.bigkits.vepro.junk.CleanActivity

com.google.android.gms.common.api.GoogleApiActivity

com.applovin.mediation.MaxDebuggerUnifiedFlowActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.cleanfile.bigkits.vepro.guide.FloatGuideActivity

com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity

com.cleanfile.bigkits.vepro.reason.UninstallReasonActivity

com.cleanfile.bigkits.vepro.start.StartActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

com.applovin.mediation.MaxDebuggerAdUnitsListActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.cleanfile.bigkits.vepro.exit.ExitActivity

com.applovin.mediation.MaxDebuggerTcfInfoListActivity

com.unity3d.services.ads.adunit.AdUnitActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.cleanfile.bigkits.vepro.traffic.NetworkTrafficActivity

com.cleanfile.bigkits.vepro.scan.JunkScanActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.pairip.licensecheck.LicenseActivity

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

com.cleanfile.bigkits.vepro.remove.NotificationRemoveReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.cleanfile.bigkits.vepro.status.StatusReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.TIME_TICK android.intent.action.USER_PRESENT android.intent.action.BATTERY_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

com.mbridge.msdk.foundation.same.broadcast.NetWorkChangeReceiver