zest[.]voyager[.]falcon[.]apk

General

Target
zest.voyager.falcon.apk
Size 5.8MB
Sample260822-1tfvaazdkd
SHA256 c55d0672880e00cc69777be9836ce9cabcda783f080b29cf912b0d1f6f587837
MD5 e20ce633db159ecdd19f40f4f1305e83
SHA1 4658d681862ee8a4e05601f9f3806569f201d5f5
SHA512 293ffe9f9b98eda8acfa9c55c81ecff4e549a2da659e6003e2de589f1267e3f82ae5b0f5660ce3785d184828b7cab65e33c43a6ab038c0a8a276f962b1d7a951
SSDEEP 98304:8f/S2XSGrO3TCqmury6lfESGY08gtIlZo/KrrCGE8ayWS:QS8S1TCqzrZEXYoUqbS
TLSH
T14356E08BFB44A96AC0F753B64536532245474D268B83D7835E58723C28BB6D07F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
zest.voyager.falcon.apk

File Explorer

zest.voyager.falcon.apk

.apk 5.8MB

zest.voyager.falcon.apk

SHA256 c55d0672880e00cc69777be9836ce9cabcda783f080b29cf912b0d1f6f587837
MD5 e20ce633db159ecdd19f40f4f1305e83
SHA1 4658d681862ee8a4e05601f9f3806569f201d5f5
SHA512 293ffe9f9b98eda8acfa9c55c81ecff4e549a2da659e6003e2de589f1267e3f82ae5b0f5660ce3785d184828b7cab65e33c43a6ab038c0a8a276f962b1d7a951
SSDEEP 98304:8f/S2XSGrO3TCqmury6lfESGY08gtIlZo/KrrCGE8ayWS:QS8S1TCqzrZEXYoUqbS
TLSH
T14356E08BFB44A96AC0F753B64536532245474D268B83D7835E58723C28BB6D07F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

1234

File Signature issue

Digest

50c2944624ab68ef18a7c5bae8f0e38051ea6ec379b1a2c2f9f0460eb3993651

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

zest.voyager.falcon

zest.voyager.falcon.Splasher

zest.voyager.falcon.HomeSIM

android.intent.action.MAIN

zest.voyager.falcon.HomeWallp

android.intent.action.MAIN

zest.voyager.falcon.HomeSmsung

android.intent.action.MAIN

zest.voyager.falcon.PlayS

android.intent.action.MAIN

zest.voyager.falcon.islanddbrvfhhx

zest.voyager.falcon.pantheriuwusvt

zest.voyager.falcon.unforgettableznczpiwt

zest.voyager.falcon.majesticsnhhhpo

zest.voyager.falcon.hiddenoajbntc

zest.voyager.falcon.picturecjkerhxgj

zest.voyager.falcon.dynamojkzucqfbprbn

zest.voyager.falcon.speakit

zest.voyager.falcon.journeyhgvmemytrr

zest.voyager.falcon.battlejnpmedipfk

zest.voyager.falcon.highwayjslyyynpy

zest.voyager.falcon.Toastit

zest.voyager.falcon.dramaticuvvekpeyp

zest.voyager.falcon.RequestAdm

zest.voyager.falcon.Inpututensiluahakco

zest.voyager.falcon.boulderpklvvytpkhecig

zest.voyager.falcon.packageisrvyakrmx

zest.voyager.falcon.outsideidlhlyihnlq

zest.voyager.falcon.obsidianwmtasub

zest.voyager.falcon.travelvjdjtfgp

zest.voyager.falcon.utensiluahakco

zest.voyager.falcon.elasticgllatygfg

zest.voyager.falcon.tofront

zest.voyager.falcon.almondxgptjnemhqziezp

zest.voyager.falcon.fableksotibsnt

zest.voyager.falcon.CallBacker

zest.voyager.falcon.ignitebdefsvdazmra

zest.voyager.falcon.alarme

AppAlarm

zest.voyager.falcon.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

zest.voyager.falcon.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

zest.voyager.falcon.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

zest.voyager.falcon.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

zest.voyager.falcon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

zest.voyager.falcon.apk

File Signature issue

zest.voyager.falcon.Splasher

zest.voyager.falcon.HomeSIM

zest.voyager.falcon.HomeWallp

zest.voyager.falcon.HomeSmsung

zest.voyager.falcon.PlayS

zest.voyager.falcon.islanddbrvfhhx

zest.voyager.falcon.pantheriuwusvt

zest.voyager.falcon.unforgettableznczpiwt

zest.voyager.falcon.majesticsnhhhpo

zest.voyager.falcon.hiddenoajbntc

zest.voyager.falcon.picturecjkerhxgj

zest.voyager.falcon.dynamojkzucqfbprbn

zest.voyager.falcon.speakit

zest.voyager.falcon.journeyhgvmemytrr

zest.voyager.falcon.battlejnpmedipfk

zest.voyager.falcon.highwayjslyyynpy

zest.voyager.falcon.Toastit

zest.voyager.falcon.dramaticuvvekpeyp

zest.voyager.falcon.RequestAdm

zest.voyager.falcon.Inpututensiluahakco

zest.voyager.falcon.boulderpklvvytpkhecig

zest.voyager.falcon.packageisrvyakrmx

zest.voyager.falcon.outsideidlhlyihnlq

zest.voyager.falcon.obsidianwmtasub

zest.voyager.falcon.travelvjdjtfgp

zest.voyager.falcon.utensiluahakco

zest.voyager.falcon.elasticgllatygfg

zest.voyager.falcon.tofront

zest.voyager.falcon.almondxgptjnemhqziezp

zest.voyager.falcon.fableksotibsnt

zest.voyager.falcon.CallBacker

zest.voyager.falcon.ignitebdefsvdazmra

zest.voyager.falcon.weathercgoivyul

zest.voyager.falcon.cloverlansdherxwue

zest.voyager.falcon.moonlitmjrzkvvfebn

zest.voyager.falcon.gadgetxlhrhimcyfpzy

zest.voyager.falcon.impressuuvthpgsr

zest.voyager.falcon.dramaticalabmjuas

zest.voyager.falcon.midnightxbhabsflr

zest.voyager.falcon.illusionvfmdpmcf

zest.voyager.falcon.eclipseolvyezbiwv

zest.voyager.falcon.minserv

.uniformrfmcjsnnkxmv

zest.voyager.falcon.DownloadForegroundService

zest.voyager.falcon.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

zest.voyager.falcon.alarme

zest.voyager.falcon.BootReceiver

zest.voyager.falcon.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

zest.voyager.falcon.apk