ФOТO АPХИВ 07[.]08[.]2026[.]apk

Resubmissions

22/08/2026, 19:08

260822-xteqfatsbv7

22/08/2026, 14:02

260822-rcfzaafb997

Sharing

Copy URL Twitter E-mail

General

Target
ФOТO АPХИВ 07.08.2026.apk
Size 862KB
Sample260822-rcfzaafb99
SHA256 90d5b9dc62984620cfaf2e18a31451fc7c1eb56a701b01efdcd4bafea55ee6b7
MD5 f855ada080e866281f405db15652d2eb
SHA1 a2b63738ab73c4e8a73f9fce96bc482c70f8a209
SHA512 feacb9915449bec1fe163839b661f35affe777dad4cbd1d2b1be9baa600a876534fd8f0c2679b495e8b967f9a4041f8b9fce9ecd7ce7963bfb74040616955fb1
SSDEEP 24576:iu5rpU3yKQGOwoX8lWYEjJC3F+7QHzFLIgTfff1fffP:i4r3tGOv8lWYEjwckHZLIu
TLSH
T1FD150263A70879DFE9FF433FC9434AF912324D368643A59F4650B2A41AB7369AF09580
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ФOТO АPХИВ 07.08.2026.apk

File Explorer

ФOТO АPХИВ 07.08.2026.apk

.apk 862KB

ФOТO АPХИВ 07.08.2026.apk

SHA256 90d5b9dc62984620cfaf2e18a31451fc7c1eb56a701b01efdcd4bafea55ee6b7
MD5 f855ada080e866281f405db15652d2eb
SHA1 a2b63738ab73c4e8a73f9fce96bc482c70f8a209
SHA512 feacb9915449bec1fe163839b661f35affe777dad4cbd1d2b1be9baa600a876534fd8f0c2679b495e8b967f9a4041f8b9fce9ecd7ce7963bfb74040616955fb1
SSDEEP 24576:iu5rpU3yKQGOwoX8lWYEjJC3F+7QHzFLIgTfff1fffP:i4r3tGOv8lWYEjwckHZLIu
TLSH
T1FD150263A70879DFE9FF433FC9434AF912324D368643A59F4650B2A41AB7369AF09580
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8ff51f15f90e1cda5c3e597d7fb848a4d56808205c508c6052c0c56b785fa459

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MAPS.ME,OU=MapsMe,O=MapsMe,L=Moscow,ST=RU,C=RU

ru.kbr1xi.elk8z6

x.mf.SAxgm8g9kgkxbnzxf

ru.kbr1xi.elk8z6.mf.action.zj480rm1v27hbhje3kb62uw8

x.mf.SVg07rdkw4ldyo70n

ru.kbr1xi.elk8z6.mf.action.hv21l13rizi6tixmuxf1henu

x.mf.SD55v5l9trwrdctl3

ru.kbr1xi.elk8z6.mf.action.a37rri8q2pxtwk1dmtyz2aoc

cg.bv.ag

android.accounts.AccountAuthenticator

cg.x

android.service.notification.NotificationListenerService

x.mf.SR7zshxro5vdat0on

ru.kbr1xi.elk8z6.mf.action.nzpa75s6kj901kcqch6d8te0

cg.m

android.intent.action.SEND RESTART_SERVICE

x.mf.SSr6lbsbmab4vqjr3

ru.kbr1xi.elk8z6.mf.action.cdhr7nslens0of6d5ghn6ssf

x.mf.SUpc8a9h655mjm758

ru.kbr1xi.elk8z6.mf.action.u3gf7vo0n39y9n0llcshc6jq

cg.bv.ai

android.content.SyncAdapter

cg.aw.af

android.intent.action.RESPOND_VIA_MESSAGE

cg.aw.z

x.mf.SXcqenf8ldj2jn7jr

ru.kbr1xi.elk8z6.mf.action.taphds9f0041zktq6uumt3f4

x.mf.SM163psilzssencqh

ru.kbr1xi.elk8z6.mf.action.x8rc0d5w0l1t24fl76cjcugr

x.mf.SVz5h1gqxzz3oy43p

ru.kbr1xi.elk8z6.mf.action.lb4xqwzbgefuswuwb36vuibs

x.mf.SDddxynq2qy351cfx

ru.kbr1xi.elk8z6.mf.action.dsaxrlvv86r82nxefxyjgy6l

x.mf.SQiept31g7eujazap

ru.kbr1xi.elk8z6.mf.action.f8kkj7dlfe4me5jvy89l1t21

x.mf.SKl4e4bpnvkihdnji

ru.kbr1xi.elk8z6.mf.action.qk9fejajekmn78hh3t52s8si

x.mf.RSj2jrn15guewqn64

ru.kbr1xi.elk8z6.mf.action.sjojgy8kdkszxnelv7gmav7d

cg.ab

android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.MY_PACKAGE_REPLACED zloy.RESTART_SERVICE android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED android.intent.action.USER_UNLOCKED android.intent.action.SCREEN_ON android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.MIUI_BATTERY_FEATURE_CHANGE miui.intent.action.POWER_MODE_CHANGED miui.intent.action.OP_AUTO_START android.intent.action.USER_PRESENT com.huawei.intent.action.POWER_MODE_CHANGED huawei.intent.action.POWER_MODE_CHANGED com.oplus.battery.OplusBatteryAction com.coloros.safecenter.intent.action.STARTUP_APP com.oppo.safe.permission.startup.STARTUP_APP com.samsung.android.sm.action.ACTION_REFRESH com.samsung.android.intent.action.SIOP_LEVEL_CHANGED com.vivo.permissionmanager.intent.action.STARTUP_APP com.iqoo.secure.intent.action.STARTUP_APP com.transsion.action.UPDATE_POWER_SAVE_MODE com.transsion.permission.AUTOSTART com.cyin.himgr.autostart.intent.action.ADD

x.mf.RXv773gv4pfadfdoo

ru.kbr1xi.elk8z6.mf.action.jf09fclwgkc83sksszcg0zhi

x.mf.RCaw8wea2o4rzftb1

ru.kbr1xi.elk8z6.mf.action.zggy4qwdx9gh6kio6bo2c8aw

x.mf.ROk8akemdag9hrwu6

ru.kbr1xi.elk8z6.mf.action.iiokssb9rkfcr5go74oj7fs5

x.mf.RU4yo7p68q498qtaw

ru.kbr1xi.elk8z6.mf.action.bfn9iuxsnl68z7jt2x4qnlru

x.mf.RQcxq18yg2f8y8ea7

ru.kbr1xi.elk8z6.mf.action.q6kfim984rwqnog8ah3nx088

cg.aw.aq.aa

zloy.SERVICE_MONITOR

cg.aw.bx.bt.j

SMS_DELIVERED SMS_SENT

x.mf.RU0fm0pbzmwg256c8

ru.kbr1xi.elk8z6.mf.action.rpcl15zh33kgef96ckgu220s

cg.cc.ao

zloy.WATCHDOG_PING

cg.aw.an

android.provider.Telephony.WAP_PUSH_DELIVER

x.mf.RZ2cbxsq9mwp3gzur

ru.kbr1xi.elk8z6.mf.action.vnbxect6qg0nb7onctgsgh6n

cg.aw.bx.bt.ae

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

x.mf.RWnu07c7pa20h3scw

ru.kbr1xi.elk8z6.mf.action.ved8dn7m671n2gvwbfcqjqms

x.mf.RH7451x1kpoh340h1

ru.kbr1xi.elk8z6.mf.action.w0ahheudbzdvjw12vlfp4c3a

x.mf.RY8mpso1u4cpyrobl

ru.kbr1xi.elk8z6.mf.action.lmudrux7diiy10rq9dycubqw

x.mf.ROkdxmpigv50ocx4j

ru.kbr1xi.elk8z6.mf.action.blz2ojgl4c27ddyvyycfescs

Android Permissions

ФOТO АPХИВ 07.08.2026.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_MMS

android.permission.USE_EXACT_ALARM

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.RECEIVE_WAP_PUSH

ru.kbr1xi.elk8z6.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.READ_SYNC_SETTINGS

android.permission.READ_PHONE_NUMBERS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

android.permission.WRITE_SYNC_SETTINGS

android.permission.POST_NOTIFICATIONS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ФOТO АPХИВ 07.08.2026.apk

File Signature issue

cg.aw.ac

x.mf.ARnnhw6ufhmenc9kh

x.mf.AHj0opf7qusx379bk

x.mf.AWsndqjn7qgttbrhn

cg.t

x.mf.AAej6q1gibgnrz2up

x.mf.APellg8zjg6yim9yb

x.mf.AP7ct36xfyrbyhkfz

x.mf.AV3r6g725ztv4t4t1

x.mf.ANkwcblonjjmvuyze

x.mf.SAxgm8g9kgkxbnzxf

x.mf.SVg07rdkw4ldyo70n

x.mf.SD55v5l9trwrdctl3

cg.bv.ag

cg.x

x.mf.SR7zshxro5vdat0on

cg.m

x.mf.SSr6lbsbmab4vqjr3

x.mf.SUpc8a9h655mjm758

cg.bv.ai

cg.aw.af

cg.aw.z

x.mf.SXcqenf8ldj2jn7jr

x.mf.SM163psilzssencqh

x.mf.SVz5h1gqxzz3oy43p

x.mf.SDddxynq2qy351cfx

x.mf.SQiept31g7eujazap

x.mf.SKl4e4bpnvkihdnji

x.mf.RSj2jrn15guewqn64

cg.ab

x.mf.RXv773gv4pfadfdoo

x.mf.RCaw8wea2o4rzftb1

x.mf.ROk8akemdag9hrwu6

x.mf.RU4yo7p68q498qtaw

x.mf.RQcxq18yg2f8y8ea7

cg.aw.aq.aa

cg.aw.bx.bt.j

x.mf.RU0fm0pbzmwg256c8

cg.cc.ao

cg.aw.an

x.mf.RZ2cbxsq9mwp3gzur

cg.aw.bx.bt.ae

x.mf.RWnu07c7pa20h3scw

x.mf.RH7451x1kpoh340h1

x.mf.RY8mpso1u4cpyrobl

x.mf.ROkdxmpigv50ocx4j

x.mf.PZq2r8eksae4adcrz

cg.bv.ah

x.mf.PWjxa12fphctybbb6

x.mf.PM7ywa8ekft3i17ro

x.mf.PN2zf9g6m0j2ecq04

Android Permissions

ФOТO АPХИВ 07.08.2026.apk