SystemWebViewShell[.]apk

General

Target
SystemWebViewShell.apk
Size 4.7MB
Sample260824-k2thcaek71
SHA256 eb52b1fcce1fb8a205065e8c06697901e079dfe290a9af693addb22612c6a95c
MD5 df6ef44ab25e8c30c21f8c90671c1345
SHA1 c38e26bd28bfaf596a5b9eab793424a9dec09366
SHA512 be31a1772289dc18d1f5af93436be797e7a0897086355bbe215263b86d9c35dccb57bf2cc426da5a0c5c9d3af5a26208e20d9b89d695b319df15dff49f83103a
SSDEEP 98304:Jogz+0jGIzehVg3XQFtAOOWpNXm5fa5r+vqICO0CWv/Ml33U9n7ST:JY1F3OWfXm5fa5rpICmWv/Mgn7C
TLSH
T171362241E3E6AD2FCD7392334FA6062A444A4D07C682D31B99B4725C6DB7AC48F86FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
SystemWebViewShell.apk

File Explorer

SystemWebViewShell.apk

.apk 4.7MB

SystemWebViewShell.apk

SHA256 eb52b1fcce1fb8a205065e8c06697901e079dfe290a9af693addb22612c6a95c
MD5 df6ef44ab25e8c30c21f8c90671c1345
SHA1 c38e26bd28bfaf596a5b9eab793424a9dec09366
SHA512 be31a1772289dc18d1f5af93436be797e7a0897086355bbe215263b86d9c35dccb57bf2cc426da5a0c5c9d3af5a26208e20d9b89d695b319df15dff49f83103a
SSDEEP 98304:Jogz+0jGIzehVg3XQFtAOOWpNXm5fa5r+vqICO0CWv/Ml33U9n7ST:JY1F3OWfXm5fa5rpICmWv/Mgn7C
TLSH
T171362241E3E6AD2FCD7392334FA6062A444A4D07C682D31B99B4725C6DB7AC48F86FD4
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1ab788db94bcd68c836dae4f493919cc27e1899ebc7b67c178a7ad4e55cccebb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

org.chromium.webview_shell

Android Permissions

SystemWebViewShell.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.QUERY_ADVANCED_PROTECTION_MODE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.MANAGE_ACCOUNTS

android.permission.CREDENTIAL_MANAGER_SET_ORIGIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.RUN_INSTRUMENTATION

android.permission.WRITE_EXTERNAL_STORAGE

SystemWebViewShell.apk

File Signature issue

org.chromium.webview_shell.TelemetryActivity

org.chromium.webview_shell.TelemetryMemoryPressureActivity

org.chromium.webview_shell.JankActivity

org.chromium.webview_shell.StartupTimeActivity

org.chromium.webview_shell.WebViewCreateDestroyActivity

org.chromium.webview_shell.WebViewBrowserActivity

org.chromium.webview_shell.WebViewBrowserSecondProcessActivity

org.chromium.webview_shell.ManuallyTriggeredStartupActivity

org.chromium.webview_shell.WebViewLayoutTestActivity

org.chromium.webview_shell.WebViewMultiProfileBrowserActivity

org.chromium.webview_shell.WebViewThreadTestActivity

org.chromium.webview_shell.PageCyclerTestActivity

org.chromium.webview_shell.WebViewTracingActivity

org.chromium.webview_shell.WebViewAnimationTestActivity

org.chromium.webview_shell.InspectUserActionsActivity

org.chromium.webview_shell.FullscreenActivity

org.chromium.webview_shell.WebPlatformTestsActivity

android.webkit.MetaDataHolderService

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

SystemWebViewShell.apk

File Signature issue

org.chromium.webview_shell.TelemetryActivity

org.chromium.webview_shell.TelemetryMemoryPressureActivity

org.chromium.webview_shell.JankActivity

org.chromium.webview_shell.StartupTimeActivity

org.chromium.webview_shell.WebViewCreateDestroyActivity

org.chromium.webview_shell.WebViewBrowserActivity

org.chromium.webview_shell.WebViewBrowserSecondProcessActivity

org.chromium.webview_shell.ManuallyTriggeredStartupActivity

org.chromium.webview_shell.WebViewLayoutTestActivity

org.chromium.webview_shell.WebViewMultiProfileBrowserActivity

org.chromium.webview_shell.WebViewThreadTestActivity

org.chromium.webview_shell.PageCyclerTestActivity

org.chromium.webview_shell.WebViewTracingActivity

org.chromium.webview_shell.WebViewAnimationTestActivity

org.chromium.webview_shell.InspectUserActionsActivity

org.chromium.webview_shell.FullscreenActivity

org.chromium.webview_shell.WebPlatformTestsActivity

android.webkit.MetaDataHolderService

androidx.startup.InitializationProvider

Android Permissions

SystemWebViewShell.apk