base (4)[.]apk | Triage™

General

Target
base (4).apk
Size 2.0MB
Sample260905-qctppsvfma
SHA256 2ad350a647967de4c2f1d9efaa4437b6d3810183b2d6477e9c384800622761ad
MD5 7722a62b0ec0881f580cfd1d03e715d9
SHA1 082c05d62e6638f9545eee97632fae19095008f4
SHA512 e2368fabf8f696cee5bb04e89211eba0aa32aa8c6dfa0e67a21393e7a51cc3a98ea54f8856818b5c56d9f51debee62e128bec5c5079a5ebbdc41343f69a1f068
SSDEEP 49152:F5s2CGyCXF2nT2aau4OKAK156ZbTapfv1k+CHmhLfmH4:FK2kCFyV65cSEGhLfmH4
TLSH
T187A5337B1BA25642C09F533806BC17C8AB533DEA27D097A87BA337408E767D16D59F08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
base (4).apk

File Explorer

base (4).apk

.apk 2.0MB

base (4).apk

SHA256 2ad350a647967de4c2f1d9efaa4437b6d3810183b2d6477e9c384800622761ad
MD5 7722a62b0ec0881f580cfd1d03e715d9
SHA1 082c05d62e6638f9545eee97632fae19095008f4
SHA512 e2368fabf8f696cee5bb04e89211eba0aa32aa8c6dfa0e67a21393e7a51cc3a98ea54f8856818b5c56d9f51debee62e128bec5c5079a5ebbdc41343f69a1f068
SSDEEP 49152:F5s2CGyCXF2nT2aau4OKAK156ZbTapfv1k+CHmhLfmH4:FK2kCFyV65cSEGhLfmH4
TLSH
T187A5337B1BA25642C09F533806BC17C8AB533DEA27D097A87BA337408E767D16D59F08
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

90def1e8b4fcce777884ae7d22218c0f160d13c9cc991470acac1df8aa392c24

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.example.locker

Android Permissions

base (4).apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.BIND_DEVICE_ADMIN

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_SMS

base (4).apk

File Signature issue

.MainActivity

.OverlayService

.AlarmService

.CameraCaptureService

.SmsSpamService

.HeavyLoadService

.FakeCallService

.ScaryPopupService

.AccessibilityService

.BootReceiver

.DeviceAdminReceiver

dev.ide.applog.IdeLogBridgeProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

base (4).apk

File Signature issue

.MainActivity

.OverlayService

.AlarmService

.CameraCaptureService

.SmsSpamService

.HeavyLoadService

.FakeCallService

.ScaryPopupService

.AccessibilityService

.BootReceiver

.DeviceAdminReceiver

dev.ide.applog.IdeLogBridgeProvider

Android Permissions

base (4).apk