base[.]apk | Triage™

General

Target
base.apk
Size 25.5MB
Sample260905-wvb59sgk2v
SHA256 729a9e7e519e70c870370518eeffa92ccc7dc1e5fc780a2a9e6acf42a6727b53
MD5 2d51f407b591ee264581ebe0baf8b1c7
SHA1 a91058ba228ef95cd7be72e7d81fb37dacbbef43
SHA512 e3ce42fc0b17c859a8eb90c2ad614fcf43c4b3ce9123df0f1605f2678011e59baa9719a5c067bbb437ecd7d54e3992d778398d8b78d7cc4adf7da1eff6870be4
SSDEEP 393216:Br6Uk8cy6wobWBV3hETIwTcZi0j2iRtoJANUIXnfdMObkQvFude25h5EQ:BrtnL6woq+TLcA0jhRto+iWdMOA2uJ1
TLSH
T17D473393F32CA01EF87766714CAB8261C6555D4449D27FE72AC872481EB3984BF9AFC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
base.apk

File Explorer

base.apk

.apk 25.5MB

base.apk

SHA256 729a9e7e519e70c870370518eeffa92ccc7dc1e5fc780a2a9e6acf42a6727b53
MD5 2d51f407b591ee264581ebe0baf8b1c7
SHA1 a91058ba228ef95cd7be72e7d81fb37dacbbef43
SHA512 e3ce42fc0b17c859a8eb90c2ad614fcf43c4b3ce9123df0f1605f2678011e59baa9719a5c067bbb437ecd7d54e3992d778398d8b78d7cc4adf7da1eff6870be4
SSDEEP 393216:Br6Uk8cy6wobWBV3hETIwTcZi0j2iRtoJANUIXnfdMObkQvFude25h5EQ:BrtnL6woq+TLcA0jhRto+iWdMOA2uJ1
TLSH
T17D473393F32CA01EF87766714CAB8261C6555D4449D27FE72AC872481EB3984BF9AFC0
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

0449ad5706cf967cb530b6ca4ad2bf226b02c0e7dc60395c266b45e2a35d00191ea795a50e1f4a92960dad1f87699766b24d353487924471528568ce08a7c9c8

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.official.radaronline

Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.DETECT_SCREEN_CAPTURE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.official.radaronline.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

base.apk

File Signature issue

com.official.radaronline.push.PromoPushActivity

com.official.radaronline.startup.AlertNotificationOpenActivity

com.official.radaronline.MainActivity

ru.yoomoney.sdk.kassa.payments.threeDS.WebViewActivity

spay.sdk.RedirectActivity

ru.yoomoney.sdk.auth.AuthEntryActivity

ru.yoomoney.sdk.auth.AccountActivity

ru.yoomoney.sdk.auth.auxToken.AuxTokenIssueActivity

ru.yoomoney.sdk.auth.qrAuth.QrAuthActivity

ru.yoomoney.sdk.two_fa.EntryPointActivity

ru.yoomoney.sdk.kassa.payments.ui.PendingIntentActivity

ru.yoomoney.sdk.kassa.payments.ui.CheckoutActivity

ru.yoomoney.sdk.kassa.payments.confirmation.ConfirmationActivity

ru.yoomoney.sdk.kassa.payments.contract.additional_info.AdditionalInfoActivity

spay.sdk.utils.permissions.PermissionsActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

ru.rustore.sdk.activitylauncher.RuStoreActivityLauncher

ru.rustore.sdk.metrics.internal.presentation.SendMetricsEventJobService

io.appmetrica.analytics.internal.AppMetricaService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.official.radaronline.push.AirAlertFirebaseMessagingService

com.official.radaronline.data.AlertSoundService

com.official.radaronline.data.PinnedStatusForegroundService

com.yandex.runtime.connectivity.internal.ConnectivityService

com.google.firebase.components.ComponentDiscoveryService

ru.fp.sdk.corext.manifest.MobileSdkService

zone.bi.mobile.fingerprint.impl.cs.FpWorkerService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.official.radaronline.startup.DeviceBootReceiver

com.official.radaronline.startup.AlertDismissReceiver

com.official.radaronline.startup.PinnedStatusDismissReceiver

ru.fp.sdk.corext.manifest.CallBroadcast

spay.sdk.utils.receiver.OtpReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

com.squareup.picasso.PicassoProvider

Android Permissions

base.apk