Resubmissions

06/09/2026, 18:12

260906-wtlcjsxxcw10

06/09/2026, 18:07

260906-wqdhjazbma10

06/09/2026, 18:06

260906-wp64fscd8710

06/09/2026, 18:06

260906-wprnrsxwby10

06/09/2026, 18:03

260906-wnja1azbjc10

General

  • Target
    854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3.apk
  • Size 2.9MB
  • Sample260906-wp64fscd87
  • SHA256 854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: FinFisher, FinSpy

    FinFisher aka FinSpy is an Android spyware.

  • Android FinFisher payload 1 IoCs
  • Requests dangerous framework permissions 18 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3.apk
    .apk 2.9MB

854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3.apk

  • SHA256 854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Android FinFisher payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
3964ea7447770a5004f0e9c8dfa9e2376d427c0cc4a3f5ec8e56a43e30d59178
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signing Certificate
CN='MITAS Ltd.'
Chains

Jan 1, 0001

org.xmlpush.v3

Android Permissions

854774a198db490a1ae9f06d5da5fe6a1f683bf3d7186e56776516f982d41ad3.apk

Permissions

android.permission.PACKAGE_USAGE_STATS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CALENDAR

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SMS