com[.]customer[.]sdpay[.]apk

Resubmissions

10/09/2026, 11:36

260910-nqmgfabn6s

10/09/2026, 11:35

260910-npz15ssdph6

10/09/2026, 11:34

260910-npme2swtbw6

Sharing

Copy URL Twitter E-mail

General

Target
com.customer.sdpay.apk
Size 94.0MB
Sample260910-npme2swtbw
SHA256 815345ea68a27aa3426e3e684a424d9e494dfb31cd97232748731bfc49e1008e
MD5 656e3efd8086a80072a2076049f31337
SHA1 05306a400cf866c59f78a3c7284d4f54242cd331
SHA512 2650dd61297b69cfc2a5344f1660e0f6943be38ef86d324f5dd556e26d2855d9161f694accb46968f804a13942b41cdbb97312ec167d6f360242106acdcd601a
SSDEEP 786432:Na5bkoCsz9/+L7anvZMHoAgPselxymWdJa8jUDFyBRHnn1BXdQCK8dxHQTT10SWS:ARhFselxymWwCFdQCg/wKv
TLSH
T10728CF52A7420832C5AE873659FA4344BB306E8AA743DB572004B17DBCB32C59BE57DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.customer.sdpay.apk

File Explorer

com.customer.sdpay.apk

.apk 94.0MB

com.customer.sdpay.apk

SHA256 815345ea68a27aa3426e3e684a424d9e494dfb31cd97232748731bfc49e1008e
MD5 656e3efd8086a80072a2076049f31337
SHA1 05306a400cf866c59f78a3c7284d4f54242cd331
SHA512 2650dd61297b69cfc2a5344f1660e0f6943be38ef86d324f5dd556e26d2855d9161f694accb46968f804a13942b41cdbb97312ec167d6f360242106acdcd601a
SSDEEP 786432:Na5bkoCsz9/+L7anvZMHoAgPselxymWdJa8jUDFyBRHnn1BXdQCK8dxHQTT10SWS:ARhFselxymWwCFdQCg/wKv
TLSH
T10728CF52A7420832C5AE873659FA4344BB306E8AA743DB572004B17DBCB32C59BE57DF
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

7975361ee77ee434644b62ee880ea424343009ba0ced57c3fa21309098ae9b9c32ede9d2907f65dfafebb19ac11985dd5d771f3838782ed14836e515f8bd86c4

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US

com.customer.sdpay

com.customer.sdpay.Food.ui.auth.RestaurantRegistrationActivity

com.customer.sdpay.Food.ui.auth.DeliveryManRegistrationActivity

com.customer.sdpay.Activities.ShoppingActivity

com.customer.sdpay.Activities.ChatSupportForLoginPageActivity

com.customer.sdpay.Chat.Activity.ChatSupportFormActivity

com.customer.sdpay.Chat.Activity.MessageDisappearingActivity

com.customer.sdpay.Chat.Activity.BlockedUsersActivity

com.customer.sdpay.Activities.SDPayAppRegisterActivity

com.customer.sdpay.Activities.SelectRegisterTypeActivity

com.customer.sdpay.Chat.Activity.MyStoryViewersActivity

com.customer.sdpay.Chat.Activity.GroupInfoActivity

com.customer.sdpay.Chat.Activity.GroupChatDetailsActivity

com.customer.sdpay.Activities.CustomerSupportActivity

com.customer.sdpay.Chat.Activity.MessageInfoActivity

com.customer.sdpay.Chat.Activity.SendLocationActivity

com.customer.sdpay.Chat.Activity.ViewContactActivity

com.customer.sdpay.Chat.Activity.SampleVideoCallActivity

com.customer.sdpay.Chat.Activity.VideoSample2Activity

com.customer.sdpay.Chat.Activity.IncomingVideoCallActivity

com.customer.sdpay.Chat.Activity.VIdeoCallActivity

com.customer.sdpay.Chat.Activity.IncomingCallActivity

android.intent.action.MAIN

com.customer.sdpay.Chat.Activity.MyStoryManageActivity

com.customer.sdpay.Activities.ImagePickerActivity

com.customer.sdpay.Chat.Activity.VoicecallActivity

com.customer.sdpay.Chat.Activity.ViewStoryActivity

com.customer.sdpay.Chat.Activity.AddStoryActivity

com.customer.sdpay.Chat.Activity.ShareAnyActivity

com.customer.sdpay.Chat.Activity.UserDetailsActivity

com.customer.sdpay.Chat.Activity.CallHistoryActivity

com.customer.sdpay.Chat.Activity.SelectGroupMemberActivity

com.customer.sdpay.Chat.Activity.CreateGroupActivity

com.customer.sdpay.Chat.Activity.AllUserActivity

com.customer.sdpay.Chat.Activity.ChatDetailsActivity

com.customer.sdpay.Chat.Activity.ContactPermissionDisclosureActivity

com.customer.sdpay.Chat.Activity.ChatListActivity

com.customer.sdpay.Chat.Activity.RegisterChatActivity

com.customer.sdpay.Activities.SeatPassengerDetailsActivity

com.customer.sdpay.Activities.SelectSeatActivity

com.customer.sdpay.Activities.BusbookingActivity

com.customer.sdpay.Activities.MyOrderDetailsActivity

com.customer.sdpay.Activities.WelcomeActivity

com.customer.sdpay.Activities.CustomWebActivity

com.customer.sdpay.Activities.WebActivity

com.customer.sdpay.Activities.PhonePayActivity

com.customer.sdpay.Activities.ForgotMinActivity

com.customer.sdpay.Activities.CreatempnActivity

com.customer.sdpay.Activities.CardPaymentSuccessFullActivity

com.customer.sdpay.Activities.MyCardActivity

com.customer.sdpay.Activities.RechargeSuccessfull

com.customer.sdpay.MapsActivity

com.customer.sdpay.Activities.Registration

com.customer.sdpay.Activities.Home

android.intent.action.MAIN

com.customer.sdpay.Activities.Login

com.customer.sdpay.Activities.MembershipSuccessfull

com.customer.sdpay.Activities.MainActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.customer.sdpay.Utils.Imageviewer

com.customer.sdpay.Food.ui.splash.SplashActivity

com.customer.sdpay.Food.ui.dashboard.DashboardActivity

com.customer.sdpay.Food.ui.onboard.OnboardingActivity

com.customer.sdpay.Food.ui.auth.SignInActivity

com.customer.sdpay.Food.ui.auth.SignUpActivity

com.customer.sdpay.Food.ui.location.AccessLocationActivity

com.customer.sdpay.Food.ui.location.SetLocationActivity

com.customer.sdpay.Food.ui.location.PickMapActivity

com.customer.sdpay.Food.ui.restaurant.RestaurantActivity

com.customer.sdpay.Food.ui.product.ProductActivity

com.customer.sdpay.Food.ui.product.PopularProductsActivity

com.customer.sdpay.Food.ui.cart.CartActivity

com.customer.sdpay.Food.ui.checkout.CheckoutActivity

com.customer.sdpay.Food.ui.checkout.OrderSuccessfulActivity

com.customer.sdpay.Food.ui.address.AddAddressActivity

com.customer.sdpay.Food.ui.address.AddressListActivity

com.customer.sdpay.Food.ui.search.SearchActivity

com.customer.sdpay.Food.ui.search.SearchResultsActivity

com.customer.sdpay.Food.ui.home.NearbyRestaurantsMapActivity

com.customer.sdpay.Food.ui.order.OrderDetailsActivity

com.customer.sdpay.Food.ui.order.OrderTrackingActivity

com.customer.sdpay.Food.ui.review.RateReviewActivity

com.customer.sdpay.Food.ui.chat.ChatActivity

com.sabpaisa.gateway.android.sdk.activity.WebViewActivity

com.sabpaisa.gateway.android.sdk.upipaymentmodule.ui.PaymentUiActivity

com.sabpaisa.gateway.android.sdk.activity.RedirectingActivity

com.sabpaisa.gateway.android.sdk.activity.CheckoutPaymentInformationActivity

com.sabpaisa.gateway.android.sdk.activity.FinalCheckOutPageActivity

com.boxpay.checkout.sdk.OTPScreenWebView

com.wibmo.threeds2.sdk.ui.ChallengeNativeActivity

com.wibmo.threeds2.sdk.ui.ChallengeHtmlActivity

com.payu.custombrowser.CBActivity

com.payu.ui.view.activities.CheckoutActivity

com.payu.otpassist.PayUOtpAssistActivity

com.payu.upisdk.upiintent.PaymentResponseUpiSdkActivity

com.payu.threedsui.view.activities.FallbackActivity

com.payu.gpay.GPayResponseActivity

com.esafirm.imagepicker.features.ImagePickerActivity

com.razorpay.CheckoutActivity

android.intent.action.MAIN

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.journeyapps.barcodescanner.CaptureActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

io.agora.rtc2.extensions.MediaProjectionMgr$LocalScreenCaptureAssistantActivity

com.customer.sdpay.Utils.SMSBroadcastReciever

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.customer.sdpay.CallActionReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.razorpay.RzpTokenReceiver

rzp.device_token.share

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

com.customer.sdpay.apk

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.POST_NOTIFICATIONS

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

android.permission.READ_PHONE_STATE

android.permission.BLUETOOTH_SCAN

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_PHONE_CALL

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.MANAGE_OWN_CALLS

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.USE_FULL_SCREEN_INTENT

android.permission.CAPTURE_AUDIO_OUTPUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_FINGERPRINT

android.permission.VIBRATE

android.permission.USE_BIOMETRIC

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

com.google.android.c2dm.permission.RECEIVE

com.customer.sdpay.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION