com[.]imjustafriendlyguy[.]firmware[.]apk

General

Target
com.imjustafriendlyguy.firmware.apk
Size 209KB
Sample260912-e6mygadc77
SHA256 895a9274620e8d9c48ddf330df8b9d7331322ea659c35d8808c381add741a89a
MD5 1177ec5a8ab84ad460c99f57578237bc
SHA1 5f060c8f69d95df3b0d40e9aadb4562a52a9769a
SHA512 ee66f5aeec3397463eb66410a105fc3e7a9d22a132b817e5a7767c5859ae005fa275215aa8bc90794d457e395d853298c5dadd5eb96f5071a51f433200d2751d
SSDEEP 6144:J5B7z0mu3qIaCGxjD2Szn9lxBDtPUECeAPHuqg1O:J5B7z0mu3qIa3xpznlBpSeAP3g1O
TLSH
T19B241203A64B0A3EFF91EDB9B67889F35B4CA48619376F5E6A00A55E2C435470FC14F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 9 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by autofill services to bind with the system. Allows apps to autofill information in forms.	android.permission.BIND_AUTOFILL_SERVICE
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by companion device services to bind with the system. Allows apps to establish a connection and interact with companion devices.	android.permission.BIND_COMPANION_DEVICE_SERVICE
Required by NFC services to bind with the system. Allows apps to interact with NFC hardware.	android.permission.BIND_NFC_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.imjustafriendlyguy.firmware.apk

File Explorer

com.imjustafriendlyguy.firmware.apk

.apk 209KB

com.imjustafriendlyguy.firmware.apk

SHA256 895a9274620e8d9c48ddf330df8b9d7331322ea659c35d8808c381add741a89a
MD5 1177ec5a8ab84ad460c99f57578237bc
SHA1 5f060c8f69d95df3b0d40e9aadb4562a52a9769a
SHA512 ee66f5aeec3397463eb66410a105fc3e7a9d22a132b817e5a7767c5859ae005fa275215aa8bc90794d457e395d853298c5dadd5eb96f5071a51f433200d2751d
SSDEEP 6144:J5B7z0mu3qIaCGxjD2Szn9lxBDtPUECeAPHuqg1O:J5B7z0mu3qIa3xpznlBpSeAP3g1O
TLSH
T19B241203A64B0A3EFF91EDB9B67889F35B4CA48619376F5E6A00A55E2C435470FC14F2
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d7807cf70b4b77c35ce660dc5792b3cfc3e4c4c4b4f01ed3e1b4abe8982c881d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Debug,O=Debug,C=US

com.imjustafriendlyguy.firmware

android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.CHANGE_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.WAKE_LOCK android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.REQUEST_INSTALL_PACKAGES android.permission.REQUEST_DELETE_PACKAGES android.permission.QUERY_ALL_PACKAGES android.permission.KILL_BACKGROUND_PROCESSES android.permission.BIND_ACCESSIBILITY_SERVICE android.permission.BIND_NOTIFICATION_LISTENER_SERVICE android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.READ_SYNC_SETTINGS android.permission.WRITE_SYNC_SETTINGS android.permission.READ_SYNC_STATS android.permission.POST_NOTIFICATIONS android.permission.BIND_VPN_SERVICE android.permission.BIND_INPUT_METHOD android.permission.BIND_AUTOFILL_SERVICE android.permission.BIND_WALLPAPER android.permission.BIND_CONDITION_PROVIDER_SERVICE android.permission.NFC android.permission.BIND_NFC_SERVICE android.permission.BIND_SCREENING_SERVICE android.permission.BIND_COMPANION_DEVICE_SERVICE android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

Android Permissions

com.imjustafriendlyguy.firmware.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.POST_NOTIFICATIONS

android.permission.BIND_VPN_SERVICE

android.permission.BIND_INPUT_METHOD

android.permission.BIND_AUTOFILL_SERVICE

android.permission.BIND_WALLPAPER

android.permission.BIND_CONDITION_PROVIDER_SERVICE

android.permission.NFC

android.permission.BIND_NFC_SERVICE

android.permission.BIND_SCREENING_SERVICE

android.permission.BIND_COMPANION_DEVICE_SERVICE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

com.imjustafriendlyguy.firmware.apk

File Signature issue

.MainActivity

.BotService

.PersistJobService

.PersistAccessibility

.PersistNotificationListener

.CommandBlocker

.GuardService

.PersistSync$AuthService

.PersistSync$SyncService

.PersistTile

.PersistMediaService

.PersistIME

.PersistAutofill

.PersistWallpaper

.PersistCondition

.PersistCompanion

.PersistNfc

.PersistCallScreen

.BootReceiver

.ShutdownInterceptor

.AdminReceiver

.PersistWidget

.PersistProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

com.imjustafriendlyguy.firmware.apk

File Signature issue

.MainActivity

.BotService

.PersistJobService

.PersistAccessibility

.PersistNotificationListener

.CommandBlocker

.GuardService

.PersistSync$AuthService

.PersistSync$SyncService

.PersistTile

.PersistMediaService

.PersistIME

.PersistAutofill

.PersistWallpaper

.PersistCondition

.PersistCompanion

.PersistNfc

.PersistCallScreen

.BootReceiver

.ShutdownInterceptor

.AdminReceiver

.PersistWidget

.PersistProvider

Android Permissions

com.imjustafriendlyguy.firmware.apk