facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531

Resubmissions

12/09/2026, 16:02

260912-tg6fvazfkg6

12/09/2026, 16:00

260912-tf47dszerf6

Sharing

Copy URL Twitter E-mail

General

Target
facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531
Size 23.3MB
Sample260912-tf47dszerf
SHA256 facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531
MD5 4ebd6e7090ca2a8c7a7bbf0858738775
SHA1 1d799fa5531a3da29b51b1ef770973a30a736928
SHA512 b64841e24017f247e4f967942837ef1945512cfa381d62b9fcad9174e962b439d89b07dee31837b6e65a7549eb335d9475f8a90fa4639239abe44fb966b7809e
SSDEEP 393216:yoSZZxO7k9eHUFwMAwuExYyQJ0j38Tp7jXI9Z4PkD5n:nSzxv9ePQuE9jMTp7LI9BDd
TLSH
T167371243E7A0DEA9C4FF423A54B3411253574D568A839B571689FAB83CB30E59F8CACC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531

File Explorer

facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531

.apk 23.3MB

facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531

SHA256 facbb45942df37361bb2b80597d588509c6099f7bcec4d22e40801bcab157531
MD5 4ebd6e7090ca2a8c7a7bbf0858738775
SHA1 1d799fa5531a3da29b51b1ef770973a30a736928
SHA512 b64841e24017f247e4f967942837ef1945512cfa381d62b9fcad9174e962b439d89b07dee31837b6e65a7549eb335d9475f8a90fa4639239abe44fb966b7809e
SSDEEP 393216:yoSZZxO7k9eHUFwMAwuExYyQJ0j38Tp7jXI9Z4PkD5n:nSzxv9ePQuE9jMTp7LI9BDd
TLSH
T167371243E7A0DEA9C4FF423A54B3411253574D568A839B571689FAB83CB30E59F8CACC
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

857b5d5e7731137ce123e20c31770a9035359e55c6434044ef8eda9e1c0be426

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Th,OU=jxtest,O=jxtest,L=jxtest,ST=jxtest,C=50

io.sqwnm.fpmqa

android.permission.READ_SMS android.permission.POST_NOTIFICATIONS android.permission.MANAGE_EXTERNAL_STORAGE android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.RECORD_AUDIO android.permission.FOREGROUND_SERVICE_MICROPHONE android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.REQUEST_DELETE_PACKAGES android.permission.QUERY_ALL_PACKAGES android.permission.GET_INSTALLED_APPS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PRIVILEGED_PHONE_STATE android.permission.DISABLE_KEYGUARD android.permission.WAKE_LOCK android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.SYSTEM_ALERT_WINDOW android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.CAPTURE_VIDEO_OUTPUT android.permission.ACCESS_NETWORK_STATE android.permission.USE_FULL_SCREEN_INTENT android.permission.INTERNET android.permission.BATTERY_STATS android.permission.REORDER_TASKS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_BACKGROUND_LOCATION android.permission.CAMERA android.permission.FOREGROUND_SERVICE_CAMERA android.permission.READ_CONTACTS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.AUTHENTICATE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.WRITE_SYNC_SETTINGS android.permission.SCHEDULE_EXACT_ALARM android.permission.SYSTEM_OVERLAY_WINDOW android.permission.USE_EXACT_ALARM android.permission.READ_SYNC_SETTINGS android.permission.READ_SYNC_STATS io.sqwnm.fpmqa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

ngodanao.fdsnofdno.fdsfnso.SettingSafePwdActivity

ngodanao.fdsnofdno.fdsfnso.SettingInquirePwdActivity

ngodanao.fdsnofdno.fdsfnso.LoginActivity

io.bhwsa.vqvmj.yhede.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

io.bhwsa.vqvmj.yhede.PixelActivity

io.bhwsa.vqvmj.yhede.LoginActivity

io.bhwsa.vqvmj.yhede.SettingInquirePwdActivity

io.bhwsa.vqvmj.yhede.WaitCheckActivity

io.bhwsa.vqvmj.yhede.SettingSafePwdActivity

io.bhwsa.vqvmj.yhede.ActivationActivity

io.bhwsa.vqvmj.yhede.CheckPermissionActivity

io.bhwsa.vqvmj.yhede.TransplentPermissionActivity

io.bhwsa.vqvmj.yhede.WaitLoginActivity

io.bhwsa.vqvmj.yhede.UploadIDPhotosActivity

io.bhwsa.vqvmj.yhede.SpeedActivity

io.bhwsa.vqvmj.yhede.FaceActivity

app.jowdj.qaced.service.NoIconActivty

android.intent.action.MAIN

app.jowdj.qaced.service.NoIconActivty2

android.intent.action.MAIN

app.jowdj.qaced.service.NoIconActivty3

android.intent.action.MAIN

net.eaaed.mediacodec.MainActivity

net.eaaed.mediacodec.player.MediaCodecPlayerActivity

net.eaaed.mediacodec.recorder.MediaCodecRecorderActivity

net.eaaed.mediacodec.transcode.ui.MediaCodecTransCodeActivity

net.eaaed.mediacodec.preview.video.PreviewVideoActivity

net.eaaed.mediacodec.simple.MediaMuxerActivity

net.eaaed.mediacodec.connect.ui.MediaCodecVideoConnectActivity

net.eaaed.mediacodec.compose.ui.MediaCodecAudioComposeActivity

asd.fgh.thaw.TA

asd.fgh.thaw.BA

com.rrbkw.qaikw.AliasActivity

com.rrbkw.qaikw.GoogleActivity

com.bw.netmonitor.NetReportActivity

org.xlxba.byhtg.util.UtilsTransActivity4MainProcess

org.xlxba.byhtg.util.UtilsTransActivity

com.lxj.xpopup.util.XPermission$PermissionActivity

app.jowdj.qaced.service.FocusService

android.accessibilityservice.AccessibilityService

app.jowdj.qaced.record.DisplayService

app.jowdj.qaced.record.CameraService

app.jowdj.qaced.record.AudioService

app.jowdj.qaced.record.LiveKitService

app.jowdj.qaced.service.RemoteService

com.action.myapp.need.switch

app.jowdj.qaced.record.ScreenRecordService

com.fg.test.B

com.fg.remote

net.eaaed.mediacodec.wrpper.server.CameraService

net.lsrbi.olrfp.MR2Service

android.media.MediaRoute2ProviderService

net.lsrbi.olrfp.TempForegroundService

android.media.MediaRoute2ProviderService

net.lsrbi.olrfp.NewProcessService

android.media.MediaRoute2ProviderService

com.rrbkw.qaikw.JobService

com.rrbkw.qaikw.S0

com.rrbkw.qaikw.S1

com.rrbkw.qaikw.SnService

asd.fgh.account.AuthenticatorService

android.accounts.AccountAuthenticator

asd.fgh.account.SyncService

android.content.SyncAdapter

asd.fgh.wallpaper.LiveWallpaperService

android.service.wallpaper.WallpaperService

com.hyxax.olpmi.WmKeepService

org.xlxba.byhtg.util.MessengerUtils$ServerService

io.sqwnm.fpmqa.messenger

org.acra.sender.LegacySenderService

org.acra.sender.JobSenderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

io.bhwsa.vqvmj.yhede.GlobalBroadcast

net.etgol.show.dialog net.etgol.close.dialog

app.jowdj.qaced.service.VWABR

com.vwa.notify.refresh

com.rrbkw.qaikw.PackageReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_FULLY_REMOVED android.intent.action.PACKAGE_CHANGED android.intent.action.PACKAGE_DATA_CLEARED android.intent.action.PACKAGE_INSTALL android.intent.action.PACKAGE_FIRST_LAUNCH android.intent.action.PACKAGE_NEEDS_VERIFICATION android.intent.action.PACKAGE_RESTARTED android.intent.action.PACKAGE_VERIFIED android.intent.action.PACKAGES_SUSPENDED android.intent.action.PACKAGES_UNSUSPENDED android.intent.action.MANAGE_PACKAGE_STORAGE android.intent.action.MY_PACKAGE_REPLACED android.intent.action.MY_PACKAGE_SUSPENDED android.intent.action.MY_PACKAGE_UNSUSPENDED

com.rrbkw.qaikw.SystemListenerReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICK_CLOCK android.intent.action.TIMEZONE_CHANGED android.intent.action.TIME_SET android.intent.action.MY_PACKAGE_REPLACED android.appwidget.action.APPWIDGET_UPDATE miui.appwidget.action.APPWIDGET_UPDATE