lionwin55[.]apk | Triage™

General

Target
lionwin55.apk
Size 40.2MB
Sample260916-pp85gsvs2q
SHA256 3a0bb87827934d14e6869d4154e75090c2c670bfd1b9027bc00d4e2d9c4c4950
MD5 11d1a9fe466f23cd976526dd325dcd60
SHA1 d71956250ca78b34ecb710aa14f4c4bc63cf522c
SHA512 1af339950aa61276c56492baa88bb33ef0b90923cd5ebed050da451e6c9af24707246522bd14b45ac306257c3ec91b745d6d32fa01a1b71947c0c394b484d218
SSDEEP 786432:YLITVkgJDOIZILpAq1t/QlLmL9OhAQ/2CakOIwutlkwr9:hk3IuLp3tYZA9OhAQ/2CaWvr9
TLSH
T124973357F759AC5EC9F3833954361262514A1CA6CB83D32B8834B37938B3AE449C4FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
lionwin55.apk

File Explorer

lionwin55.apk

.apk 40.2MB

lionwin55.apk

SHA256 3a0bb87827934d14e6869d4154e75090c2c670bfd1b9027bc00d4e2d9c4c4950
MD5 11d1a9fe466f23cd976526dd325dcd60
SHA1 d71956250ca78b34ecb710aa14f4c4bc63cf522c
SHA512 1af339950aa61276c56492baa88bb33ef0b90923cd5ebed050da451e6c9af24707246522bd14b45ac306257c3ec91b745d6d32fa01a1b71947c0c394b484d218
SSDEEP 786432:YLITVkgJDOIZILpAq1t/QlLmL9OhAQ/2CakOIwutlkwr9:hk3IuLp3tYZA9OhAQ/2CaWvr9
TLSH
T124973357F759AC5EC9F3833954361262514A1CA6CB83D32B8834B37938B3AE449C4FE9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

20ee4935aa49c930f1e3a9a6b191b790a4a16f84e00c893f58a8cb7545234a31

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=Unknown

com.lionwin55

Android Permissions

lionwin55.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.lionwin55.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

lionwin55.apk

File Signature issue

com.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.metadata.ModuleDependencies

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.imagepicker.ImagePickerFileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.crazecoder.openfile.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

lionwin55.apk

File Signature issue

com.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.metadata.ModuleDependencies

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.imagepicker.ImagePickerFileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

com.crazecoder.openfile.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

lionwin55.apk