Liggo.zip
- SHA256 0aa237ff100fb2cd79619b64a01211e2f32a2c6fc3da489b004e7fedcccac4c4
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Liggo-2.4.9.apk
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Liggo-2.4.9.apk
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Liggo-2.4.9.apk
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.armeabi_v7a.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.armeabi_v7a.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
config.en.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
config.en.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
config.xxhdpi.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
config.xxhdpi.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Liggo.zip
- Size 73.1MB
- Sample260916-yctnpsfj2z
- SHA256 0aa237ff100fb2cd79619b64a01211e2f32a2c6fc3da489b004e7fedcccac4c4
- MD5 d406554bdae4dfb53efeb7f7e1802963
- SHA1 fb9fddd9efe0951239e95fe4716b028182d0f7e4
- SHA512 109449cae0ff561961ace7a17c9f25dc0147c5845e3d1be9163c17664ed22d36c1569045ab81ae238d3e48d1f2a06e8a2d45375c657dc7397ad9ebac7e1f150e
- SSDEEP 786432:w/QjvuZ4DNLFb21yPCX6Cb/9hdYAYfY96aac6FDheA:oQRLb21yPCX6CRXfYw96fJl1
- TLSH T1F6F7CF57F3124C36D9AF9735B8B647906B315C8A7313A7872808B5783DB33C85B9A398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 6 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Required to be able to access the camera device. android.permission.CAMERA - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.xxhdpi.apk - Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.armeabi_v7a.apk unpack001/config.en.apk unpack001/config.xxhdpi.apk - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.armeabi_v7a.apk unpack001/config.en.apk unpack001/config.xxhdpi.apk
File Explorer
-
Liggo.zip.zip 73.1MB
-
Liggo-2.4.9.apk.apk 51.2MB
-
config.armeabi_v7a.apk.jar 21.6MB
-
config.en.apk.jar 52KB
-
config.xxhdpi.apk.jar 149KB
Liggo-2.4.9.apk
- SHA256 1e9cb01e953d59f8e616baa0af00f857b864baf9142c25319e97ce77d7ff0b86
- MD5 c16fd14736acff56da215ab4704beb21
- SHA1 0e7f1ce07d649287f6361ad055b582ff8fcf07d6
- SHA512 b7b4be62426b4a838e899c453a64275fdca11b10e4ab07030c998ad3025ac5cadf4fc1db911b38cec79d64d58f53c5ed37c9648d1e2611895990f4a73deaa885
- SSDEEP 393216:cvtnhQY3LV1gvuvq234Dig3vDzf5/z21yPCX6Crn/XNT9+E1IizmpAIJ5xOQ6D:c/QjvuZ4DNLFb21yPCX6Cb/9hdYAYfk
- TLSH T101C7CF67B7628D31D5AF973568F647247B316D8A73035783200CB9687CB37C0ABA6398
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
e4d0c3df04b94827d9aec884c340fadf77095001df24ad71ddb981357b890cd4cc15afec124461c3a4f188aa20be62c781c86c4a6c2153408e29d365b6993730
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
2a:0c:90:e9:29:b5:87:63:6b:d3:4a:16:4f:3f:11:9b:1b:fd:76:a2
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Aug 24, 2025 - Aug 24, 2055
com.cupidoai.liggo
com.cupidoai.liggo.MainActivity
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
android.permission.CAMERA
android.permission.FOREGROUND_SERVICE
com.android.vending.BILLING
com.cupidoai.liggo.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.android.vending.CHECK_LICENSE
com.cupidoai.liggo.MainActivity
android.intent.action.MAIN
com.superwall.sdk.paywall.view.SuperwallPaywallActivity
com.superwall.sdk.debug.DebugViewActivity
com.superwall.sdk.debug.localizations.SWLocalizationActivity
com.superwall.sdk.debug.SWConsoleActivity
expo.modules.imagepicker.ExpoCropImageActivity
com.canhub.cropper.CropImageActivity
com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity
com.revenuecat.purchases.SimulatedStoreErrorDialogActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
com.pairip.licensecheck.LicenseActivity
com.google.android.gms.metadata.ModuleDependencies
com.google.android.gms.metadata.MODULE_DEPENDENCIES
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
com.amazon.device.iap.ResponseReceiver
com.amazon.inapp.purchasing.NOTIFY
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
expo.modules.clipboard.ClipboardFileProvider
expo.modules.filesystem.FileSystemFileProvider
expo.modules.imagepicker.fileprovider.ImagePickerFileProvider
androidx.startup.InitializationProvider
com.canhub.cropper.CropFileProvider
io.sentry.android.core.SentryInitProvider
io.sentry.android.core.SentryPerformanceProvider
config.armeabi_v7a.apk
- SHA256 450d4df3e008b5cbf0a5b22d3bee0d6c2e0f0427f05d236686089f97ad30476f
- MD5 257e5a5d3e5e71921dec693bcdbd78c7
- SHA1 d1bf60f48cfb379497c402406a1eb70420680e5a
- SHA512 cb2d8648c7150aca4cdcef1d40829ec25cabcc4121f6afff23a538450462d05835fb6944d247258d87f7772725036c4a575e4da22e0f27b17263832a9fe1e196
- SSDEEP 196608:aPwbfih5mpL039iIMnXKAaO4CB6l5kS0v8JXYfL0cwN0WzWTk:1cmp0anaqB6wZEJXDhN03Q
- TLSH T1C037BE83F2064D5BCDEF6539F8930AC52E404C8AA432B7999C17D2B93FBE25D1789391
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
1d7bdc5351a8f5062c40d30b7fabc2b127ce1129
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
2a:0c:90:e9:29:b5:87:63:6b:d3:4a:16:4f:3f:11:9b:1b:fd:76:a2
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Aug 24, 2025 - Aug 24, 2055
config.en.apk
- SHA256 d93ba0f4c2172683c70d40fcdfc59350dbd30ec03a9d92d9212f2e1ce6748037
- MD5 8d66f42484c212ea7a6c96905d661ca7
- SHA1 312dfe3d3d9e0139efb9683f28aefd9afae7a609
- SHA512 e91a5412044f13197163f1b56032d0c850042462726f6d2e867ace078dcfec7a1bb67964ce8327e3fb18aaa8c5327d5549343b020ff522f80909cb0ee7f17a6e
- SSDEEP 384:IqlvLbEoIBrBshC4G1pAWqsekjsoNwOnhs710s7G+3S/XElgIEH4/VmEXuXbH:VxIBshC4G1p5jCOniJC/BEeLH
- TLSH T1B333E715BB40662FCD3F01306C97D6162926BE43EE404A07E9B0B24C2ABB7D15FD62F9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
bd5c7fe571cc0adeab810a004b66fb426ec3bb75
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
2a:0c:90:e9:29:b5:87:63:6b:d3:4a:16:4f:3f:11:9b:1b:fd:76:a2
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Aug 24, 2025 - Aug 24, 2055
config.xxhdpi.apk
- SHA256 0666ea698a995c21d77065e4ce357bf4fab520285ccfbb394d00e013ed6e0138
- MD5 99586c1281819749470a2922f464fc12
- SHA1 c8dfc588bdbdcccb1155b933931e9f6a423df2ef
- SHA512 b54e8744eb7e4008ac688bfd937637fd63c1659725d3fed6f8cfdef002000eadca515c41f447a302275e675115f2cf904fe709b272eb0d803f1a02aa3e137ab0
- SSDEEP 3072:iO2EFKoLRLMnhySR3uB4DWiH0atNLTKGyGe:iODFSTYGUciVR
- TLSH T189E3D073E3346D5BD81BC23881FB4B2B98960F445956E71A4B16F70DAEF3A449980FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
65c4f549ba9a957c85fc5fb392c1da289ce87eab
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
2a:0c:90:e9:29:b5:87:63:6b:d3:4a:16:4f:3f:11:9b:1b:fd:76:a2
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Aug 24, 2025 - Aug 24, 2055