Alin_Music[.]apk | Triage™

General

Target
Alin_Music.apk
Size 13.9MB
Sample260916-zyw7dsec45
SHA256 cc46903a729f409e8c950e765a5ec368dddf672f77891a11d1b82bfd9beebb85
MD5 bd82f6bdabf84050f0d45aa5756efc4b
SHA1 b292d6fa09a9134e32070d508b22dee8f7441e12
SHA512 0ceba92cdb444e454ba4d248b83b92740c3e34d59a23f8c4476492087da1bc09934ecdb177e7275b4500cbfe59b1f8c41709ec635ff802857e149d9c92eac58e
SSDEEP 393216:86DJS2ra7uMqo7XpJuKpjN4c6JFiN7yIJ4edf3B506nNK:ZYKa7uATukjN4c6K/J4ed+
TLSH
T166E612D6BB54C836C077443BD2A3A125D92F8E474B87BA2324413A9C14B34E49F7FAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Alin_Music.apk

File Explorer

Alin_Music.apk

.apk 13.9MB

Alin_Music.apk

SHA256 cc46903a729f409e8c950e765a5ec368dddf672f77891a11d1b82bfd9beebb85
MD5 bd82f6bdabf84050f0d45aa5756efc4b
SHA1 b292d6fa09a9134e32070d508b22dee8f7441e12
SHA512 0ceba92cdb444e454ba4d248b83b92740c3e34d59a23f8c4476492087da1bc09934ecdb177e7275b4500cbfe59b1f8c41709ec635ff802857e149d9c92eac58e
SSDEEP 393216:86DJS2ra7uMqo7XpJuKpjN4c6JFiN7yIJ4edf3B506nNK:ZYKa7uATukjN4c6K/J4ed+
TLSH
T166E612D6BB54C836C077443BD2A3A125D92F8E474B87BA2324413A9C14B34E49F7FAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9e80a97d8cd0346882dc8f0fbe8d721b4eea51519b2d3c0fdd4ac7462ab40889

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=WebToApp,O=WebToApp,C=CN

com.w2a.aovy

Android Permissions

Alin_Music.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.POST_NOTIFICATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

com.w2a.aovy.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Alin_Music.apk

File Signature issue

com.webtoapp.ui.shell.ShellActivity

com.google.android.gms.common.api.GoogleApiActivity

com.webtoapp.core.background.BackgroundRunService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

Alin_Music.apk

File Signature issue

com.webtoapp.ui.shell.ShellActivity

com.google.android.gms.common.api.GoogleApiActivity

com.webtoapp.core.background.BackgroundRunService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

Alin_Music.apk