app[.]apk | Triage™

General

Target
app.apk
Size 9.5MB
Sample260923-w3fteshd38
SHA256 829f5610039c5e662dedefaaef330666ef69f2c0eea9ed57fef894699b78d34e
MD5 b96dd1d25a62bcec32c1841ff134e5d0
SHA1 de2f2384ff35579beb0a0e7c244401ff6167e267
SHA512 a07aa5a53f0b94b687e84dbb0cb5d5723cd70b9abbd31fa3b97006a84ba57480d51209bbae05ec57fdb350b5581a633ce4e3cbeceb865806b7db8e1a7dac0d76
SSDEEP 196608:e4R4CxHMyNm6hEzh0/eS5XzbKGnefbH1CkxnkpNIIYzeAdvtFmPwDB:NR4CxHLG1ge6aGezH1Cklc2zegl0wF
TLSH
T15AA612CAF7C89A2FC4775032C9BA57B111874C528E83DF876A58760C69BB6D40F49BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
app.apk

File Explorer

app.apk

.apk 9.5MB

app.apk

SHA256 829f5610039c5e662dedefaaef330666ef69f2c0eea9ed57fef894699b78d34e
MD5 b96dd1d25a62bcec32c1841ff134e5d0
SHA1 de2f2384ff35579beb0a0e7c244401ff6167e267
SHA512 a07aa5a53f0b94b687e84dbb0cb5d5723cd70b9abbd31fa3b97006a84ba57480d51209bbae05ec57fdb350b5581a633ce4e3cbeceb865806b7db8e1a7dac0d76
SSDEEP 196608:e4R4CxHMyNm6hEzh0/eS5XzbKGnefbH1CkxnkpNIIYzeAdvtFmPwDB:NR4CxHLG1ge6aGezH1Cklc2zegl0wF
TLSH
T15AA612CAF7C89A2FC4775032C9BA57B111874C528E83DF876A58760C69BB6D40F49BC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a023b2973757fd7133fad5b1e930ba74a4e2d7e4aa90556a080fb03b33dbf3c0

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.riziqpay.pay

Android Permissions

app.apk

Permissions

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.DUMP

com.riziqpay.pay.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

app.apk

File Signature issue

com.riziqpay.pay.webView

com.riziqpay.pay.MainActivity

com.riziqpay.pay.SplashActivity

com.riziqpay.pay.LoginActivity

com.riziqpay.pay.MyBackgroundService

com.riziqpay.pay.BootReceiver

com.riziqpay.pay.NetworkChangeReceiver

com.riziqpay.pay.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

app.apk

File Signature issue

com.riziqpay.pay.webView

com.riziqpay.pay.MainActivity

com.riziqpay.pay.SplashActivity

com.riziqpay.pay.LoginActivity

com.riziqpay.pay.MyBackgroundService

com.riziqpay.pay.BootReceiver

com.riziqpay.pay.NetworkChangeReceiver

com.riziqpay.pay.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

app.apk