Adani Gas Bill Update Side[.]apk

General

Target
Adani Gas Bill Update Side.apk
Size 6.7MB
Sample260924-qa283aeb39
SHA256 21b97b1b8e1b3489d403a278206e255d8fcb90a9584f58de9c4c79b63d67f305
MD5 97cac31cc2360f9578d0f9cad0dc4dfa
SHA1 5b26869fb7062099c9337cc6216913f7d2490b2d
SHA512 ea01cbe590601e26666d70a34a1c82e63d6fc48c65048ab071a28a9a8ae0cda072deac50e1f8e2d0a28700ae0c51c2ceffdbe931172bad81b132b2da34937eae
SSDEEP 98304:koGTcSNEofbTIS0JqbEfQ652/N3ZyTudrpmBqKZjUQwZ/K+OQUUZ07PpXbqWPda1:PS9i3GZyTudt6Vj+Z/KY07huWlv+A7jI
TLSH
T1E866F056EBA89E3EC8B700730D5A41362579DE26CB01A647B96C336C38779EC4F853D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Adani Gas Bill Update Side.apk

File Explorer

Adani Gas Bill Update Side.apk

.apk 6.7MB

Adani Gas Bill Update Side.apk

SHA256 21b97b1b8e1b3489d403a278206e255d8fcb90a9584f58de9c4c79b63d67f305
MD5 97cac31cc2360f9578d0f9cad0dc4dfa
SHA1 5b26869fb7062099c9337cc6216913f7d2490b2d
SHA512 ea01cbe590601e26666d70a34a1c82e63d6fc48c65048ab071a28a9a8ae0cda072deac50e1f8e2d0a28700ae0c51c2ceffdbe931172bad81b132b2da34937eae
SSDEEP 98304:koGTcSNEofbTIS0JqbEfQ652/N3ZyTudrpmBqKZjUQwZ/K+OQUUZ07PpXbqWPda1:PS9i3GZyTudt6Vj+Z/KY07huWlv+A7jI
TLSH
T1E866F056EBA89E3EC8B700730D5A41362579DE26CB01A647B96C336C38779EC4F853D8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

00b4af797dace8a7db3d6a029d627e609e3c032dfe516511d7e94442961d18d2

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Li Wei,OU=Mobile Engineering,O=DragonSoft Technologies,L=Shanghai,ST=Shanghai Municipality,C=CN

com.xwusuc.uryjwk

com.xwusuc.uryjwk.ins.InstallResultReceiver

com.example.android.apis.content.SESSION_API_PACKAGE_INSTALLED com.verify.weird.ACTION_INSTALL_COMPLETE

com.xwusuc.uryjwk.widget.AddNoteReceiver

android.appwidget.action.APPWIDGET_UPDATE

com.xwusuc.uryjwk.widget.NotesWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

Adani Gas Bill Update Side.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.xwusuc.uryjwk.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Adani Gas Bill Update Side.apk

File Signature issue

com.xwusuc.uryjwk.ins.DynamicInstallDropSession

com.xwusuc.uryjwk.widget.NotesWidgetActivity

com.xwusuc.uryjwk.presentation.MainActivity

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.xwusuc.uryjwk.ins.VpnController

androidx.appcompat.app.AppLocalesMetadataHolderService

com.google.firebase.components.ComponentDiscoveryService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.sessions.SessionLifecycleService

androidx.core.widget.RemoteViewsCompatService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.xwusuc.uryjwk.ins.InstallResultReceiver

com.xwusuc.uryjwk.widget.AddNoteReceiver

com.xwusuc.uryjwk.widget.NotesWidgetReceiver

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Sharing

General

Malware Config

Signatures

File Explorer

Adani Gas Bill Update Side.apk

File Signature issue

com.xwusuc.uryjwk.ins.DynamicInstallDropSession

com.xwusuc.uryjwk.widget.NotesWidgetActivity

com.xwusuc.uryjwk.presentation.MainActivity

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.xwusuc.uryjwk.ins.VpnController

androidx.appcompat.app.AppLocalesMetadataHolderService

com.google.firebase.components.ComponentDiscoveryService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.sessions.SessionLifecycleService

androidx.core.widget.RemoteViewsCompatService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.xwusuc.uryjwk.ins.InstallResultReceiver

com.xwusuc.uryjwk.widget.AddNoteReceiver

com.xwusuc.uryjwk.widget.NotesWidgetReceiver

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

Adani Gas Bill Update Side.apk