ExLoader[.]apk | Triage™

General

Target
ExLoader.apk
Size 43.0MB
Sample260925-kph6vace34
SHA256 7ce2aac33caedc163aebaa02d9e1c7e088d81046ae2e2dc1fd1d19dc3c688dbc
MD5 13e4798a1a5635ec1c3681b0581013b0
SHA1 40eaaa6ceb3003d1432d9afb0a48aabc185c027e
SHA512 58edde432d04a1831ebb56dbbb44fbe85f801774b40e73ce05de73eb282140c32146c8f9469306c73af536bd69559b9887af32886a6fd5b01cad80e55b35d24e
SSDEEP 786432:Uq6X/8ghq/9OMdCo8ukG+oy6A1PreGQWo2b:V6EAqlb8A+oy6KPyGK2b
TLSH
T1F9A7BF4AC43C9335F5EFB27CBE3E0256A234763451B9C15AAA1D7008FF5A2B055B2BD2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ExLoader.apk

File Explorer

ExLoader.apk

.apk 43.0MB

ExLoader.apk

SHA256 7ce2aac33caedc163aebaa02d9e1c7e088d81046ae2e2dc1fd1d19dc3c688dbc
MD5 13e4798a1a5635ec1c3681b0581013b0
SHA1 40eaaa6ceb3003d1432d9afb0a48aabc185c027e
SHA512 58edde432d04a1831ebb56dbbb44fbe85f801774b40e73ce05de73eb282140c32146c8f9469306c73af536bd69559b9887af32886a6fd5b01cad80e55b35d24e
SSDEEP 786432:Uq6X/8ghq/9OMdCo8ukG+oy6A1PreGQWo2b:V6EAqlb8A+oy6KPyGK2b
TLSH
T1F9A7BF4AC43C9335F5EFB27CBE3E0256A234763451B9C15AAA1D7008FF5A2B055B2BD2
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a3063c76c784820b359b1b22a19bcd6ea4339b260642fb530adec5cb26a96ca4

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=SwiftSoft DEV,OU=SwiftSoft DEV,O=SwiftSoft DEV,L=Warsaw,ST=Warsaw,C=PL

com.swiftsoft.exloader

Android Permissions

ExLoader.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.swiftsoft.exloader.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

ExLoader.apk

File Signature issue

com.swiftsoft.exloader.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

ExLoader.apk

File Signature issue

com.swiftsoft.exloader.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

ExLoader.apk