spinbetter[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
spinbetter.apk
Size 46.0MB
Sample260925-pltwds11a1
SHA256 430ffc6eb94c56c51713861f8662bba97522abab88558cb88cad00265f85e48d
MD5 3542b81f962b4af0028a0796ee7af256
SHA1 588b7f3139689648ce8eb22858133d9576d15da0
SHA512 d92cf910979ea732e6e879a6a40699ae9ff63ffc45d1aa9cb722e42de8cffa817bd5c102d7574bb73898d623d79f7ae97955d99ea4e13319019df2f8cbc62ada
SSDEEP 786432:MzbBd6vEeoj5nHjuld1XBUqEQRN3J8s9uDKqS3tAMdDr0o2mVqE/XE23qYxj:ybBWEFSym3J8P2AMdDr0KVqyx5
TLSH
T192B7229AF32C8D1ED8B776764C2E163622550D258E42EB4B7818376E39B39E40F4D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 6 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
spinbetter.apk

File Explorer

spinbetter.apk

.apk 46.0MB

spinbetter.apk

SHA256 430ffc6eb94c56c51713861f8662bba97522abab88558cb88cad00265f85e48d
MD5 3542b81f962b4af0028a0796ee7af256
SHA1 588b7f3139689648ce8eb22858133d9576d15da0
SHA512 d92cf910979ea732e6e879a6a40699ae9ff63ffc45d1aa9cb722e42de8cffa817bd5c102d7574bb73898d623d79f7ae97955d99ea4e13319019df2f8cbc62ada
SSDEEP 786432:MzbBd6vEeoj5nHjuld1XBUqEQRN3J8s9uDKqS3tAMdDr0o2mVqE/XE23qYxj:ybBWEFSym3J8P2AMdDr0KVqyx5
TLSH
T192B7229AF32C8D1ED8B776764C2E163622550D258E42EB4B7818376E39B39E40F4D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9a418bec0dbf36bc218dccbf4731b297df45dfdf55f088227ec988c1a6ac0d5d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=spinbetter,OU=spinbetter,O=spinbetter,L=spinbetter,ST=spinbetter,C=CY

org.spinbetter.client

android.permission.VIBRATE android.permission.INTERNET android.permission.ACCESS_FINE_LOCATION android.permission.READ_PHONE_STATE android.permission.USE_CREDENTIALS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.POST_NOTIFICATIONS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.USE_FINGERPRINT android.permission.USE_SIP android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_ALL_DOWNLOADS android.permission.CAMERA android.permission.ACCESS_COARSE_LOCATION android.permission.FOREGROUND_SERVICE com.google.android.gms.permission.AD_ID android.permission.SCHEDULE_EXACT_ALARM android.permission.HIGH_SAMPLING_RATE_SENSORS android.permission.GET_TASKS android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.REQUEST_INSTALL_PACKAGES android.permission.READ_PRIVILEGED_PHONE_STATE android.permission.USE_BIOMETRIC com.google.android.providers.gsf.permission.READ_GSERVICES com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_AD_ID com.samsung.android.mapsagent.permission.READ_APP_INFO com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA android.permission.RECEIVE_BOOT_COMPLETED org.spinbetter.client.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION org.spinbetter.client.permission.PROCESS_PUSH_MSG org.spinbetter.client.permission.PUSH_PROVIDER

org.xplatform.client1.features.appactivity.ApplicationActivity

org.xplatform.client1.features.appactivity.IntentForwardingActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

androidx.biometric.internal.ui.FingerprintDialogActivity

com.yandex.authsdk.internal.AuthSdkActivity

com.yandex.authsdk.internal.ChromeTabLoginActivity

com.yandex.authsdk.internal.WebViewLoginActivity

com.yandex.authsdk.internal.ChromeTabDataActivity

android.intent.action.VIEW android.intent.action.VIEW

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

ru.ok.android.sdk.OkAuthActivity

ru.ok.android.sdk.OkPostingActivity

ru.ok.android.sdk.OkAppInviteActivity

ru.ok.android.sdk.OkAppSuggestActivity

com.vk.api.sdk.ui.VKWebViewAuthActivity

com.vk.api.sdk.ui.VKCaptchaActivity

com.vk.api.sdk.ui.VKConfirmationActivity

com.journeyapps.barcodescanner.CaptureActivity

com.jakewharton.processphoenix.PhoenixActivity

com.huawei.hms.support.api.push.TransActivity

com.huawei.hms.hwid.internal.ui.activity.HwIdSignInHubActivity

com.huawei.hms.account.internal.ui.activity.AccountSignInHubActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.huawei.hms.activity.BridgeActivity

com.huawei.hms.activity.EnableServiceActivity

org.xplatform.feature.online_call.impl.service.OnlineCallService

org.xplatform.feature.online_call.impl.service.OnlineCallService.STOP_CALL org.xplatform.feature.online_call.impl.service.OnlineCallService.STOP_SERVICE

org.xplatform.game_broadcasting.impl.presentation.video.window_screen.GameVideoWindowService

org.xplatform.game_broadcasting.impl.presentation.zone.window_screen.GameZoneWindowService

org.xplatform.widget.impl.presentation.top.live.AppWidgetTopLiveService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.live.AppWidgetTopLiveSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.line.AppWidgetTopLineService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.line.AppWidgetTopLineSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.favorites.AppWidgetFavoritesService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.favorites.AppWidgetFavoritesSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.app_update.impl.presentation.apk_service.AppUpdateDownloadApkService

org.xplatform.background_video.impl.presentation.BackgroundVideoService

org.xplatform.services.mobile_services.impl.presentation.services.HuaweiMessagingService

com.huawei.push.action.MESSAGING_EVENT

org.xplatform.services.mobile_services.impl.presentation.services.GoogleMessagingService

com.google.firebase.MESSAGING_EVENT

androidx.camera.core.impl.MetadataHolderService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.sessions.SessionLifecycleService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.jakewharton.processphoenix.PhoenixService

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG com.huawei.push.msg.PASSBY_MSG

com.huawei.agconnect.core.ServiceDiscovery