Tally[.]apk | Triage™

General

Target
Tally.apk
Size 2.3MB
Sample260925-sclefavsgx
SHA256 def821115022487b5cf4ec9aabde64a2eb6fa345b5a7258f6103fe8a48bb5b52
MD5 a2cb5552b344c5354a4b9742afeb7cd3
SHA1 3a495eef9425c3b479eee822f7fc49bd06eccb12
SHA512 5fd11c2d01cb54b9143f5e30e922b6130b3123efa95b30b8006d2f86b6139ebaecedca772d6f2f554285c508d2ea4647fb8faf202a178701e42ba8ebeaa2dd89
SSDEEP 49152:8tK2Ayepl9Kxc46+XcI+mG8pXZcdevDHM0:8tKvjl9KaZ+bPcd6
TLSH
T125B55C01F6428EA1CAACE33988B1479573326DC9A6431307544CB2B47FBB5DA77E92CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Tally.apk

File Explorer

Tally.apk

.apk 2.3MB

Tally.apk

SHA256 def821115022487b5cf4ec9aabde64a2eb6fa345b5a7258f6103fe8a48bb5b52
MD5 a2cb5552b344c5354a4b9742afeb7cd3
SHA1 3a495eef9425c3b479eee822f7fc49bd06eccb12
SHA512 5fd11c2d01cb54b9143f5e30e922b6130b3123efa95b30b8006d2f86b6139ebaecedca772d6f2f554285c508d2ea4647fb8faf202a178701e42ba8ebeaa2dd89
SSDEEP 49152:8tK2Ayepl9Kxc46+XcI+mG8pXZcdevDHM0:8tKvjl9KaZ+bPcd6
TLSH
T125B55C01F6428EA1CAACE33988B1479573326DC9A6431307544CB2B47FBB5DA77E92CD
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

222

File Signature issue

Digest

d2caa7b7744815626d565f4c4eecaa8c188a0bda59f485c67da08690c8bffa216598332d6b173204537fc20e5beb531e8593e03516978decf512ef55301e76e4

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Tally,O=Personal

app.tally

Android Permissions

Tally.apk

Permissions

android.permission.PACKAGE_USAGE_STATS

android.permission.QUERY_ALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

app.tally.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tally.apk

File Signature issue

app.tally.MainActivity

app.tally.service.ScrollTrackerService

app.tally.service.NotificationCounterService

app.tally.service.SnapshotJob

app.tally.widget.TodayWidget

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

Tally.apk

File Signature issue

app.tally.MainActivity

app.tally.service.ScrollTrackerService

app.tally.service.NotificationCounterService

app.tally.service.SnapshotJob

app.tally.widget.TodayWidget

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

Tally.apk