ZRPAY_Pay_1[.]0[.]apk

General

Target
ZRPAY_Pay_1.0.apk
Size 8.6MB
Sample260930-al8bfsaf35
SHA256 7b6236a68051a024c2a56c94207e2894c9a252ab94257245172f64745f34af37
MD5 a25b32124b6ddad488bfa4e9a009db4d
SHA1 393af613de6d8db15dedeea0c8e1ca94e601ac43
SHA512 8d8da2a3446671ca0163f3e1599d45b250771c89dcc983f5cb5232958e91ea38279467bb6cc6f920468197a49ccf7ac04a96f20f68c7c5d7b542760739ae86ef
SSDEEP 196608:V7VQLc7rx9QYHxZyMPtWR8rz1DAmYtXs4f3KFL0W6woZW8HIaq+XT5pXMyL:E4r3QYHHyMPBLYOg3fw6HIHiFt5
TLSH
T1E2961299FB99D92FC433603349BA5331514B4C0A8A839B97695C7B0C39BB6D44F4AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ZRPAY_Pay_1.0.apk

File Explorer

ZRPAY_Pay_1.0.apk

.apk 8.6MB

ZRPAY_Pay_1.0.apk

SHA256 7b6236a68051a024c2a56c94207e2894c9a252ab94257245172f64745f34af37
MD5 a25b32124b6ddad488bfa4e9a009db4d
SHA1 393af613de6d8db15dedeea0c8e1ca94e601ac43
SHA512 8d8da2a3446671ca0163f3e1599d45b250771c89dcc983f5cb5232958e91ea38279467bb6cc6f920468197a49ccf7ac04a96f20f68c7c5d7b542760739ae86ef
SSDEEP 196608:V7VQLc7rx9QYHxZyMPtWR8rz1DAmYtXs4f3KFL0W6woZW8HIaq+XT5pXMyL:E4r3QYHHyMPBLYOg3fw6HIHiFt5
TLSH
T1E2961299FB99D92FC433603349BA5331514B4C0A8A839B97695C7B0C39BB6D44F4AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b584c203abb22c63e1882796818970c0fc793f568b8a95d981ab02612d945887

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.zrpay.sms

Android Permissions

ZRPAY_Pay_1.0.apk

Permissions

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.DUMP

com.foxehoster.online.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONdvzl

ZRPAY_Pay_1.0.apk

File Signature issue

com.foxehoster.online.LoginActivity

com.foxehoster.online.MainActivity

com.foxehoster.online.SplashActivity

com.foxehoster.online.MyBackgroundService

com.foxehoster.online.BootReceiver

com.foxehoster.online.NetworkChangeReceiver

com.foxehoster.online.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

ZRPAY_Pay_1.0.apk

File Signature issue

com.foxehoster.online.LoginActivity

com.foxehoster.online.MainActivity

com.foxehoster.online.SplashActivity

com.foxehoster.online.MyBackgroundService

com.foxehoster.online.BootReceiver

com.foxehoster.online.NetworkChangeReceiver

com.foxehoster.online.SmsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

ZRPAY_Pay_1.0.apk