biscoito[.]apk | Triage™

General

Target
biscoito.apk
Size 5.0MB
Sample260930-e2qhsssx3r
SHA256 c95db16a01b00b724deb53e133c0586ecdcc4950982e3d397ee5400524f6d6c6
MD5 9e47b246595c45bd1e9a045a8edece86
SHA1 bc7bd6ca8fbd86943d1e5b969313c5e155e38063
SHA512 8a1e970989fbfb1b058ad5e77acd5e30a78731c977a491ce46484ba71e80bfcce414452affc5c9e831f0021553d1795402f930df8b503a72bdd477951bc18ba2
SSDEEP 98304:b0GMPPDkxA9nyq59eT7LUOGQtKo/KrrHT5T1OYlbTcoO:wBdS3eQyfncF
TLSH
T1DF36DF8BFB88A96BC4F753B24536532245474C268B83D6C36D58723C18BB5D07F9ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
biscoito.apk

File Explorer

biscoito.apk

.apk 5.0MB

biscoito.apk

SHA256 c95db16a01b00b724deb53e133c0586ecdcc4950982e3d397ee5400524f6d6c6
MD5 9e47b246595c45bd1e9a045a8edece86
SHA1 bc7bd6ca8fbd86943d1e5b969313c5e155e38063
SHA512 8a1e970989fbfb1b058ad5e77acd5e30a78731c977a491ce46484ba71e80bfcce414452affc5c9e831f0021553d1795402f930df8b503a72bdd477951bc18ba2
SSDEEP 98304:b0GMPPDkxA9nyq59eT7LUOGQtKo/KrrHT5T1OYlbTcoO:wBdS3eQyfncF
TLSH
T1DF36DF8BFB88A96BC4F753B24536532245474C268B83D6C36D58723C18BB5D07F9ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

bba4e42b3d43cbdcc1205fa5c5bc5d087ec6c8980e553ff75e88dcf6a7be1b32

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MrTusarRX

biscuit.dragon.ancient

biscuit.dragon.ancient.Splasher

biscuit.dragon.ancient.HomeSIM

android.intent.action.MAIN

biscuit.dragon.ancient.HomeWallp

android.intent.action.MAIN

biscuit.dragon.ancient.HomeSmsung

android.intent.action.MAIN

biscuit.dragon.ancient.PlayS

android.intent.action.MAIN

biscuit.dragon.ancient.quicksandagaacck

biscuit.dragon.ancient.velvetrdibjubr

biscuit.dragon.ancient.lanternyjbidlyvyxlw

biscuit.dragon.ancient.tornadobzgtsdpp

biscuit.dragon.ancient.midnightbmaaplqwcljbb

biscuit.dragon.ancient.concertuzfkuenlm

biscuit.dragon.ancient.quarantinenxosxghhqx

biscuit.dragon.ancient.speakit

biscuit.dragon.ancient.voyageiirodwcv

biscuit.dragon.ancient.glaciermdthbhsn

biscuit.dragon.ancient.indigomytmcstbds

biscuit.dragon.ancient.Toastit

biscuit.dragon.ancient.mammothbehfxlzlrwe

biscuit.dragon.ancient.undergroundtrbchwwpatl

biscuit.dragon.ancient.Inputdevicemuyegmg

biscuit.dragon.ancient.universelebkqm

biscuit.dragon.ancient.pencilzzyzacagey

biscuit.dragon.ancient.novafujvsohn

biscuit.dragon.ancient.elephantinewjjaisalwobu

biscuit.dragon.ancient.penguinhwvzsw

biscuit.dragon.ancient.devicemuyegmg

biscuit.dragon.ancient.teacherlymzljyyvmo

biscuit.dragon.ancient.treasurewzpasxthyyrc

biscuit.dragon.ancient.zenithalgclqjwnhm

biscuit.dragon.ancient.latticevecbjvi

biscuit.dragon.ancient.CallBacker

biscuit.dragon.ancient.boulderramizksyb

biscuit.dragon.ancient.alarme

AppAlarm

biscuit.dragon.ancient.zipperyyhhhmdvuaix

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

biscuit.dragon.ancient.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

biscoito.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

biscuit.dragon.ancient.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

biscuit.dragon.ancient.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

biscoito.apk

File Signature issue

biscuit.dragon.ancient.Splasher

biscuit.dragon.ancient.HomeSIM

biscuit.dragon.ancient.HomeWallp

biscuit.dragon.ancient.HomeSmsung

biscuit.dragon.ancient.PlayS

biscuit.dragon.ancient.quicksandagaacck

biscuit.dragon.ancient.velvetrdibjubr

biscuit.dragon.ancient.lanternyjbidlyvyxlw

biscuit.dragon.ancient.tornadobzgtsdpp

biscuit.dragon.ancient.midnightbmaaplqwcljbb

biscuit.dragon.ancient.concertuzfkuenlm

biscuit.dragon.ancient.quarantinenxosxghhqx

biscuit.dragon.ancient.speakit

biscuit.dragon.ancient.voyageiirodwcv

biscuit.dragon.ancient.glaciermdthbhsn

biscuit.dragon.ancient.indigomytmcstbds

biscuit.dragon.ancient.Toastit

biscuit.dragon.ancient.mammothbehfxlzlrwe

biscuit.dragon.ancient.undergroundtrbchwwpatl

biscuit.dragon.ancient.Inputdevicemuyegmg

biscuit.dragon.ancient.universelebkqm

biscuit.dragon.ancient.pencilzzyzacagey

biscuit.dragon.ancient.novafujvsohn

biscuit.dragon.ancient.elephantinewjjaisalwobu

biscuit.dragon.ancient.penguinhwvzsw

biscuit.dragon.ancient.devicemuyegmg

biscuit.dragon.ancient.teacherlymzljyyvmo

biscuit.dragon.ancient.treasurewzpasxthyyrc

biscuit.dragon.ancient.zenithalgclqjwnhm

biscuit.dragon.ancient.latticevecbjvi

biscuit.dragon.ancient.CallBacker

biscuit.dragon.ancient.boulderramizksyb

biscuit.dragon.ancient.keepsakenhnuehlin

biscuit.dragon.ancient.octopuscagjkrklsngm

biscuit.dragon.ancient.sundowntuvabwi

biscuit.dragon.ancient.frostbitetvtxjqldpcfuyu

biscuit.dragon.ancient.topazzdgkkh

biscuit.dragon.ancient.lighthousekqsugntpkhkyk

biscuit.dragon.ancient.resplendenttiuxrfamj

biscuit.dragon.ancient.castleotwnrplob

biscuit.dragon.ancient.boulderiawzoeewqk

biscuit.dragon.ancient.minserv

biscuit.dragon.ancient.fireflyfiqouckrs

biscuit.dragon.ancient.hurricaneebpukbqbaj

biscuit.dragon.ancient.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

biscuit.dragon.ancient.alarme

biscuit.dragon.ancient.zipperyyhhhmdvuaix

biscuit.dragon.ancient.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

biscoito.apk