ChatAI[.]apk | Triage™

General

Target
ChatAI.apk
Size 9.0MB
Sample261002-pg6pdsts4p
SHA256 01a2bb200eb09a09dc3ea86a9869bec1b45fca2544bc7d4eb33a35dd25bc690d
MD5 c61cfedbd17b50dcdce2b00e86fa5a7c
SHA1 04582e7f26dc5f789b5358f1547d2c2b223f61a6
SHA512 7e66933b48b43fb35f04c04c746c9320a877d6d28ba7d13f25d2f5a4021311ab8eb807c64a0130ab9f7523f804c110f628ecd3d50093a4e70ad55d55059f1603
SSDEEP 196608:/lT3h+c/ORzpuCPU7t4rxKjTG49D/nz5DntlBM8uQqcbO:/l1+coz4IUh4r0jTftlBM8ycbO
TLSH
T137A612308E5C1822C436BB7594EF1B9373BC93060301E63F27BCA6693DD7B969A42975
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ChatAI.apk

File Explorer

ChatAI.apk

.apk 9.0MB

ChatAI.apk

SHA256 01a2bb200eb09a09dc3ea86a9869bec1b45fca2544bc7d4eb33a35dd25bc690d
MD5 c61cfedbd17b50dcdce2b00e86fa5a7c
SHA1 04582e7f26dc5f789b5358f1547d2c2b223f61a6
SHA512 7e66933b48b43fb35f04c04c746c9320a877d6d28ba7d13f25d2f5a4021311ab8eb807c64a0130ab9f7523f804c110f628ecd3d50093a4e70ad55d55059f1603
SSDEEP 196608:/lT3h+c/ORzpuCPU7t4rxKjTG49D/nz5DntlBM8uQqcbO:/l1+coz4IUh4r0jTftlBM8ycbO
TLSH
T137A612308E5C1822C436BB7594EF1B9373BC93060301E63F27BCA6693DD7B969A42975
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

4c8eb8c9cd631b338af757b1e2d93612bb17724b21f7eeabb561a6448a74dfdc

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.nqrta.vpdiyvvfs

Android Permissions

ChatAI.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.USE_EXACT_ALARM

android.permission.SCHEDULE_EXACT_ALARM

android.permission.QUERY_ALL_PACKAGES

com.nqrta.vpdiyvvfs.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

ChatAI.apk

File Signature issue

bexc.auli.Sparrow

bexc.auli.Falcon

bexc.auli.Crane

bexc.auli.Ibis

Sharing

General

Malware Config

Signatures

File Explorer

ChatAI.apk

File Signature issue

bexc.auli.Sparrow

bexc.auli.Falcon

bexc.auli.Crane

bexc.auli.Ibis

Android Permissions

ChatAI.apk