Grok_v1[.]1[.]62_release[.]00_MOD[.]apk

General

Target
Grok_v1.1.62_release.00_MOD.apk
Size 58.5MB
Sample261002-sa44rsts2q
SHA256 005885ab40e64b4532b2556d48b37a68ab4f9da57f218bf2126813282561a0af
MD5 ae58aee7eee23ad277c265d959f925cb
SHA1 b86635dd0b59a2dbce8b89379d9aa447d5acaaa3
SHA512 7a40154b8b1fc5b0ec0249a866efbf7a3f7dc8d69e1784b1ba8985bc36fd65e17b51981f04dc109b87e4a00655d3e772ae9f988eef528f49e660d8c6c49809d3
SSDEEP 786432:di1wz8VhcwjkaA7q5H7utYzU/Xcir84cN1pl/u001NEvNm+xpTd04iuZ:dswz8Dcwjkaht7uY8hr84P8NjnJ
TLSH
T18ED7F188638CEC25EDB26879890D3635B3393C74A751E3D1183576396CB7AF0832A7D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Grok_v1.1.62_release.00_MOD.apk

File Explorer

Grok_v1.1.62_release.00_MOD.apk

.apk 58.5MB

Grok_v1.1.62_release.00_MOD.apk

SHA256 005885ab40e64b4532b2556d48b37a68ab4f9da57f218bf2126813282561a0af
MD5 ae58aee7eee23ad277c265d959f925cb
SHA1 b86635dd0b59a2dbce8b89379d9aa447d5acaaa3
SHA512 7a40154b8b1fc5b0ec0249a866efbf7a3f7dc8d69e1784b1ba8985bc36fd65e17b51981f04dc109b87e4a00655d3e772ae9f988eef528f49e660d8c6c49809d3
SSDEEP 786432:di1wz8VhcwjkaA7q5H7utYzU/Xcir84cN1pl/u001NEvNm+xpTd04iuZ:dswz8Dcwjkaht7uY8hr84P8NjnJ
TLSH
T18ED7F188638CEC25EDB26879890D3635B3393C74A751E3D1183576396CB7AF0832A7D9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6f0db37926cbfe589c612c9717adbadcafdcc1107cbee537c49cc28f61b95223

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=GocMod Team,OU=GocMod Team,O=GocMod Team,L=GocMod Team,ST=GocMod Team,C=VN

ai.x.grok

ai.x.grok.main.GrokActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.SEND android.intent.action.SEND android.intent.action.SEND_MULTIPLE

ai.x.grok.textselection.TextSelectionIntegrationActivity

android.intent.action.PROCESS_TEXT

com.google.android.libraries.places.widget.AutocompleteActivity

io.intercom.android.sdk.lightbox.LightBoxActivity

io.intercom.android.sdk.activities.IntercomPostActivity

io.intercom.android.sdk.post.PostActivityV2

io.intercom.android.sdk.activities.IntercomNoteActivity

io.intercom.android.sdk.activities.IntercomSheetActivity

io.intercom.android.sdk.activities.IntercomCarouselActivity

io.intercom.android.sdk.helpcenter.articles.IntercomArticleActivity

io.intercom.android.sdk.survey.ui.IntercomSurveyActivity

io.intercom.android.sdk.helpcenter.search.IntercomArticleSearchActivity

io.intercom.android.sdk.m5.IntercomRootActivity

io.intercom.android.sdk.m5.bubble.IntercomBubbleActivity

io.intercom.android.sdk.ui.preview.ui.IntercomPreviewActivity

androidx.credentials.playservices.HiddenActivity

androidx.credentials.playservices.IdentityCredentialApiHiddenActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.activity.ComponentActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

ai.x.grok.auth.GrokAuthenticatorService

android.accounts.AccountAuthenticator

ai.x.grok.image.video.GrokGeneratedVideoDownloadService

ai.x.grok.voice.service.GrokVoiceService

ai.x.subsystem.grok.audio.foregroundservice.AudioPlaybackService

androidx.media3.session.MediaSessionService

com.google.firebase.components.ComponentDiscoveryService

io.intercom.android.sdk.fcm.IntercomFcmMessengerService

com.google.firebase.MESSAGING_EVENT com.google.firebase.INSTANCE_ID_EVENT

androidx.credentials.playservices.CredentialProviderMetadataHolder

androidx.pdf.service.PdfDocumentServiceImpl

androidx.pdf.service.PdfDocumentService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

androidx.core.widget.RemoteViewsCompatService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

ai.x.grok.widget.GrokAppWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

ai.x.grok.widget.GrokChatWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

ai.x.grok.widget.GrokImagineWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

ai.x.grok.widget.GrokVoiceWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

Grok_v1.1.62_release.00_MOD.apk

Permissions

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.MANAGE_ACCOUNTS

android.permission.POST_NOTIFICATIONS

android.permission.RECORD_AUDIO

android.permission.USE_CREDENTIALS

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.MANAGE_OWN_CALLS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.ACCESS_ADSERVICES_AD_ID

ai.x.grok.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.BLUETOOTH

android.permission.MODIFY_AUDIO_SETTINGS

com.android.vending.CHECK_LICENSE

Sharing

General

Malware Config

Signatures

File Explorer

Grok_v1.1.62_release.00_MOD.apk

File Signature issue

ai.x.grok.main.GrokActivity

ai.x.grok.textselection.TextSelectionIntegrationActivity

com.google.android.libraries.places.widget.AutocompleteActivity

io.intercom.android.sdk.lightbox.LightBoxActivity

io.intercom.android.sdk.activities.IntercomPostActivity

io.intercom.android.sdk.post.PostActivityV2

io.intercom.android.sdk.activities.IntercomNoteActivity

io.intercom.android.sdk.activities.IntercomSheetActivity

io.intercom.android.sdk.activities.IntercomCarouselActivity

io.intercom.android.sdk.helpcenter.articles.IntercomArticleActivity

io.intercom.android.sdk.survey.ui.IntercomSurveyActivity

io.intercom.android.sdk.helpcenter.search.IntercomArticleSearchActivity

io.intercom.android.sdk.m5.IntercomRootActivity

io.intercom.android.sdk.m5.bubble.IntercomBubbleActivity

io.intercom.android.sdk.ui.preview.ui.IntercomPreviewActivity

androidx.credentials.playservices.HiddenActivity

androidx.credentials.playservices.IdentityCredentialApiHiddenActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.activity.ComponentActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

ai.x.grok.auth.GrokAuthenticatorService

ai.x.grok.image.video.GrokGeneratedVideoDownloadService

ai.x.grok.voice.service.GrokVoiceService

ai.x.subsystem.grok.audio.foregroundservice.AudioPlaybackService

com.google.firebase.components.ComponentDiscoveryService

io.intercom.android.sdk.fcm.IntercomFcmMessengerService

androidx.credentials.playservices.CredentialProviderMetadataHolder

androidx.pdf.service.PdfDocumentServiceImpl

androidx.pdf.service.PdfDocumentService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.camera.core.impl.MetadataHolderService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

androidx.room.MultiInstanceInvalidationService

androidx.core.widget.RemoteViewsCompatService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

ai.x.grok.widget.GrokAppWidgetReceiver

ai.x.grok.widget.GrokChatWidgetReceiver

ai.x.grok.widget.GrokImagineWidgetReceiver

ai.x.grok.widget.GrokVoiceWidgetReceiver

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

com.x.android.fileprovider.XExternalFileProvider

io.intercom.android.sdk.IntercomInitializeContentProvider

io.intercom.android.sdk.IntercomFileProvider

com.google.firebase.provider.FirebaseInitProvider

ru.noties.jlatexmath.JLatexMathInitProvider