5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk
Size 40.9MB
Sample261005-ppd94ssfjd
SHA256 5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c
MD5 df95fa487c3a75f61a9dd7dccf5e4caa
SHA1 5256e5c6a23b1ab11a643c9c034cdf50eff2d59f
SHA512 e1b6eb1f423155b7572b641d526ec8da83a2630c6bec904f5223c05da15e5a709863c12a52205d8c2475c83a414499c10314c0e2169d79c1d19719001532c3a5
SSDEEP 786432:JpSApkbtFGR5UwHqEnTmHM1fgkjUeKeVqfbZsx8Nec:J4AOb3GR5UkndAeNWs8Nec
TLSH
T1AF97BEA5F70D9425F9C6B03C7DBE8A50F22E3C8CC68AA2471411B279E9736F03765693
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk
unpack001/update.apk

File Explorer

5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk

.apk 40.9MB
update.apk

.apk 31.6MB

5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk

SHA256 5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c
MD5 df95fa487c3a75f61a9dd7dccf5e4caa
SHA1 5256e5c6a23b1ab11a643c9c034cdf50eff2d59f
SHA512 e1b6eb1f423155b7572b641d526ec8da83a2630c6bec904f5223c05da15e5a709863c12a52205d8c2475c83a414499c10314c0e2169d79c1d19719001532c3a5
SSDEEP 786432:JpSApkbtFGR5UwHqEnTmHM1fgkjUeKeVqfbZsx8Nec:J4AOb3GR5UkndAeNWs8Nec
TLSH
T1AF97BEA5F70D9425F9C6B03C7DBE8A50F22E3C8CC68AA2471411B279E9736F03765693
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

3f5b651f575ec857566e449d98f8a86f28042808ebac429bdbc5904186ac2154

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=K4FDUA,OU=XJA4FHG9,O=HLRQURQMTL,L=DF7MF8KJ,ST=APHYR7GC,C=RS,1.2.840.113549.1.9.1=#0c1046584e4441403441434a51432e636f6d

tus.dsjey.fcrmrnhmzzj

update.apk

SHA256 923de6e7f5cba83122c38553c55c53d700425faf3ae483fc52855773c2204e9c
MD5 beb3f5c500bac41a2fc840dad23a6c41
SHA1 ce3c6a4a697b9e49bc4c2b63a9f36ef83be92932
SHA512 756aad0775427b519828d4c945f59eae9da981ab83ab99cbdb4c470ac0e892b336d1bb7bf21996cf894b597ba59ee48a7dce8509f44ab80bf6931acbc242a8ff
SSDEEP 393216:sRqEnOSmHQc2h1fgkjUQX9uleeQMZhpHDnZs6+8fVe8:kqEnTmHM1fgkjUeKeVqfbZsx8Ne8
TLSH
T1D6778CA5F70D9425F9C6B03C7DBE8A50F22E3C8CC689B2461011B279E9B36F07765693
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ab18c5d7de18c66a0e612589e0b5d590721d3f10f665199c4f85f83ba030a8bb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=APK Builder,OU=Development,O=Company,L=City,ST=State,C=US

com.mercedes.pack36

com.mercedes.pack36.permission.PROFILE_BRIDGE android.permission.PACKAGE_USAGE_STATS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SYSTEM_ALERT_WINDOW android.permission.MANAGE_EXTERNAL_STORAGE android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_NOTIFICATION_POLICY android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.FOREGROUND_SERVICE_CAMERA android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED android.permission.RECEIVE_BOOT_COMPLETED android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH_CONNECT android.permission.POST_NOTIFICATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM android.permission.WAKE_LOCK android.permission.REORDER_TASKS android.permission.QUERY_ALL_PACKAGES android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.REQUEST_DELETE_PACKAGES android.permission.REQUEST_INSTALL_PACKAGES android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.WRITE_SYNC_SETTINGS android.permission.WRITE_CONTACTS android.permission.READ_PHONE_NUMBERS android.permission.READ_PHONE_STATE android.permission.READ_CONTACTS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.CALL_PHONE android.permission.WRITE_SECURE_SETTINGS android.permission.INTERACT_ACROSS_USERS android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT com.mercedes.pack36.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.mercedes.pack36.ui.EntryWindowActivity

com.mercedes.pack36.ui.ToFrontActivity

com.mercedes.pack36.vpn.VpnPermissionActivity

com.mercedes.pack36.realtime.ScreenCapturePermissionActivity

com.mercedes.pack36.camera.CameraForegroundActivity

com.mercedes.pack36.ui.ClipboardReadActivity

com.mercedes.pack36.ui.ClipboardWriteActivity

com.mercedes.pack36.ui.ScreenWakeActivity

com.mercedes.pack36.keep_alive.NetworkKeepAliveActivity

com.mercedes.pack36.accessibility.PermissionRuntimeRequestActivity

com.mercedes.pack36.accessibility.DeviceAdminRequestActivity

com.mercedes.pack36.accessibility.PrivacyPasswordVerificationActivity

com.mercedes.pack36.accessibility.CloneBackCallbackActivity

com.mercedes.pack36.clone.BACK_LOAD com.mercedes.pack36.clone.BACK_SYNC com.mercedes.pack36.clone.BACK_ALERT

com.mercedes.pack36.clone.CloneLaunchActivity

com.mercedes.pack36.clone.LAUNCH

com.mercedes.pack36.clone.CloneSetupActivity

com.mercedes.pack36.clone.SETUP com.mercedes.pack36.clone.LOAD com.mercedes.pack36.clone.CLONE com.mercedes.pack36.clone.UNINSTALL com.mercedes.pack36.clone.REFRESH com.mercedes.pack36.clone.DESTROY

com.mercedes.pack36.clone.CloneSetupWizardActivity

com.mercedes.pack36.clone.CloneOperationActivity

com.mercedes.pack36.clone.INTERNAL_SETUP com.mercedes.pack36.clone.INTERNAL_LOAD com.mercedes.pack36.clone.INTERNAL_CLONE com.mercedes.pack36.clone.INTERNAL_UNINSTALL com.mercedes.pack36.clone.INTERNAL_REFRESH com.mercedes.pack36.clone.INTERNAL_DESTROY com.mercedes.pack36.clone.INSTALL_RESULT com.mercedes.pack36.clone.UNINSTALL_RESULT

com.mercedes.pack36.accessibility.AccessibilityGuideActivity

com.mercedes.pack36.accessibility.DeveloperOptionsLaunchActivity

com.mercedes.pack36.inject.InjectWebViewActivity

com.mercedes.pack36.lockscreen.Fakevcxyleghssbjbcbhcyqicp

com.mercedes.pack36.broadcast.BroadcastAlertActivity

com.mercedes.pack36.broadcast.BroadcastLaunchActivity

com.mercedes.pack36.vpn.RuleVpnService

android.net.VpnService

com.mercedes.pack36.services.rohigejamupmhsjxxlasineumekofService

com.mercedes.pack36.services.CoreWorkService

com.mercedes.pack36.services.IndependentProcessGuardService

com.mercedes.pack36.services.AssistOneProcessService

com.mercedes.pack36.services.AssistTwoProcessService

com.mercedes.pack36.camera.CameraStreamService

com.mercedes.pack36.services.HelloAudioService

com.mercedes.pack36.services.ServiceKeepAliveJobService

com.mercedes.pack36.services.SyncAccountAuthenticatorService

android.accounts.AccountAuthenticator

com.mercedes.pack36.services.SyncAccountSyncAdapterService

android.content.SyncAdapter

com.mercedes.pack36.clone.CloneProfileService

com.mercedes.pack36.keep_alive.HermesQuickSettingsTileService

android.service.quicksettings.action.QS_TILE

com.mercedes.pack36.keep_alive.HermesMediaBrowserService

android.media.browse.MediaBrowserService

com.mercedes.pack36.keep_alive.HermesMediaRouteProviderService

android.media.MediaRouteProviderService

com.mercedes.pack36.keep_alive.HermesMediaRoute2ProviderService

android.media.MediaRoute2ProviderService

com.mercedes.pack36.keep_alive.HermesDreamService

android.service.dreams.DreamService

com.mercedes.pack36.accessibility.AppAccessibilityService

android.accessibilityservice.AccessibilityService

com.mercedes.pack36.accessibility.HermesNotificationListenerService

android.service.notification.NotificationListenerService

com.mercedes.pack36.accessibility.PrivilegedDaemonService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.mercedes.pack36.clone.ClonePackageResultReceiver

com.mercedes.pack36.keep_alive.HermesAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.mercedes.pack36.keep_alive.HardwareEventReceiver

android.bluetooth.device.action.ACL_CONNECTED android.bluetooth.device.action.ACL_DISCONNECTED android.bluetooth.device.action.ACL_DISCONNECT_REQUESTED android.bluetooth.a2dp.profile.action.CONNECTION_STATE_CHANGED android.hardware.usb.action.USB_DEVICE_ATTACHED android.hardware.usb.action.USB_DEVICE_DETACHED android.hardware.usb.action.USB_ACCESSORY_ATTACHED android.hardware.usb.action.USB_ACCESSORY_DETACHED

com.mercedes.pack36.services.BootStartupReceiver

com.globalnew.botreceiver.ACTION_START com.mercedes.pack36.action.DROPPER_READY android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.MY_PACKAGE_REPLACED

com.mercedes.pack36.app_management.AppReplacementInstallResultReceiver

com.hermes.apps.action.REPLACEMENT_INSTALL_PREPARED com.hermes.apps.action.REPLACEMENT_INSTALL_SUBMITTED com.hermes.apps.action.REPLACEMENT_INSTALL_USER_ACTION_REQUIRED com.hermes.apps.action.REPLACEMENT_INSTALL_RESULT

com.mercedes.pack36.services.ServiceKeepAliveAlarmReceiver

MY_CUSTOM_ACTION com.mercedes.pack36.action.KEEPALIVE_TICK

com.mercedes.pack36.services.ServiceResetReceiver

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE

com.mercedes.pack36.services.SmsSignalReceiver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.mercedes.pack36.accessibility.AppDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED android.intent.action.ACTION_SHUTDOWN android.intent.action.USER_PRESENT android.intent.action.SCREEN_OFF android.intent.action.SCREEN_ON

com.mercedes.pack36.clone.CloneDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.PROFILE_PROVISIONING_COMPLETE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INSTALL_PACKAGES

android.permission.INTERNET

tus.dsjey.fcrmrnhmzzj.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

5fa9f3e07b8f267944220c597e74b79d883087ee1bcfefaf7e35e9671934550c.apk

File Signature issue

tus.dsjey.fcrmrnhmzzj.UpdateProgressActivity

tus.dsjey.fcrmrnhmzzj.ConfirmDialog

tus.dsjey.fcrmrnhmzzj.MainActivity

tus.dsjey.fcrmrnhmzzj.SplashActivity

tus.dsjey.fcrmrnhmzzj.util.BroReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

update.apk

File Signature issue

com.mercedes.pack36.ui.EntryWindowActivity

com.mercedes.pack36.ui.ToFrontActivity

com.mercedes.pack36.vpn.VpnPermissionActivity

com.mercedes.pack36.realtime.ScreenCapturePermissionActivity

com.mercedes.pack36.camera.CameraForegroundActivity

com.mercedes.pack36.ui.ClipboardReadActivity

com.mercedes.pack36.ui.ClipboardWriteActivity

com.mercedes.pack36.ui.ScreenWakeActivity

com.mercedes.pack36.keep_alive.NetworkKeepAliveActivity

com.mercedes.pack36.accessibility.PermissionRuntimeRequestActivity

com.mercedes.pack36.accessibility.DeviceAdminRequestActivity

com.mercedes.pack36.accessibility.PrivacyPasswordVerificationActivity

com.mercedes.pack36.accessibility.CloneBackCallbackActivity

com.mercedes.pack36.clone.CloneLaunchActivity

com.mercedes.pack36.clone.CloneSetupActivity

com.mercedes.pack36.clone.CloneSetupWizardActivity

com.mercedes.pack36.clone.CloneOperationActivity

com.mercedes.pack36.accessibility.AccessibilityGuideActivity

com.mercedes.pack36.accessibility.DeveloperOptionsLaunchActivity

com.mercedes.pack36.inject.InjectWebViewActivity

com.mercedes.pack36.lockscreen.Fakevcxyleghssbjbcbhcyqicp

com.mercedes.pack36.broadcast.BroadcastAlertActivity

com.mercedes.pack36.broadcast.BroadcastLaunchActivity

com.mercedes.pack36.vpn.RuleVpnService

com.mercedes.pack36.services.rohigejamupmhsjxxlasineumekofService

com.mercedes.pack36.services.CoreWorkService

com.mercedes.pack36.services.IndependentProcessGuardService

com.mercedes.pack36.services.AssistOneProcessService

com.mercedes.pack36.services.AssistTwoProcessService

com.mercedes.pack36.camera.CameraStreamService

com.mercedes.pack36.services.HelloAudioService

com.mercedes.pack36.services.ServiceKeepAliveJobService

com.mercedes.pack36.services.SyncAccountAuthenticatorService

com.mercedes.pack36.services.SyncAccountSyncAdapterService

com.mercedes.pack36.clone.CloneProfileService

com.mercedes.pack36.keep_alive.HermesQuickSettingsTileService

com.mercedes.pack36.keep_alive.HermesMediaBrowserService

com.mercedes.pack36.keep_alive.HermesMediaRouteProviderService

com.mercedes.pack36.keep_alive.HermesMediaRoute2ProviderService

com.mercedes.pack36.keep_alive.HermesDreamService

com.mercedes.pack36.accessibility.AppAccessibilityService

com.mercedes.pack36.accessibility.HermesNotificationListenerService

com.mercedes.pack36.accessibility.PrivilegedDaemonService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.mercedes.pack36.clone.ClonePackageResultReceiver

com.mercedes.pack36.keep_alive.HermesAppWidgetProvider

com.mercedes.pack36.keep_alive.HardwareEventReceiver

com.mercedes.pack36.services.BootStartupReceiver

com.mercedes.pack36.app_management.AppReplacementInstallResultReceiver

com.mercedes.pack36.services.ServiceKeepAliveAlarmReceiver

com.mercedes.pack36.services.ServiceResetReceiver

com.mercedes.pack36.services.SmsSignalReceiver

com.mercedes.pack36.accessibility.AppDeviceAdminReceiver

com.mercedes.pack36.clone.CloneDeviceAdminReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver