app-release[.]apk | Triage™

Resubmissions

06/10/2026, 07:09

261006-hywgesvsds7

06/10/2026, 07:04

261006-hv8ycasgnf7

Sharing

Copy URL Twitter E-mail

General

Target
app-release.apk
Size 8.5MB
Sample261006-hywgesvsds
SHA256 9e9ff8b81efb54af0c069fc38f778223ccf5c192c7a1cdf1bf4a9e83464c6e91
MD5 bba13ae6d8892ae8d3d9be350b3bd90a
SHA1 bb8adeb0631a950dccc35b4f8eaaf6774a5b9550
SHA512 eee5055343bdc0875d78c7b50101ecf87b88134f8c0f9a4c86fa39d3492e2eb0807c5c25678fdf53f75f4872b31577fed652d96416cf82bf7cffb59f0551c596
SSDEEP 196608:MZ4Ng5S2U+C6szG2mAun5qNh5NVpVfYU4AwDvHZ8xQdayf:M9S/+C6szG2AshPVpR6b5C1yf
TLSH
T19296334FDE025498ED31787E93AE2F364022200CD3D6D16B8DD4568A753BBD8EB60EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
app-release.apk

File Explorer

app-release.apk

.apk 8.5MB

app-release.apk

SHA256 9e9ff8b81efb54af0c069fc38f778223ccf5c192c7a1cdf1bf4a9e83464c6e91
MD5 bba13ae6d8892ae8d3d9be350b3bd90a
SHA1 bb8adeb0631a950dccc35b4f8eaaf6774a5b9550
SHA512 eee5055343bdc0875d78c7b50101ecf87b88134f8c0f9a4c86fa39d3492e2eb0807c5c25678fdf53f75f4872b31577fed652d96416cf82bf7cffb59f0551c596
SSDEEP 196608:MZ4Ng5S2U+C6szG2mAun5qNh5NVpVfYU4AwDvHZ8xQdayf:M9S/+C6szG2AshPVpR6b5C1yf
TLSH
T19296334FDE025498ED31787E93AE2F364022200CD3D6D16B8DD4568A753BBD8EB60EB5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e10faf5c503e667cc22a2088a5f68f188b7133197a8aadc6a0709c68189ea413

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.peaksoft.manager

com.template.shellapp.MainActivity

android.intent.action.MAIN

com.template.shellapp.SettingsActivity

com.template.shellapp.AboutActivity

x.mf.KF6emH82EUhY3r

x.mf.YyEueVRFq6qcc

com.peaksoft.manager.mf.action.o9urw71r7g9hjbl0eivn2ria com.peaksoft.manager.mf.action.z9g9cp8u9lthndknqf18xeju

x.mf.KUGmUhmaWR

com.peaksoft.manager.mf.action.9bl9nb3oke4uqndqf82azohm

x.mf.Mk9RfPQH4VpAfPGX

x.mf.FdouTJ4g89

x.mf.LFxGseHwOZ

x.mf.Dh3zvoONUARJ

com.peaksoft.manager.mf.action.c38c5c90az3nybf74hh70mwb

x.mf.QeMbi9VhAHx

x.mf.MgxtIKRpAB

x.mf.RyVRt0RS36jc

x.mf.BfnorgvSEfOMvP

com.peaksoft.manager.mf.action.tknv4ux4tkvu0cdxpq6wkgkg com.peaksoft.manager.mf.action.5ucwwg3v7gvj7px2az3nm0lx

x.mf.Nk6aUyE3vh

x.mf.Q52VznkpNuAXC0

x.mf.Km1KvJ6AVsokZa

x.z2n1.b3lzn.fh

x.oib

x.mf.Avcbrlj9RHIZQW

x.mf.ZWgbsA80B3sO

x.mf.G0ZKPeYrpNn

x.ywh.c57.xk

x.mf.As6kkJUmuJG0ui

x.mf.Tbg8M7aD6zI

x.mf.K29DwgnhsxhU

x.ogp.mvuq.ug

com.peaksoft.manager.mf.action.n2xjarf4e1vaxyx76howa3al com.peaksoft.manager.mf.action.q5lss5s6c7dbre5hpuwa5s2d

x.rhu3.vpf5y.xgu

x.mf.H6vZ8020Ubc

x.mf.XWcmL1MoEiwfao

x.mf.IqNGLgInCDU3CAVl

x.mf.OMfmKiUrCVUzXtqZ

x.wy3fy

x.mf.KzCYSO4EjSD

x.mf.DVgg1IvhxuDDlb6h

x.mf.NbmHY7Ar5Cnsm

x.m9wnu

com.peaksoft.manager.mf.action.gmo08uv0aul5a06o3nbgnsvs

x.mf.VfQnavTTRVGgcm

x.mf.MwX7lDn0pbQ

x.mf.Db9Sx49JnZRYD

com.peaksoft.manager.mf.action.ddnl2b3q29ptwtf2besh8fxo com.peaksoft.manager.mf.action.w0fk0jj85z2qsq99satdxzyw

x.mf.N4XoXasZ1tdL

x.ueb.jw6y.b6m

x.mf.EclsiwoUtNTmwh

x.mf.VsMGyqZgfd

x.dadzw.jouxm.yn

com.peaksoft.manager.mf.action.ta0wer1cqscx2k86wycmu9tt com.peaksoft.manager.mf.action.bdhr77szzf9hsmgqgt3ycfl3

x.s99.gun.p9

x.mf.DFUIWgXjJj7rpPj

x.mf.VPHumcelL8XqJxc

com.peaksoft.manager.mf.action.t15el3q2elpcyjlbhuy8jjv8

x.mf.WNkrh2Oorl4eTc

x.mf.SLFv7ohm8j5kA

x.tgg3f.d9pl.p25

com.peaksoft.manager.mf.action.z23kj0n067u664e448sfudjb

x.pqs2r.yjo.pta

x.mf.VGR0Z4oooiIct

x.mf.ZpNPcurmoDlTgYD

x.mf.DbrazXe0y6m

x.mf.OV0p3oniq4

x.mf.FBSjUisH3aXzQ

x.mf.R2BiIKrEd2

x.mf.ZqdvqC9fE2PH

x.sb23n.m4b05.rpl

x.mf.LFZbetRyhA

x.mf.Ubm80ANRatryp

x.y93z

x.mf.FxSylWHT9C

x.pne

x.mf.WOkaU05a7hLoT5

x.mf.HPyaZ4nNsniA

x.bc5y

x.mf.D0bqvWZy06cl

x.mf.BigdF1odwSLFkg

x.f1zo

x.mf.SfzQuzmgxbO

x.mf.TjKI5csbPE

com.peaksoft.manager.mf.action.k5yug94lvnm3sb8ikkufvidq com.peaksoft.manager.mf.action.42pl1kdvf74hqodr0hs8363d

x.founp.ewu9.d7h

x.mf.Ubw5tHmvSN

x.hl0

x.mf.Qba1Xq7QItQMm

com.peaksoft.manager.mf.action.g9q0f85tw1hxa9q3f7gmdys4 com.peaksoft.manager.mf.action.kbvqh92oc49uhiuwu2ln9nvl

x.mf.JVRKnAZ9Y2Ik

x.mf.IOonzA8OHPaSxm7

x.mf.ULX6ij2hczq

com.peaksoft.manager.mf.action.gp747tcq726miyajcee3akjx com.peaksoft.manager.mf.action.mjgo25r6fdom8sm4ug8j6imn

x.mf.L9zfcNGRwRBLz3PN

x.cny.jj2.uu

x.mf.H97UdUOvF5bNYY

com.peaksoft.manager.mf.action.y2gb1m3ot0orx6rknhbt7dnu com.peaksoft.manager.mf.action.owliwk1543vmik2jlt3rd2uk

x.mf.WzQUTARosRaLhqM

com.peaksoft.manager.mf.action.9mzj8lf21m98h1p6jpsxx4j8

x.mf.GrJ5uYUZJYr

x.mf.XwlxmuJojT

com.peaksoft.manager.mf.action.sm79hvuhj6yw70gzk3oyjs2z

x.fyv.eyt.a9

x.wbwg.syz.zy

com.template.shellapp.services.SyncService

com.template.shellapp.services.BlockVpnService

android.net.VpnService

x.mf.MTiRJDNJRmw3

x.mf.LxGF0HfXBBl18dL

x.b2y.rdfg.is

x.dint

x.mf.VFCvkGMULMWJd

x.mf.CcdtDQp13HvC

x.yni

x.h1s40.kea.v4

x.xdh6

x.mf.ZmDU9sNFjOx

com.peaksoft.manager.mf.service.action.frfjvw6s7h6vg1z7fsk2

x.mf.D1lyOqHGlVu

x.mf.GiEHYSBX8tC4wy9

x.adg.yuk9t.qh

com.peaksoft.manager.mf.service.action.dj8vqzuchyh0woy1ypdn

x.mf.QVecGCRNvGWIq

com.peaksoft.manager.mf.service.action.caof03fntnllesu9y21j

x.mf.JYbpFfcThcpnmxN

x.hdb.q6h.mw

x.ccqb.ptalw.c3t

x.eq0x.eamtv.w0

x.nl7y.mdd7.iq

x.eov

x.mf.YVlUGAGXjH0x2S4v

x.mf.PNrUkpKs7nxs

com.peaksoft.manager.mf.service.action.nfmfvp6gctqd56fuu6lv

x.is5

x.sdp.a4c27.to

x.mf.Bf4BkBmr3DDw2eSv

x.mf.C0i5jpscQGJ

x.mf.N2BUf760hKsBJ8PF

x.dlzq.ww4.ik

com.peaksoft.manager.mf.service.action.bfp1i67liu0rgiq7q1ga

x.mf.O039f4MDhdRCn4GR

x.mf.GD6sgFGA7gH2l

com.peaksoft.manager.mf.service.action.4byp18mn90we2emp5kwc

x.znlc.o5o.d7

x.mf.Pwzemp9olmitW8zb

x.mf.XeaVzYdIkCf

x.mf.E6sKA0A3uNJmT4

x.mf.NgqWAGPu8tP

x.mf.Tm9hdnR8zxJOD6V

x.mf.Tfw6psMKn8YT1l

x.mf.LaM1rgz6zeNlC9

x.mf.BavHqpXekJ

x.mf.Cs8nvdNBkGxW6aZq

com.peaksoft.manager.mf.service.action.ahwa0yotvrlb3byev0hd

x.mf.SZWWV3uItYfAl4Dr

x.mf.HxHPdLfq8dJLIn

x.zmm.qpwp.fcj

x.mf.PQSLZLWT0hs7a35b

x.mf.YhaLWRR7DjX

com.template.shellapp.CB

com.template.shellapp.receivers.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

x.mf.XHaqC7MlB3

x.mf.LxppPnY6dDq61X

com.peaksoft.manager.mf.receiver.action.q1h8vrbcmzz4k51pjavv

x.mf.JdUKJhJ9zj

x.mf.JXbhxBH4RXXZY

x.mf.Ghj54l711p3

com.peaksoft.manager.mf.receiver.action.sy1fku4f72707rrywvp1

x.mf.JZd4EA3vVK

com.peaksoft.manager.mf.receiver.action.9myq4z4d920bzwvdkpn6

x.bis

x.xn61i

x.mf.SxFiyxqSzTybZ

com.peaksoft.manager.mf.receiver.action.w15aj97rlydwq9pnnub1

x.q1k

com.peaksoft.manager.mf.receiver.action.00x5yd3be3d6siiysu8d

x.mf.Tt6McER4nLYkhK

android.intent.action.LOCALE_CHANGED

x.mf.POTRDoixKJwJ

x.mf.Sr0SUk2DnlwvHeFW

x.o9n.to6.n3

x.mf.P1Rn6wTUbzmuy

com.peaksoft.manager.mf.receiver.action.yq6ug2p205cbwn1a2lqg

x.mf.J3df3Go1TYDDi9k

x.mf.QxHZ9VwqTX2ih

x.gw7.jqbg.pgn

com.peaksoft.manager.mf.receiver.action.ci66wb186wu0g0y4za3v

x.cdp.jcfv.jo

com.peaksoft.manager.mf.receiver.action.aelvab7chpyesq53as9c

x.mf.N9QCu4LqAmhx8C

x.mf.Wo0y649mAIZx

x.mf.ER3nZwyxi2dtX

android.intent.action.USER_PRESENT

x.mf.Tlq05u32maOE

x.gdie.cdvqe.y56

x.pktg.ux0.qx2

x.mf.O4x6amFUoSo

x.mf.W5ZHbkteSzgQSxuT

x.mf.RnbYmqaJcwUQQ

x.mf.MJ6GkRIG3MHZm

x.mf.Z20QfRMQUx84U

Android Permissions

app-release.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.peaksoft.manager.permission.MF_HY48MG28I0U1QNMTW3NJHKN4

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

com.peaksoft.manager.permission.MF_4UEN4EEIRWX3JSDZ9ONJXAQE