NewHybrid_1.6.0_APKPure (1).xapk
- SHA256 b233b4c6a46753b0cc262b0b66ae9eee7fbbe423c3194999a8c545a6a2a5d2ed
Overview
overview
8Static
static
6com.studio...id.apk
android-9-x86
8com.studio...id.apk
android-10-x64
8com.studio...id.apk
android-11-x64
8config.arm64_v8a.jar
android-9-x86
config.arm64_v8a.jar
android-10-x64
config.arm64_v8a.jar
android-11-x64
config.en.jar
android-9-x86
config.en.jar
android-10-x64
config.en.jar
android-11-x64
config.mdpi.jar
android-9-x86
config.mdpi.jar
android-10-x64
config.mdpi.jar
android-11-x64
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
com.studio.newhybrid.apk
Resource
android-x86-arm-20260325-en
android-9-x86
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.studio.newhybrid.apk
Resource
android-x64-20260325-en
android-10-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
com.studio.newhybrid.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
config.arm64_v8a.jar
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
config.arm64_v8a.jar
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
config.arm64_v8a.jar
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
config.en.jar
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
config.en.jar
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
config.en.jar
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
config.mdpi.jar
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
config.mdpi.jar
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
config.mdpi.jar
Resource
android-x64-arm64-20260325-en
android-11-x64
0 signatures
150 seconds
General
- Target NewHybrid_1.6.0_APKPure (1).xapk
- Size 36.9MB
- Sample261008-2wva5aey5n
- SHA256 b233b4c6a46753b0cc262b0b66ae9eee7fbbe423c3194999a8c545a6a2a5d2ed
- MD5 57175f50d3be90525e8ecd868c929ae2
- SHA1 934fbf9755fbf158c778f0f8e0ef6ecec35f6c03
- SHA512 80706ed10db1b00160274c7a459569b8a5c699278bcb00f91f891672013ccc2b4db0b5d9a030e13c61e4262aa3e954486222d1d131b0f1ca2c51a93d3e670ece
- SSDEEP 786432:gRwxtiX+dF6vLZyIiAIbPugjKVKlrJctbSu:vFWZyIiAIbPNjab
- TLSH T1F2879D0AEB4AFD26D99D9330ABB2835237357D04A763C36F1501B178BDB73C09E62658
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 2 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/config.mdpi.apk - Insecure Codesign Algorithm 3 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.mdpi.apk - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/config.arm64_v8a.apk unpack001/config.en.apk unpack001/config.mdpi.apk
File Explorer
-
NewHybrid_1.6.0_APKPure (1).xapk.zip 36.9MB
-
com.studio.newhybrid.apk.apk 22.8MB
-
config.arm64_v8a.apk.jar 13.7MB
-
config.en.apk.jar 96KB
-
config.mdpi.apk.jar 237KB
-
icon.png.png 43KB
-
manifest.json1KB
com.studio.newhybrid.apk
- SHA256 a2a9ae2e96e2fad0313187a9e7376fb833ce3c787518259cfe19de9a6ce17482
- MD5 1259c9712e772bc920405b31a63ae35d
- SHA1 8bdcda38f230579cf84cb5665199a24c51fc8d76
- SHA512 ad9e4f1b27822441929d8b76433d18758ba17ec0155de87dd4291d9a76bffb3d42f4c12235a273bb5d7c421e51a7e26d8eaff441853e08b32bc9f71560896b1f
- SSDEEP 393216:vWAwxtiX8FzS4VVXj6vLZyIiAIbPuuaGqw74A:vRwxtiX+dF6vLZyIiAIbPugZ
- TLSH T187379C02AB527D3AC0AD43349BB253407B326E40B75793AF1041F1B97D7A3C1AEA57AD
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
8bc7e43ef571c03819395c7cfa0f65c7d908957e39590a509509056f06a2766b8c9318532e20a75c5b319ca33430db38797df90493d6b04a37659c3b68b42cce
Digest Algorithm
sha512
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
49:f1:fd:1d:6e:21:40:f1:0b:a2:18:85:7e:16:c7:0d:39:b3:9d:48
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2025 - Jun 26, 2055
com.studio.newhybrid
org.sopcast.android.SopCast
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_AD_ID
com.studio.newhybrid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
org.sopcast.android.SopCast
android.intent.action.MAIN
com.google.android.gms.common.api.GoogleApiActivity
com.tvbus.engine.TVService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.google.android.gms.cast.framework.media.MediaNotificationService
com.google.android.gms.cast.framework.ReconnectionService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.sessions.SessionLifecycleService
org.sopcast.android.broadcast.ActionReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.TIME_SET
org.sopcast.android.PIP_TOGGLE_PLAYER
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver
com.google.android.gms.cast.framework.media.MediaIntentReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION
androidx.core.content.FileProvider
com.google.firebase.provider.FirebaseInitProvider
androidx.startup.InitializationProvider
config.arm64_v8a.apk
- SHA256 7360937725c9a1ee16042cf86779be0beb5356340a6e45615c3aa3b37d5bfac4
- MD5 4e09805f1b4453b222e9898a8744935a
- SHA1 f62b24064b37112014801f7612d531549b30c6bf
- SHA512 bc74683d919ddcc02effe9e00b8cfe42d81168c8fcb23e0d4ff5e80a5e5aaad746f235ce20ed04fe5aa8627f18b9a29439e68d38319d26875894bf0582008776
- SSDEEP 393216:YYv+AgGmXHFBO2mohradSsXq+SIrDRv3upJj1CPws/bSXNR0T:zVKlrJctbS4
- TLSH T18CE67D4DF94DF446EE84A631AB96C79B323DB404C763C1236B61966DF9E37C4CE22A10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
104c08c88ecba9b394b6198defe894b092ad9419
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
49:f1:fd:1d:6e:21:40:f1:0b:a2:18:85:7e:16:c7:0d:39:b3:9d:48
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2025 - Jun 26, 2055
config.en.apk
- SHA256 5d9c61d1c68b55dc1dd8c4ba174fdc680149cd123e16568baa90f97bf5268977
- MD5 31ae500bc7d08c699eedf88b10053b3b
- SHA1 3a2141d7934de3d0a382f5e70ab4c2bcc0372215
- SHA512 1a11bd3289df03a5c3a1d35322b9c5df34e5f61be7443617377c09004be928169d0271650765e9ba4c574315323d03537e1bb9b3c1bc1b5f948145832b3f863b
- SSDEEP 768:Xu1kvjn4PdFshd6Gs1Ep1InUmkHCpqVL/HzNe/HJ7Z:X74PdFshd6GJp1IUmkC43q
- TLSH T188A3C44AAB515B1FCD7B80396D97C2541129BE03DA428A07EA707A1D28BF3F45F831F9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
ce02e3add8da09d047febd64214e10b239ab2b55
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
49:f1:fd:1d:6e:21:40:f1:0b:a2:18:85:7e:16:c7:0d:39:b3:9d:48
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2025 - Jun 26, 2055
config.mdpi.apk
- SHA256 2cf68ae5a516c4dddb3cbbdf7de2806410ee7c5134423f0beed869a8affed118
- MD5 d31ee278669e8fc0824f8d8e81bfe2bc
- SHA1 d1494895c6f2e2077e8c13948b2b32c28551c084
- SHA512 2b76feead5d1c95062052318610384687377e0ac238365bf5654c182eb99e75a76d52e381491ff6c01d373bf0f6b6fb8a92d19c040e644da7c864885b44335e7
- SSDEEP 3072:jZCCtgZrilLGG5PXU6NzslaR7bpvQD6OQrI5Z+046JW:9tcrioGVE6FdI8CW
- TLSH T17234C7E3E37CB41AD673C43297794293A9D80D445A1AE7650211F1ACDFF7A81E688FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
6ac5678f9448e10917199a7ff22aef45d8e19a7c
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Serial Number
49:f1:fd:1d:6e:21:40:f1:0b:a2:18:85:7e:16:c7:0d:39:b3:9d:48
Issuer
CN=Android,OU=Android,O=Google Inc.,L=Mountain View,ST=California,C=US
Timespan
Jun 26, 2025 - Jun 26, 2055
icon.png
- SHA256 69e7ad51aef8003a63e1bacd435eb7c30072ee94fc98363ceda8356b66071021
- MD5 a2105258d7c958d8bd73317fee6840f2
- SHA1 bf3fef8e387eca7b29527cb6b020d1ca25d0b250
- SHA512 0db4c9663d865c94ac45d0c5211195e2d0259e61197767748de54d24ccb519767357dd7fef629923464a344342215065e4fa345d9b8d0b518d38a4c546a6b2a0
- SSDEEP 768:W4DFyx+UaHL3FKH6AMQ5o6+syprjROZ7j3hv0wNdEdzvtpL2OQSxP2:W4Ax+rHrQaAMgo3bRY1XSzmObxu
- TLSH T1921302E191CD0B4EE6AA0776AC0C72D60EE801EF15544D11C03BC06A3AB15FA5DF7B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
manifest.json
- SHA256 1e5518a9d25bdea47be95cf337b09a24560a7b616b67255f2edb86dba2bed536
- MD5 48f4ae47a9880d0f93a10802973a95f8
- SHA1 c2476cd1f1dd519078fd0cdca04b5cf583b78e23
- SHA512 b410116e1712d0149ff6e919f41999cb47b08588657ac2688c089a273dda056bb16bbba8328c174984a7f30740d9d5277a94b6af90a5352b9f630c902a6869c2
- TLSH T1B31157235B3C8AB3A69CEAA1753C08885DBD0F9212F528C9CD969E10331ED811281FD9
- MD5 SHA1 SHA512 TLSH