458d28eb6e472d810f30d6fb7b2484c489d9b7c9c8dda69f3c15d8ecc7165df0
- SHA256 458d28eb6e472d810f30d6fb7b2484c489d9b7c9c8dda69f3c15d8ecc7165df0
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀��.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀��.apk
Resource
android-x64-20260325-en
android-10-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀��.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
7 signatures
150 seconds
General
- Target 458d28eb6e472d810f30d6fb7b2484c489d9b7c9c8dda69f3c15d8ecc7165df0
- Size 655KB
- Sample261009-k4bejssxes
- SHA256 458d28eb6e472d810f30d6fb7b2484c489d9b7c9c8dda69f3c15d8ecc7165df0
- MD5 15fec0f72e242f3537c7b59d0273d5e6
- SHA1 2ac6cd51b95c84064eb895536988881dd55dc60e
- SHA512 b073f67d8b650a2a65586b3edca18f5ad1a607304bb8433cef046ad0f973768fa4fc3ba6f0439a96605f290d9b7950f153a2e652df09b10d6be247ca98d02e30
- SSDEEP 12288:z2u2gvunpDJNi70kijf7jCfAjHBsk+SHPyTVPj113T0U3AD39dJ7PjtDVH:CGupDni7GffCcsFSvyJfI2Q/J7ZN
- TLSH T178E423F035B0FBC6EC22BE29B564E49E2DE91E4BD3207319216788CF419E0E579917D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 1 IoCs
description ioc Required by VPN services to bind with the system. Allows apps to provision VPN services. android.permission.BIND_VPN_SERVICE - Requests dangerous framework permissions 2 IoCs
description ioc Allows applications to use exact alarm APIs. android.permission.SCHEDULE_EXACT_ALARM Allows an app to post notifications. android.permission.POST_NOTIFICATIONS - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀.apk
File Explorer
-
458d28eb6e472d810f30d6fb7b2484c489d9b7c9c8dda69f3c15d8ecc7165df0.zip 655KB
-
Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀.apk.apk 683KB
Даъватномаи_туй⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀.apk
- SHA256 dbe6870dcd869615c82e788e30e197d674274bcf7cad0e2cd79f7c5b83a3fe0c
- MD5 eb1cd0cf027322e04a7dadc405dfdd60
- SHA1 beee54083549358832596673a6c507f9923696a5
- SHA512 30679890ea1968fe38ddb30bcf24ea11dfc5d9fcc7f26f5f136dc91f154447d7e8f93e025dd69d4eeab9221055b88c87d2c4fe42b5d54f125c8d2e0c83615e9b
- SSDEEP 12288:m9KNzKM7KdeU7oi0j57jUfAXHrqBSH96OPjlD3TSUV83TSUtt6tPjl7hAh:mauM7Kf7A5fUkqBSd6Oh+O8+Mt6ttOh
- TLSH T167E423A2B768C33BE93369365C60D599641E2C46C511B70E2682BB0E547B2FD7F1E3C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
406e70418a4dadea0f6735d3c9249510816edb6227ac9528399ced0973bc9ffc
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
b3:99:80:86:d0:56:cf:fa
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Apr 15, 2008 - Sep 1, 2035
com.toeljzhxv.umwptdn
emmagogfdaq.hgpdx.com.setup.SetupActivity
android.permission.ACCESS_NETWORK_STATE
android.permission.USE_FULL_SCREEN_INTENT
android.permission.FOREGROUND_SERVICE
emmagogfdaq.hgpdx.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.INTERNET
android.permission.WRITE_SYNC_SETTINGS
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.CHANGE_NETWORK_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_SYNC_SETTINGS
android.permission.VIBRATE
android.permission.SCHEDULE_EXACT_ALARM
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
android.permission.WAKE_LOCK
android.permission.POST_NOTIFICATIONS
emmagogfdaq.hgpdx.com.setup.SetupActivity
android.intent.action.MAIN
emmagogfdaq.hgpdx.com.setup.VpnConsentActivity
emmagogfdaq.hgpdx.com.system.KeepAliveActivity
emmagogfdaq.hgpdx.com.system.RecentsTrampolineActivity
emmagogfdaq.hgpdx.com.system.RestartActivity
emmagogfdaq.hgpdx.com.ACTION_RESTART
emmagogfdaq.hgpdx.com.STARTER
emmagogfdaq.hgpdx.com.runtime.CreditAlertActivity
emmagogfdaq.hgpdx.com.runtime.CoreService
emmagogfdaq.hgpdx.com.runtime.EngineService
emmagogfdaq.hgpdx.com.vpn.VpnRelayService
android.net.VpnService
emmagogfdaq.hgpdx.com.runtime.OneShotWatchdogService
emmagogfdaq.hgpdx.com.system.AuthenticatorService
android.accounts.AccountAuthenticator
emmagogfdaq.hgpdx.com.system.SyncAdapterService
android.content.SyncAdapter
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
emmagogfdaq.hgpdx.com.runtime.receivers.VpnRetryReceiver
emmagogfdaq.hgpdx.com.runtime.receivers.BootReceiver
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.TIME_CHANGED
android.intent.action.QUICKBOOT_POWERON
emmagogfdaq.hgpdx.com.runtime.receivers.WatchdogAlarmReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
android.net.conn.CONNECTIVITY_CHANGE
androidx.work.impl.background.systemalarm.RescheduleReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.background.systemalarm.UpdateProxies
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.work.diagnostics.REQUEST_DIAGNOSTICS
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION