hargatoto[.]apk | Triage™

General

Target
hargatoto.apk
Size 6.6MB
Sample261009-plsckaev5p
SHA256 c4be88696bed94746d3d8c0ba1984813c76cb0109c36a34670f8071c0f99b0d8
MD5 7ae7f59dd3d1bf21a24b2e4c868b75f4
SHA1 56fe3a682b78c824fe29b244950742f97a38c50b
SHA512 9d3b460dee732d03c09c42c7470c5fb95d22d975316b2e66e320be1a6b9e21dbdc238f173b99edc51025ef3f46650875780e895b4fc4331d765ba78de676af9d
SSDEEP 196608:Sw2CGxArbcpl4dtibH+T74RhqrSn7zY5W1E:Sw2CiIbc/4TgCVS7zY5h
TLSH
T1956601D6F7E49D2FC8774032C9AA52F1625B4D128A839F476908371C787B6E80F49BC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
hargatoto.apk

File Explorer

hargatoto.apk

.apk 6.6MB

hargatoto.apk

SHA256 c4be88696bed94746d3d8c0ba1984813c76cb0109c36a34670f8071c0f99b0d8
MD5 7ae7f59dd3d1bf21a24b2e4c868b75f4
SHA1 56fe3a682b78c824fe29b244950742f97a38c50b
SHA512 9d3b460dee732d03c09c42c7470c5fb95d22d975316b2e66e320be1a6b9e21dbdc238f173b99edc51025ef3f46650875780e895b4fc4331d765ba78de676af9d
SSDEEP 196608:Sw2CGxArbcpl4dtibH+T74RhqrSn7zY5W1E:Sw2CiIbc/4TgCVS7zY5h
TLSH
T1956601D6F7E49D2FC8774032C9AA52F1625B4D128A839F476908371C787B6E80F49BC9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

048b883ef032c894055a9890462af05ff8636d7e5adf2ebc356be18656496a36

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

C=SG

xyz.hermez.harga

Android Permissions

hargatoto.apk

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

xyz.hermez.harga.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

hargatoto.apk

File Signature issue

xyz.hermez.ResultActivity

xyz.hermez.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

xyz.hermez.MyFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

hargatoto.apk

File Signature issue

xyz.hermez.ResultActivity

xyz.hermez.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

xyz.hermez.MyFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

hargatoto.apk