ocean[.]yachting[.]crystal[.]apk

General

Target
ocean.yachting.crystal.apk
Size 4.3MB
Sample261012-scelwsfy7k
SHA256 156b2fa269cb86c7ea36e7cf1af5b57823641c029e3547fcba95f406fee6a6a8
MD5 fa20025197d1853fd153559114c14640
SHA1 1b69c6a45bcd90698864aa1c10a81f092b21a5d7
SHA512 31bca9429b0ec81711ce691f3162243bbae964b03e3c4b1181c5e7d0654b7d4b9eca504b03d1a45a211a5341ef587045c4939e268bd95ee0b8cddb0f707c50bc
SSDEEP 98304:mLESDhImrxvn7/dKw2sxSrYx4Oo/Krr+LQCb6Y/O:2n9rKPsgS4VQ2fm
TLSH
T12E26DF8BFB48A86BC4F753B2553A532211474C268B43D7C79958323C29B76D07F8ABD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ocean.yachting.crystal.apk

File Explorer

ocean.yachting.crystal.apk

.apk 4.3MB

ocean.yachting.crystal.apk

SHA256 156b2fa269cb86c7ea36e7cf1af5b57823641c029e3547fcba95f406fee6a6a8
MD5 fa20025197d1853fd153559114c14640
SHA1 1b69c6a45bcd90698864aa1c10a81f092b21a5d7
SHA512 31bca9429b0ec81711ce691f3162243bbae964b03e3c4b1181c5e7d0654b7d4b9eca504b03d1a45a211a5341ef587045c4939e268bd95ee0b8cddb0f707c50bc
SSDEEP 98304:mLESDhImrxvn7/dKw2sxSrYx4Oo/Krr+LQCb6Y/O:2n9rKPsgS4VQ2fm
TLSH
T12E26DF8BFB48A86BC4F753B2553A532211474C268B43D7C79958323C29B76D07F8ABD8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6154d18560aa162f36c99c6dc4db3f2d2ac300be594fec6676b464783e4cb392

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MrTusarRX

ocean.yachting.crystal

ocean.yachting.crystal.Splasher

ocean.yachting.crystal.HomeSIM

android.intent.action.MAIN

ocean.yachting.crystal.HomeWallp

android.intent.action.MAIN

ocean.yachting.crystal.HomeSmsung

android.intent.action.MAIN

ocean.yachting.crystal.PlayS

android.intent.action.MAIN

ocean.yachting.crystal.labyrinthinexznloqaleac

ocean.yachting.crystal.groveeldpqbjwi

ocean.yachting.crystal.echownirdpzzxpty

ocean.yachting.crystal.equinoxpbeujcpnfgg

ocean.yachting.crystal.aquaticcgexdpdbgaz

ocean.yachting.crystal.rhapsodyvbkddqdjyc

ocean.yachting.crystal.zipperidyvfucsehcv

ocean.yachting.crystal.speakit

ocean.yachting.crystal.yogurtroizixtsdc

ocean.yachting.crystal.elephantlptaetpezakz

ocean.yachting.crystal.crescentpvronwqdvq

ocean.yachting.crystal.Toastit

ocean.yachting.crystal.basketugipjxj

ocean.yachting.crystal.valleycdhjmppcjwjwv

ocean.yachting.crystal.Inputlegendrleratbvuob

ocean.yachting.crystal.yawningttacdnpmr

ocean.yachting.crystal.gondolaopqaivi

ocean.yachting.crystal.networkxdehswsvf

ocean.yachting.crystal.weatherspmfeclmwp

ocean.yachting.crystal.avalanchextnxtfkozr

ocean.yachting.crystal.legendrleratbvuob

ocean.yachting.crystal.bananaydbwftt

ocean.yachting.crystal.galaxybsvgptwfraycq

ocean.yachting.crystal.gatewayvgwjmjsejeq

ocean.yachting.crystal.cobaltyfnyvhvhf

ocean.yachting.crystal.CallBacker

ocean.yachting.crystal.fireworkrrmqnnocnwc

ocean.yachting.crystal.alarme

AppAlarm

ocean.yachting.crystal.kingdomadowqdtrggi

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

ocean.yachting.crystal.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

.glimmeruwnoogmszcipv

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.DEVICE_ADMIN_DISABLED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

ocean.yachting.crystal.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

ocean.yachting.crystal.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

ocean.yachting.crystal.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

ocean.yachting.crystal.apk

File Signature issue

ocean.yachting.crystal.Splasher

ocean.yachting.crystal.HomeSIM

ocean.yachting.crystal.HomeWallp

ocean.yachting.crystal.HomeSmsung

ocean.yachting.crystal.PlayS

ocean.yachting.crystal.labyrinthinexznloqaleac

ocean.yachting.crystal.groveeldpqbjwi

ocean.yachting.crystal.echownirdpzzxpty

ocean.yachting.crystal.equinoxpbeujcpnfgg

ocean.yachting.crystal.aquaticcgexdpdbgaz

ocean.yachting.crystal.rhapsodyvbkddqdjyc

ocean.yachting.crystal.zipperidyvfucsehcv

ocean.yachting.crystal.speakit

ocean.yachting.crystal.yogurtroizixtsdc

ocean.yachting.crystal.elephantlptaetpezakz

ocean.yachting.crystal.crescentpvronwqdvq

ocean.yachting.crystal.Toastit

ocean.yachting.crystal.basketugipjxj

ocean.yachting.crystal.valleycdhjmppcjwjwv

ocean.yachting.crystal.Inputlegendrleratbvuob

ocean.yachting.crystal.yawningttacdnpmr

ocean.yachting.crystal.gondolaopqaivi

ocean.yachting.crystal.networkxdehswsvf

ocean.yachting.crystal.weatherspmfeclmwp

ocean.yachting.crystal.avalanchextnxtfkozr

ocean.yachting.crystal.legendrleratbvuob

ocean.yachting.crystal.bananaydbwftt

ocean.yachting.crystal.galaxybsvgptwfraycq

ocean.yachting.crystal.gatewayvgwjmjsejeq

ocean.yachting.crystal.cobaltyfnyvhvhf

ocean.yachting.crystal.CallBacker

ocean.yachting.crystal.fireworkrrmqnnocnwc

ocean.yachting.crystal.dandeliondzjvcuotnicp

ocean.yachting.crystal.warriorzpdzruoku

ocean.yachting.crystal.seafloorrwkljqeyfet

ocean.yachting.crystal.xenonwfqzrzamqyus

ocean.yachting.crystal.futurecvrcacmn

ocean.yachting.crystal.notebookovznhntj

ocean.yachting.crystal.emberlysgistwtv

ocean.yachting.crystal.carbonwiggflpbjdr

ocean.yachting.crystal.fighterivppdce

ocean.yachting.crystal.minserv

ocean.yachting.crystal.objectltdqxnasmzea

ocean.yachting.crystal.blizzardtmfhedkfy

ocean.yachting.crystal.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

ocean.yachting.crystal.alarme

ocean.yachting.crystal.kingdomadowqdtrggi

ocean.yachting.crystal.ResetServices

.glimmeruwnoogmszcipv

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

ocean.yachting.crystal.apk