Noghteha+-+Mesh+Messenger_1[.]0[.]70_APKPure (1)[.]xapk

Resubmissions

13/10/2026, 10:13

261013-l89zcadw6r8

13/10/2026, 09:25

261013-ldsrksds2n6

Sharing

Copy URL Twitter E-mail

General

Target
Noghteha+-+Mesh+Messenger_1.0.70_APKPure (1).xapk
Size 43.4MB
Sample261013-ldsrksds2n
SHA256 103805f1eb6790595d55dc51204c763bbbcf1f52cf75c9d0f7f54e737ac4c6b4
MD5 ebe2586dc50889091ff3bf1efdea5520
SHA1 30c29bac02cb5594a831fd498127150d3b3ced5c
SHA512 2ef7068227633c84477e8b66305e46cf0a3edbd40e9c8a4891c333b39b8de2fb4465117b91cc21ef4ba4c1e8594d07d357db392b99c3bb6adfb05b6c83a5642a
SSDEEP 393216:bSrJUMeeHfDC3S8uFQfm9DMMSUbDKLrXq+sTdoGB+cPsvkZfctq9xwqIt3uFJgmW:mrJUpeHbwm9DNDKLrXqPTlctqM6TkmE
TLSH
T15DA7BF59EA0CA836DACAB87DCC6D0591A3323E842A45C3573814B919FEF37D1C779B90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
unpack001/config.hdpi.apk

Embeds OpenSSL 2 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
sample	embeds_openssl
static1/unpack001/config.arm64_v8a.apk	embeds_openssl

Insecure Codesign Algorithm 2 IoCs

File was codesigned using an insecure algorithm.

resource
unpack001/config.arm64_v8a.apk
unpack001/config.hdpi.apk

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/config.arm64_v8a.apk
unpack001/config.hdpi.apk

File Explorer

Noghteha+-+Mesh+Messenger_1.0.70_APKPure (1).xapk

.zip 43.4MB
com.filtershekanha.noghteha.apk

.apk 10.0MB
config.arm64_v8a.apk

.jar 33.3MB
config.hdpi.apk

.jar 48KB
manifest.json

3KB

Noghteha+-+Mesh+Messenger_1.0.70_APKPure (1).xapk

SHA256 103805f1eb6790595d55dc51204c763bbbcf1f52cf75c9d0f7f54e737ac4c6b4
MD5 ebe2586dc50889091ff3bf1efdea5520
SHA1 30c29bac02cb5594a831fd498127150d3b3ced5c
SHA512 2ef7068227633c84477e8b66305e46cf0a3edbd40e9c8a4891c333b39b8de2fb4465117b91cc21ef4ba4c1e8594d07d357db392b99c3bb6adfb05b6c83a5642a
SSDEEP 393216:bSrJUMeeHfDC3S8uFQfm9DMMSUbDKLrXq+sTdoGB+cPsvkZfctq9xwqIt3uFJgmW:mrJUpeHbwm9DNDKLrXqPTlctqM6TkmE
TLSH
T15DA7BF59EA0CA836DACAB87DCC6D0591A3323E842A45C3573814B919FEF37D1C779B90
MD5 SHA1 SHA512 SSDEEP TLSH

Embeds OpenSSL

Embeds OpenSSL, may be used to circumvent TLS interception.

com.filtershekanha.noghteha.apk

SHA256 783c1fd85500c6d5a6abcbc987f7f054410adbe5bb4a3eb12b1cc582605eb788
MD5 0caa1dd2db651a2698174efec737dfd5
SHA1 78b21458d1d67b8b323790905c371f291a790d47
SHA512 9fa77f71023fa302a8ca8985e75a13378cd428a98fb207c01513553956046225acc77c563400cbea880b947b0039b230151b82ee5b930d48c0276203f94f0478
SSDEEP 98304:qLPqrJhS9XNTRmw9JgbxeWdeIcuvtiuzfbnbb1lrTZ5LbbR2U73k64/:qLSrJUMcnmtcXuf/fZpbbrU
TLSH
T153B6AE46FA855E65D47E3A3244AA63107336AE498F930B8720417EACFF731D05BA9FC1
MD5 SHA1 SHA512 SSDEEP TLSH

android

Embeds OpenSSL

Embeds OpenSSL, may be used to circumvent TLS interception.

File Signature issue

Digest

1289fdc109110b0b3e354cd4d0e7560679512b9694132b5ab01084c2829510f2b9beca1da03a1f2870c070895dc36dd413fdbcf97a667260ef857f216f4ac8b7

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Filtershekanha,OU=App Development,O=Filtershekanha,L=London,C=GB

com.filtershekanha.noghteha

com.filtershekanha.noghteha.mesh.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

config.arm64_v8a.apk

SHA256 ae550c3bd94f099bd5d317d7d617be1b03e722b2d9d3af155f8695f59c0be8e5
MD5 478e437cdf524c31815732f5523b9b6f
SHA1 7e18498bcecec452edb8e79b5e9faeb1d143ff1d
SHA512 544f2da9e8e279cca7c751af0404ac7a80fc5320ab891a9ac99415579add1075a9c5a7a3752ad9a5f0b308c42ac258cb4c3fbf650bb7a10a92006bab45cd2be2
SSDEEP 393216:R3S8uFQfm9DMMSUbDKLrXq+sTdoGB+cPsvkZfctq9xwqIt3uFJgmTBGC0mYqSYgb:vm9DNDKLrXqPTlctqM6Tkmw
TLSH
T17377AE29E60CA42BDFC6F87DDC5D04A5A73232942A44C36738249919FEC3BD2C779B94
MD5 SHA1 SHA512 SSDEEP TLSH

Embeds OpenSSL

Embeds OpenSSL, may be used to circumvent TLS interception.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d01d9a7b761510471e0e7c6677cf4061141f7624

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Filtershekanha,OU=App Development,O=Filtershekanha,L=London,C=GB

Chains

Jan 1, 0001

config.hdpi.apk

SHA256 1f2fb232456c77319a393492c869af0e5a0d73eccf994322a54559fe3d2c4d89
MD5 82231cb046099827d3f851406249e044
SHA1 012923554e8c988d424dde3e3148c23e225d61a6
SHA512 bc3027ea8fe8a481bbf512c3a44464f5b2c05b9b8e31952889b89740722a19549e5a1b546ef602e5913953bc9babd4567dd5c66d2a1ab6396a3311b0b123e845
SSDEEP 768:w2vGDMVGh7YUulsOuNrqo4reA/dGNVO+71p2W:BVG7HulzYmowR/dCH7zL
TLSH
T18A236D63E365A437E863C13F42F85E9E88650D94D559EB250639F10DAEFFF898580BC0
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.
Embeds OpenSSL

Embeds OpenSSL, may be used to circumvent TLS interception.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b1914210f55cd185d3d3e808e29a0bdc9e248620

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Filtershekanha,OU=App Development,O=Filtershekanha,L=London,C=GB

Chains

Jan 1, 0001

Noghteha+-+Mesh+Messenger_1.0.70_APKPure (1).xapk

com.filtershekanha.noghteha.apk

File Signature issue

com.filtershekanha.noghteha.ui.GeohashPickerActivity

com.filtershekanha.noghteha.MainActivity

com.pairip.licensecheck.LicenseActivity

com.filtershekanha.noghteha.mesh.BluetoothMeshForegroundService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.filtershekanha.noghteha.mesh.BootCompletedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

config.arm64_v8a.apk

File Signature issue

config.hdpi.apk

File Signature issue

manifest.json