LabhGamz[.]apk | Triage™

General

Target
LabhGamz.apk
Size 6.9MB
Sample261013-ppmw9abg39
SHA256 d3daea960b6f0ea05a38984d84e525490e269fed1cb734b6ae0836409d5eb9f1
MD5 61080be1d7fd577289006508ad86dc1e
SHA1 b2ffdad1565e467372d6c168a5a4718f43c70acf
SHA512 d416a16d886a90eda11f2122a7ca798dc2b6592fe667c725e42017061c4d40facfa01328956155b7ece707ee953a46690bbc273a66cda283cab0096237ac8c33
SSDEEP 196608:3whFENdJWjpcG/6OlanIh+ECTAV8Ik8/lCfRamzpx:ghAeJ6OliMnCTs+Lv
TLSH
T1C1762242F7E46E2FCC7381365B8B133126628E52CA92D707A908772C7C776D84E99BC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
LabhGamz.apk

File Explorer

LabhGamz.apk

.apk 6.9MB

LabhGamz.apk

SHA256 d3daea960b6f0ea05a38984d84e525490e269fed1cb734b6ae0836409d5eb9f1
MD5 61080be1d7fd577289006508ad86dc1e
SHA1 b2ffdad1565e467372d6c168a5a4718f43c70acf
SHA512 d416a16d886a90eda11f2122a7ca798dc2b6592fe667c725e42017061c4d40facfa01328956155b7ece707ee953a46690bbc273a66cda283cab0096237ac8c33
SSDEEP 196608:3whFENdJWjpcG/6OlanIh+ECTAV8Ik8/lCfRamzpx:ghAeJ6OliMnCTs+Lv
TLSH
T1C1762242F7E46E2FCC7381365B8B133126628E52CA92D707A908772C7C776D84E99BC5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

10e1420ccc4199fbd8666cac878a911fc2e097ad5ac0e333037f70fd852f68c3

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=LabhGamz,OU=App,O=LabhGamz,L=Mumbai,ST=MH,C=IN

app.labhgamz

Android Permissions

LabhGamz.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

app.labhgamz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

LabhGamz.apk

File Signature issue

app.labhgamz.MainActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.capacitorjs.plugins.pushnotifications.MessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

LabhGamz.apk

File Signature issue

app.labhgamz.MainActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.capacitorjs.plugins.pushnotifications.MessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

LabhGamz.apk