Straznik[.]apk | Triage™

General

Target
Straznik.apk
Size 16.5MB
Sample261013-t25eaaf191
SHA256 2b7756214596f24b23b3e30e62210315192b24204e511d04081d72f5286c0325
MD5 04711a2d485567c1a2ab7f91509cf778
SHA1 a850c024466d7500108112d557fb800c1a358e9a
SHA512 a0a63da1df786967bf2e5ddfa753b44e14720ba03cd53d2d1d2faaacc982ec592f06a9dec729a46021da9287a17dc65f8906a2659c8e792b51745117829c6422
SSDEEP 393216:qUj9qMnz5nWQEokc+nNRl4cOjGKJhr+ynk3Z1hPUjtZP95nZWx:1j9qEEokhacsWSk3Cjtz5nAx
TLSH
T1B8072352FBE85D1FCC3B94390BC60232D6526E268242EB4B756C3BAD6B736C84E547D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to turn on the screen on, e.g. with PowerManager.ACQUIRE_CAUSES_WAKEUP.	android.permission.TURN_SCREEN_ON
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Straznik.apk

File Explorer

Straznik.apk

.apk 16.5MB

Straznik.apk

SHA256 2b7756214596f24b23b3e30e62210315192b24204e511d04081d72f5286c0325
MD5 04711a2d485567c1a2ab7f91509cf778
SHA1 a850c024466d7500108112d557fb800c1a358e9a
SHA512 a0a63da1df786967bf2e5ddfa753b44e14720ba03cd53d2d1d2faaacc982ec592f06a9dec729a46021da9287a17dc65f8906a2659c8e792b51745117829c6422
SSDEEP 393216:qUj9qMnz5nWQEokc+nNRl4cOjGKJhr+ynk3Z1hPUjtZP95nZWx:1j9qEEokhacsWSk3Cjtz5nAx
TLSH
T1B8072352FBE85D1FCC3B94390BC60232D6526E268242EB4B756C3BAD6B736C84E547D0
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

46b7a8990cbb2a67b003cc98d87421d1d12d483ff9226f715b2255e8943a6100c04473cf119277f78b783358461a59ee8dd816f5130e42c25f08532c85c2c18c

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=cukierrro,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=PL

pl.straznik.app

Android Permissions

Straznik.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.POST_NOTIFICATIONS

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.TURN_SCREEN_ON

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.c2dm.permission.RECEIVE

pl.straznik.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Straznik.apk

File Signature issue

pl.straznik.app.MainActivity

pl.straznik.app.AlarmActivity

com.google.android.gms.common.api.GoogleApiActivity

pl.straznik.app.StraznikFcmService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

pl.straznik.app.AlarmActionReceiver

com.capacitorjs.plugins.localnotifications.TimedNotificationPublisher

com.capacitorjs.plugins.localnotifications.NotificationDismissReceiver

com.capacitorjs.plugins.localnotifications.LocalNotificationRestoreReceiver

com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Straznik.apk

File Signature issue

pl.straznik.app.MainActivity

pl.straznik.app.AlarmActivity

com.google.android.gms.common.api.GoogleApiActivity

pl.straznik.app.StraznikFcmService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

pl.straznik.app.AlarmActionReceiver

com.capacitorjs.plugins.localnotifications.TimedNotificationPublisher

com.capacitorjs.plugins.localnotifications.NotificationDismissReceiver

com.capacitorjs.plugins.localnotifications.LocalNotificationRestoreReceiver

com.google.firebase.messaging.directboot.FirebaseMessagingDirectBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

Straznik.apk