good[.]apk | Triage™

General

Target
good.apk
Size 6.6MB
Sample261015-2eppbady7w
SHA256 a4114b414088b3fd0fe40cd7064beefd51994bc76f71870291d8038610b85344
MD5 2c91ce3bff575bb128f47158fa42f2e4
SHA1 e5dc3d94d9e0f9dcf0beb3726f1c5b3e70c8b458
SHA512 2a254451a910e68c9a1f0c1dfddb75de30ad297fd33c575ddc645652949a401f4f6755713b444d379f8c6554cb1cbca7e014027e45baf520dfa7c8172a4ec693
SSDEEP 98304:/4QEzqtVksYNMP4Yvq3OY68vZwEj4YLvceT6hB9psor+3y7i0ydKu/JIHj8W6xRT:/4LMCEP3yeY6aGLH+3ye04L/JIqxRIp2
TLSH
T1FA66337AD50EE417D237EA39D23D5AEB440402A46105FF5B3636E05C8FEB9C8E34AB16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
good.apk

File Explorer

good.apk

.apk 6.6MB

good.apk

SHA256 a4114b414088b3fd0fe40cd7064beefd51994bc76f71870291d8038610b85344
MD5 2c91ce3bff575bb128f47158fa42f2e4
SHA1 e5dc3d94d9e0f9dcf0beb3726f1c5b3e70c8b458
SHA512 2a254451a910e68c9a1f0c1dfddb75de30ad297fd33c575ddc645652949a401f4f6755713b444d379f8c6554cb1cbca7e014027e45baf520dfa7c8172a4ec693
SSDEEP 98304:/4QEzqtVksYNMP4Yvq3OY68vZwEj4YLvceT6hB9psor+3y7i0ydKu/JIHj8W6xRT:/4LMCEP3yeY6aGLH+3ye04L/JIqxRIp2
TLSH
T1FA66337AD50EE417D237EA39D23D5AEB440402A46105FF5B3636E05C8FEB9C8E34AB16
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

34989a08212297f5fab6351a3e936d4ac39dbb3aa1b7446c4f6d5089b2b34226

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Crypter

clover.yesterday.cannon

clover.yesterday.cannon.Splasher

clover.yesterday.cannon.HomeSIM

android.intent.action.MAIN

clover.yesterday.cannon.HomeWallp

android.intent.action.MAIN

clover.yesterday.cannon.HomeSmsung

android.intent.action.MAIN

clover.yesterday.cannon.PlayS

android.intent.action.MAIN

clover.yesterday.cannon.ntvjdjjlqxxzbwlyn

clover.yesterday.cannon.lmfnujfiijewbn

clover.yesterday.cannon.uyxagbmawnescxtpyui

clover.yesterday.cannon.jukuqpspw

clover.yesterday.cannon.zkgilxlpzlimuldxyv

clover.yesterday.cannon.fxinunmvj

clover.yesterday.cannon.bzeohdshxzat

clover.yesterday.cannon.speakit

clover.yesterday.cannon.qozdiyajhipvvth

clover.yesterday.cannon.fzehakibowoxpsczvrz

clover.yesterday.cannon.uttsafgrigd

clover.yesterday.cannon.Toastit

clover.yesterday.cannon.nrtcdiagzlcsvdesxs

clover.yesterday.cannon.RequestAdm

clover.yesterday.cannon.Inputotjuaxyzlawjsswos

clover.yesterday.cannon.ytjdugpqe

clover.yesterday.cannon.ghnqiycy

clover.yesterday.cannon.petaggxtwbipjf

clover.yesterday.cannon.elpdsgerw

clover.yesterday.cannon.lugxywcz

clover.yesterday.cannon.otjuaxyzlawjsswos

clover.yesterday.cannon.rqfqowxewgimxmwl

clover.yesterday.cannon.tofront

clover.yesterday.cannon.dqfjfrsylakiv

clover.yesterday.cannon.vkncvrdbypuzi

clover.yesterday.cannon.CallBacker

clover.yesterday.cannon.ygcihjmntxvzmyug

clover.yesterday.cannon.alarme

AppAlarm

clover.yesterday.cannon.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

clover.yesterday.cannon.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

good.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.CALL_PHONE

clover.yesterday.cannon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

good.apk

File Signature issue

clover.yesterday.cannon.Splasher

clover.yesterday.cannon.HomeSIM

clover.yesterday.cannon.HomeWallp

clover.yesterday.cannon.HomeSmsung

clover.yesterday.cannon.PlayS

clover.yesterday.cannon.ntvjdjjlqxxzbwlyn

clover.yesterday.cannon.lmfnujfiijewbn

clover.yesterday.cannon.uyxagbmawnescxtpyui

clover.yesterday.cannon.jukuqpspw

clover.yesterday.cannon.zkgilxlpzlimuldxyv

clover.yesterday.cannon.fxinunmvj

clover.yesterday.cannon.bzeohdshxzat

clover.yesterday.cannon.speakit

clover.yesterday.cannon.qozdiyajhipvvth

clover.yesterday.cannon.fzehakibowoxpsczvrz

clover.yesterday.cannon.uttsafgrigd

clover.yesterday.cannon.Toastit

clover.yesterday.cannon.nrtcdiagzlcsvdesxs

clover.yesterday.cannon.RequestAdm

clover.yesterday.cannon.Inputotjuaxyzlawjsswos

clover.yesterday.cannon.ytjdugpqe

clover.yesterday.cannon.ghnqiycy

clover.yesterday.cannon.petaggxtwbipjf

clover.yesterday.cannon.elpdsgerw

clover.yesterday.cannon.lugxywcz

clover.yesterday.cannon.otjuaxyzlawjsswos

clover.yesterday.cannon.rqfqowxewgimxmwl

clover.yesterday.cannon.tofront

clover.yesterday.cannon.dqfjfrsylakiv

clover.yesterday.cannon.vkncvrdbypuzi

clover.yesterday.cannon.CallBacker

clover.yesterday.cannon.ygcihjmntxvzmyug

clover.yesterday.cannon.mcfiyzzaervqxk

clover.yesterday.cannon.ueqizlhjv

clover.yesterday.cannon.avpjfoomrogq

clover.yesterday.cannon.dqfzkggkdsxxu

clover.yesterday.cannon.skknztceymoevzysioe

clover.yesterday.cannon.hetbmlzoqayhd

clover.yesterday.cannon.wptiqqevsov

clover.yesterday.cannon.ekkxzryhxpvqk

clover.yesterday.cannon.rhbakauaefngplzcmc

clover.yesterday.cannon.minserv

.krozrzvwseblz

clover.yesterday.cannon.DownloadForegroundService

clover.yesterday.cannon.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

clover.yesterday.cannon.alarme

clover.yesterday.cannon.BootReceiver

clover.yesterday.cannon.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

good.apk