NBT BOX.zip
- SHA256 e6577d1b9bc2d1cdfdcb1057474ab252851d3573412c72491781bccf24ef6909
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
NBT BOX/Toolbox.apk
Resource
android-34-x64-arm64-20260325.1-en
android-14-x64
0 signatures
150 seconds
General
- Target NBT BOX.zip
- Size 19.2MB
- Sample261022-swdtpsvx2n
- SHA256 e6577d1b9bc2d1cdfdcb1057474ab252851d3573412c72491781bccf24ef6909
- MD5 6c83835898a6ff5a61c01a52e0edb0e9
- SHA1 350a7bb597777fc48bcb990294e7151985a3c28b
- SHA512 21e03c5afb93b64faf69bd5d46a5b173e2b4736c9418ebfdf14258321f0e4ef69029b16e51aad94b497d639154bbe59e6c774e965b8b5d302b3f6c1b90f98245
- SSDEEP 393216:mkodBij85LOmVx+JBbFPwuaJBHjIWVtL6lWhBkEArJSOF:mkodHLtX+J3YjIWVklWhBkESJSOF
- TLSH T1491733BA896F7ABC7528B41FCAD1C0194C866285E85426F2131FBBD1BF26350B78CD53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 8 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Required to be able to access the camera device. android.permission.CAMERA Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/NBT BOX/Toolbox.apk - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/NBT BOX/Toolbox.apk - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/NBT BOX/Toolbox.apk
File Explorer
-
NBT BOX.zip.zip 19.2MB
-
NBT BOX/Toolbox.apk.apk 20.6MB
-
NBT BOX/nbt_presets/[👑] Креатив.txt13KB
-
NBT BOX/nbt_presets/[🗑️] Отчистка Мира.txt7KB
-
NBT BOX/nbt_presets/[🚀] Метеориты.txt7KB
-
NBT BOX/Инструкция.txt681B
NBT BOX/Toolbox.apk
- SHA256 fb282eb07f87766fd4d05e96e22309b52b7bcc188b41c4b4bc522271ec7f6b9a
- MD5 b38665ab4ec1d7f1504e59a776864817
- SHA1 eb5960a78ac39eac44081bb618ca04cfe7bd088d
- SHA512 8390a97df25908e359866edd7c1d32b1d888317adc3492d52bcc1eec692986e39484f45262fbac79512a5bb71f718b6c39d973a5abed36c5b6bb481f8fccedc5
- SSDEEP 393216:6kifG4b5MBW6lbwzv1twzKBSzVDgkZ7w2ReNKWiiUWK7:6kifGjBRpwzEZVDgEVReNKWint7
- TLSH T16A272253F31BBC6FD8E3A63A8677412654169D918353DBA2191DF2383EB76C4CA48EC0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
d7d0948df21bcf3ffe275dff1d358a315837160a
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
io.mrarm.mctoolbox
io.mrarm.mctoolbox.MinecraftActivity
android.permission.QUERY_ALL_PACKAGES
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.FLASHLIGHT
net.dinglisch.android.tasker.PERMISSION_RUN_TASKS
android.permission.BLUETOOTH_ADMIN
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.USE_FINGERPRINT
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
io.mrarm.mctoolbox.MinecraftActivity
android.intent.action.MAIN
io.mrarm.mctoolbox.OssActivity
io.mrarm.mctoolbox.ErrorActivity
io.mrarm.mctoolbox.RelaunchActivity
io.mrarm.mctoolbox.DiagnosticActivity
android.intent.action.VIEW
com.adcolony.sdk.AdColonyInterstitialActivity
com.adcolony.sdk.AdColonyAdViewActivity
com.android.billingclient.api.ProxyBillingActivity
io.mrarm.yurai.msa.ui.web.WebLoginActivity
io.mrarm.yurai.msa.ui.web.WebUpdateLoginActivity
io.mrarm.yurai.xbox.XboxLoginActivity
io.mrarm.yurai.xal.XalLoginActivity
com.google.android.gms.ads.AdActivity
com.applisto.appcloner.classes.DefaultProvider$MyActivity
com.applisto.appcloner.classes.FakeCamera$FakeCameraActivity
com.applisto.appcloner.service.RemoteService
com.applisto.appcloner.classes.DefaultProvider$DefaultReceiver
com.applisto.appcloner.classes.FakeCamera$FakeCameraReceiver
com.applisto.appcloner.action.FAKE_CAMERA_SELECT_CAMERA_PICTURE
com.applisto.appcloner.action.FAKE_CAMERA_ROTATE_CLOCKWISE
com.applisto.appcloner.action.FAKE_CAMERA_ROTATE_ANTI_CLOCKWISE
com.applisto.appcloner.classes.DisableClipboardAccess$ClearClipboardReceiver
com.google.android.gms.ads.MobileAdsInitProvider
com.applisto.appcloner.classes.DefaultProvider
NBT BOX/nbt_presets/[👑] Креатив.txt
- SHA256 5fb7391f2c83fd81f9a02e15ff2a3ddf7e8497e83b8eb350bf56170add600b47
- MD5 7a01dd7dd1d7b2d44061cef91ac02e12
- SHA1 25eb3b46607416df1a9c471d71f3ac300cd09d8a
- SHA512 db2856f4174a87eee72c81bc83daf2ab9f10cfc124e83ef7f4c7602d84c470d0b5b3428390d5a73058ef07ba6013196694e07450db0d57aea21df02422a0d2d7
- SSDEEP 192:9gF6oGnvVK8LUz/RO8sm+KfrMynvVK8LUz/RO8sm+KfrMR:eGnvVwjROmZnvVwjROm8
- TLSH T14852755AFA749B1844FF6C3F985F85FD90808205CE98D5E0F659C5C809FAE8B72D8612
- MD5 SHA1 SHA512 SSDEEP TLSH
NBT BOX/nbt_presets/[🗑️] Отчистка Мира.txt
- SHA256 526309b263f22b5a7c10849b44e0623fc6411ad54bc807c4021e25872926fb05
- MD5 998f94ba25461b2dac16221177f3ac14
- SHA1 cc5f9ec7539b8a643db8f3ee6d9f7e912f4b4956
- SHA512 a2380677bf1493ece3c2810078fc2979860587fe4c29a7470ee1949911fa16548b02033889bd2c4583f2eb33a43cc99f6dff80606583f780daa665ce27536ae6
- SSDEEP 96:k+3Uhfz/SA0/RS0/RSZ/RSf/RSG/RSC/RS9/GZlklrdgPbKER91rPp8LLy9jB7vF:/HmqdBQeIdgz1R9VB8LLKQ8smsMma
- TLSH T14DF19809F9B8971D54BFAC37A85FC5FDD0904206CF88C1D1F255D9882AFAF877598A02
- MD5 SHA1 SHA512 SSDEEP TLSH
NBT BOX/nbt_presets/[🚀] Метеориты.txt
- SHA256 1ba80f595b2a35a92d3e85ce0154b94da732f16fab95fef035a9ae35b77881df
- MD5 1d94dd1d1130f07741517f3bb48c127d
- SHA1 a2f567029b07463b346744d9ae69c047713c0e08
- SHA512 56c8d97bf443e03731cdae7ea18c9535a930a8ba181f7e1a4ffd34fd0feee28a85bd30f7f6b1d70c888bd990ab8df4a6fdb129034c5e41bd65dcf236edf066f0
- SSDEEP 96:k+OUh2Sh/3S9/3SSZ/3Sm546/3S+/3S6TY/YZlklrdgPbKgR91rPp8LLy9jB7v0O:z2J5FVEwIdgz/R9VB8LLKQ8smsMma
- TLSH T162F1A749F9B4571954AFAC3BB85FC9FDD0C082068F94C0D1F265D9C829FAE87B5D8602
- MD5 SHA1 SHA512 SSDEEP TLSH
NBT BOX/Инструкция.txt
- SHA256 2dcad44b214531cbb1370bffca42970562352920fa211ddce57133732ada2eeb
- MD5 53ccfe709604338a3974ba28f3c6f37b
- SHA1 281dfe3381170aa7128666583f661fc2da8ca8c1
- SHA512 4b5ed27309f8e69c47ea9c44f3fda84c807ce294cbc707b5947c9cadad8af56f9f3bc9cd505ac57115ab979d2d2a8223a4931a6a92af6808ef7d1a077ff98463
- TLSH T17F01DB801B46A4CA5D46D007D404AD0A7DEA06FFBBEE576204EA4DBDA096066417B529
- MD5 SHA1 SHA512 TLSH