b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk.zip
- SHA256 520645512f9d7d1bc6df4c9b2860daebcd2759ca0bd5c9cbf8361d0a6ebb262d
Password
infected
Static task
static1
6 signatures
General
- Target b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk.zip
- Size 1.2MB
- Sample261023-dl7lpswtbw
- SHA256 520645512f9d7d1bc6df4c9b2860daebcd2759ca0bd5c9cbf8361d0a6ebb262d
- MD5 e6b8ae8d6a0e30bf460df16e9a60a439
- SHA1 61aefefb94c63c013c07406fae88c7318c6c34b8
- SHA512 6e1a3da9c076a9b82096b7185ed5aeda864c5754c3b1cf80397d9ba5494f571c65138e344a46dbfb7a0989b9bae253e4a378dcd66b979ad718d667f4cfda9055
- SSDEEP 24576:fhcSJmupdPC5kcHu0cm+oFsTFNQjqKzKS62DNoVMvFD4RZQm/2gz8620m:fOSddhcHurpTgl62huRF/9ABb
- TLSH T1D64533794236D38169FDE805155F3AA3BC8DF9603AEC548C64BE6F41F98C50ADB0826B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN - Declares services with permission to bind to the system 2 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. android.permission.BIND_NOTIFICATION_LISTENER_SERVICE - Requests dangerous framework permissions 9 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to collect component usage statistics. android.permission.PACKAGE_USAGE_STATS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW - Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk - Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk
File Explorer
-
b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk.zip.zip 1.2MB
-
b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk.apk 1.4MB
b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6.apk
- SHA256 b4dadf3553bb82499c4d0b6be96c47c46abc6904b611376d75c844ffb83725c6
- MD5 84d5b112b9cc198f432d22551a4628e0
- SHA1 6414f7b8770c84ba18de00e8d51722884601b447
- SHA512 08ce145c32c4ba64224daafd6f2a790d098efb74a7b4a214d3bdd3b04361dd632481694ccb056a724dca7994dbad123480e6593bed9020347adf112f4a48b84e
- SSDEEP 24576:lwggx4pEGaI2SJh2orwlu/d1Gmukq25E3ePq920q+/Sfz04PuSgvFkJNpb906k:lwFKpEGpj2kwlg1Gm5SuS9jq+6fPTgvx
- TLSH T14765E145B7C5BC2FCC7384364BBA8A6A95468C468646D7135DB0B52C8EFBEC04E49FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
File Signature issue
Digest
ea5ece41bb845b009924e63fc30981db9438781f
Digest Algorithm
sha1
Digest Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Chains
Jan 1, 0001
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.gotbutcv
com.gotbutcv.p043i
android.permission.READ_EXTERNAL_STORAGE
android.permission.INSTALL_SHORTCUT
android.permission.GET_PACKAGE_SIZE
android.permission.ADD_VOICEMAIL
android.permission.USE_FINGERPRINT
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.Manifest.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.USES_POLICY_FORCE_LOCK
android.permission.VIBRATE
android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND
android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND
android.permission.REQUEST_DELETE_PACKAGES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.REORDER_TASKS
android.permission.PACKAGE_USAGE_STATS
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.SYSTEM_ALERT_WINDOW
com.gotbutcv.p043i
android.intent.action.MAIN
com.gotbutcv.p066w
com.gotbutcv.p062f
com.gotbutcv.p038p
com.gotbutcv.p037p
com.gotbutcv.p092b
com.gotbutcv.p017o
com.gotbutcv.p045w
com.gotbutcv.p098q
android.intent.action.SEND
android.intent.action.SENDTO
com.gotbutcv.p038f
com.gotbutcv.p027y
com.gotbutcv.p037e
com.gotbutcv.tvrdossfnhazz
com.gotbutcv.hzptubbmvrcjz
com.gotbutcv.fgfbrvvcslwq
com.gotbutcv.zfrfmtrrvrizdi
com.gotbutcv.ppjdzsjwawxdvxf
com.gotbutcv.knoyexiwatqisbx
com.gotbutcv.bueoxpzbmultz
com.gotbutcv.p032a
android.intent.action.RESPOND_VIA_MESSAGE
com.gotbutcv.p010w
com.gotbutcv.p057x
com.gotbutcv.LogSrv
com.gotbutcv.p036o
com.gotbutcv.p081b
com.gotbutcv.p072c
com.gotbutcv.p051s
android.accessibilityservice.AccessibilityService
com.gotbutcv.p056q
android.service.notification.NotificationListenerService
com.gotbutcv.p039i
com.gotbutcv.p096b
com.gotbutcv.czpstaviovb
com.gotbutcv.gefgkwnydj
com.gotbutcv.hthltpmxlegf
com.gotbutcv.dsrlxvxrmj
com.gotbutcv.suualvwyqrmzmrl
com.gotbutcv.daacumalgc
com.gotbutcv.ikpjfzmaywt
com.gotbutcv.gthrqfglad
com.gotbutcv.xqxaqvlkjgp
com.gotbutcv.p027f
android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLED
com.gotbutcv.p069m
android.provider.Telephony.SMS_RECEIVED
com.gotbutcv.p082r
android.provider.Telephony.SMS_DELIVER
com.gotbutcv.p023a
android.provider.Telephony.WAP_PUSH_DELIVER
com.gotbutcv.p069n
com.gotbutcv.p018m
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.DREAMING_STOPPED