bank[.]apk | Triage™

General

Target
bank.apk
Size 2.3MB
Sample261023-dm4answtb1
SHA256 8166dfba7fd0b4ad44c8bc91cc0e98fa06b8912e3fca2093900eb58ba79d22d4
MD5 6afd1e9c4c4e7a4a71c0202c21e2a6d1
SHA1 a4c701f9a4cb0926b5461965f426887ac09450c6
SHA512 0250cf56ae2cdec86e611f4aeaf65d1fa87750ed854ad453485e6653d81ff909264ee5010321c64d7e246d2d79eaf3c90929cbf799f2ea95aff4d201a0af8c0e
SSDEEP 49152:HkcaH2THvo91hLMCjXfZHBUJacfZe9lLh+hQi98cy5O:ExlfICTlIa8M9lt+aK65O
TLSH
T156B5F045BBA89F0EC877D1360C4A5232641AED23CB53C387D9746B5928AF6F44F113EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
bank.apk

File Explorer

bank.apk

.apk 2.3MB

bank.apk

SHA256 8166dfba7fd0b4ad44c8bc91cc0e98fa06b8912e3fca2093900eb58ba79d22d4
MD5 6afd1e9c4c4e7a4a71c0202c21e2a6d1
SHA1 a4c701f9a4cb0926b5461965f426887ac09450c6
SHA512 0250cf56ae2cdec86e611f4aeaf65d1fa87750ed854ad453485e6653d81ff909264ee5010321c64d7e246d2d79eaf3c90929cbf799f2ea95aff4d201a0af8c0e
SSDEEP 49152:HkcaH2THvo91hLMCjXfZHBUJacfZe9lLh+hQi98cy5O:ExlfICTlIa8M9lt+aK65O
TLSH
T156B5F045BBA89F0EC877D1360C4A5232641AED23CB53C387D9746B5928AF6F44F113EA
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c2bdda545914066a65671ae8146cb58cb1f41a90f57631c0254efa1972e912da

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=key_s2rhhxh,OU=Development,O=AndroidDev,L=City,ST=State,C=US

com.android.s2rhhxh

Android Permissions

bank.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

com.android.s2rhhxh.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

bank.apk

File Signature issue

com.android.s2rhhxh.MainActivity

com.android.s2rhhxh.BackgroundService

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

bank.apk

File Signature issue

com.android.s2rhhxh.MainActivity

com.android.s2rhhxh.BackgroundService

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

bank.apk