9x81Pcy1Mb[.]apk | Triage™

General

Target
9x81Pcy1Mb.apk
Size 22.8MB
Sample261023-r9yklasz6q
SHA256 55df7107ae885d3faf561e235b28264d41db649da8396a48727e6c23e368d8cb
MD5 0c8a4c70c1a49c9dd45e57790055c4c7
SHA1 0e12d9ccf6df24199fa9913c702b5c821b251e61
SHA512 3888c8ff810a812ccb2eb85ee55d9b363a7055a51838074b70c83b03a59293ecc01bcfa5d2d4aa83e0b305808a3db870f848a871ade22f5986046c25b204e488
SSDEEP 196608:hemPChsaDiykziEkyWCdsxTdExhHeSntv5ikrWDOyvPfU6nN/R1I+JM5kYU+:Ee7ZWTxpExhVtM656Np14yV+
TLSH
T16037CF0AD51CC532D5DFF17C6E7E0A27B139687805AAC05BBD1CA108FB9B6F015B2B92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
9x81Pcy1Mb.apk

File Explorer

9x81Pcy1Mb.apk

.apk 22.8MB

9x81Pcy1Mb.apk

SHA256 55df7107ae885d3faf561e235b28264d41db649da8396a48727e6c23e368d8cb
MD5 0c8a4c70c1a49c9dd45e57790055c4c7
SHA1 0e12d9ccf6df24199fa9913c702b5c821b251e61
SHA512 3888c8ff810a812ccb2eb85ee55d9b363a7055a51838074b70c83b03a59293ecc01bcfa5d2d4aa83e0b305808a3db870f848a871ade22f5986046c25b204e488
SSDEEP 196608:hemPChsaDiykziEkyWCdsxTdExhHeSntv5ikrWDOyvPfU6nN/R1I+JM5kYU+:Ee7ZWTxpExhVtM656Np14yV+
TLSH
T16037CF0AD51CC532D5DFF17C6E7E0A27B139687805AAC05BBD1CA108FB9B6F015B2B92
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:x64 arch:arm arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

d064f1ca5e0ae34481c2bc8551259952e4d5e7109a49c3592df5541baea4d513

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=EJVCX8,OU=TG3YLHJU,O=RC5URGDAKV,L=UR87E9AH,ST=AFH6R9Y3,C=YT,1.2.840.113549.1.9.1=#0c1043543351334047434e3945372e636f6d

com.zsfqmj.xqrrelze

Android Permissions

9x81Pcy1Mb.apk

Permissions

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CALL_LOG

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_CALL_LOG

com.zsfqmj.xqrrelze.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.WRITE_EXTERNAL_STORAGE

9x81Pcy1Mb.apk

File Signature issue

com.zsfqmj.xqrrelze.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.lyokone.location.FlutterLocationService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

9x81Pcy1Mb.apk

File Signature issue

com.zsfqmj.xqrrelze.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.lyokone.location.FlutterLocationService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

9x81Pcy1Mb.apk