tikoker[.]apk | Triage™

General

Target
tikoker.apk
Size 5.7MB
Sample261024-ramdaavtfs
SHA256 5afb174ad5e229134660c88008a1fd8edbe7fc3507cdb43df21036a570074dbe
MD5 03ee50a26635f2f28f5a26f08adce9c2
SHA1 00e934bf3b10928cdea9057e1ceefaafb3ebfe10
SHA512 57f725f40b331261b040d1b583436f76e42fe76e6e9c5a52634e3feabafb43bbb852b20bebb5693bf57f7c8f7952795aa02a423a302d73d64b7a52bafe38fcf7
SSDEEP 98304:SPs6Ruo/KrrZ8cbNHXwZQqtjRwpbNqZ1wIF7Nou8w6lEU0zK6jz0+Uz9:SPirb5gZQOjUbwjpoVvlEUB6jXg
TLSH
T1CB56F04BFB44992AC4F783B2413A5322154B4C628B4396C7AD54723C28B7AD47F9EBDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tikoker.apk

File Explorer

tikoker.apk

.apk 5.7MB

tikoker.apk

SHA256 5afb174ad5e229134660c88008a1fd8edbe7fc3507cdb43df21036a570074dbe
MD5 03ee50a26635f2f28f5a26f08adce9c2
SHA1 00e934bf3b10928cdea9057e1ceefaafb3ebfe10
SHA512 57f725f40b331261b040d1b583436f76e42fe76e6e9c5a52634e3feabafb43bbb852b20bebb5693bf57f7c8f7952795aa02a423a302d73d64b7a52bafe38fcf7
SSDEEP 98304:SPs6Ruo/KrrZ8cbNHXwZQqtjRwpbNqZ1wIF7Nou8w6lEU0zK6jz0+Uz9:SPirb5gZQOjUbwjpoVvlEUB6jXg
TLSH
T1CB56F04BFB44992AC4F783B2413A5322154B4C628B4396C7AD54723C28B7AD47F9EBDC
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a3ce65d59dfefc698eff9acc2b674d64d1095ace74c2dfe9b61e3bca3c66ad19

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MrTusarRX

oasis.elephantine.galaxy

oasis.elephantine.galaxy.Splasher

oasis.elephantine.galaxy.HomeSIM

android.intent.action.MAIN

oasis.elephantine.galaxy.HomeWallp

android.intent.action.MAIN

oasis.elephantine.galaxy.HomeSmsung

android.intent.action.MAIN

oasis.elephantine.galaxy.PlayS

android.intent.action.MAIN

oasis.elephantine.galaxy.emeraldjqnjbwcswcwme

oasis.elephantine.galaxy.pencilipkqqscab

oasis.elephantine.galaxy.infernojdvwlxigmsdv

oasis.elephantine.galaxy.pinnaclekqxrelcjoecukt

oasis.elephantine.galaxy.yardagefoxygtdo

oasis.elephantine.galaxy.jadecjcbzsrsrq

oasis.elephantine.galaxy.artistqcprnrsdnb

oasis.elephantine.galaxy.speakit

oasis.elephantine.galaxy.rainbowzcguawmt

oasis.elephantine.galaxy.drizzleleqremhfxy

oasis.elephantine.galaxy.adventurehdcfaquiyowl

oasis.elephantine.galaxy.Toastit

oasis.elephantine.galaxy.gloriousdncyqnwc

oasis.elephantine.galaxy.updatenfeefgkb

oasis.elephantine.galaxy.Inputwhisperzbqidmdyaipx

oasis.elephantine.galaxy.specteruvqzyubyl

oasis.elephantine.galaxy.librarydcfqokxvwutnl

oasis.elephantine.galaxy.gargoylejwffzvuwaqo

oasis.elephantine.galaxy.flamingoswiumiurnuk

oasis.elephantine.galaxy.xylophonekawwpped

oasis.elephantine.galaxy.whisperzbqidmdyaipx

oasis.elephantine.galaxy.artistzwugfjog

oasis.elephantine.galaxy.miraclevuaybav

oasis.elephantine.galaxy.luxurybzkvfueokmuqh

oasis.elephantine.galaxy.narrativezakpwzbn

oasis.elephantine.galaxy.CallBacker

oasis.elephantine.galaxy.cedarclbfcjoidz

oasis.elephantine.galaxy.alarme

AppAlarm

oasis.elephantine.galaxy.eveningfnegeqciiqkamxk

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

oasis.elephantine.galaxy.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

tikoker.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

oasis.elephantine.galaxy.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.PACKAGE_USAGE_STATS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

oasis.elephantine.galaxy.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

tikoker.apk

File Signature issue

oasis.elephantine.galaxy.Splasher

oasis.elephantine.galaxy.HomeSIM

oasis.elephantine.galaxy.HomeWallp

oasis.elephantine.galaxy.HomeSmsung

oasis.elephantine.galaxy.PlayS

oasis.elephantine.galaxy.emeraldjqnjbwcswcwme

oasis.elephantine.galaxy.pencilipkqqscab

oasis.elephantine.galaxy.infernojdvwlxigmsdv

oasis.elephantine.galaxy.pinnaclekqxrelcjoecukt

oasis.elephantine.galaxy.yardagefoxygtdo

oasis.elephantine.galaxy.jadecjcbzsrsrq

oasis.elephantine.galaxy.artistqcprnrsdnb

oasis.elephantine.galaxy.speakit

oasis.elephantine.galaxy.rainbowzcguawmt

oasis.elephantine.galaxy.drizzleleqremhfxy

oasis.elephantine.galaxy.adventurehdcfaquiyowl

oasis.elephantine.galaxy.Toastit

oasis.elephantine.galaxy.gloriousdncyqnwc

oasis.elephantine.galaxy.updatenfeefgkb

oasis.elephantine.galaxy.Inputwhisperzbqidmdyaipx

oasis.elephantine.galaxy.specteruvqzyubyl

oasis.elephantine.galaxy.librarydcfqokxvwutnl

oasis.elephantine.galaxy.gargoylejwffzvuwaqo

oasis.elephantine.galaxy.flamingoswiumiurnuk

oasis.elephantine.galaxy.xylophonekawwpped

oasis.elephantine.galaxy.whisperzbqidmdyaipx

oasis.elephantine.galaxy.artistzwugfjog

oasis.elephantine.galaxy.miraclevuaybav

oasis.elephantine.galaxy.luxurybzkvfueokmuqh

oasis.elephantine.galaxy.narrativezakpwzbn

oasis.elephantine.galaxy.CallBacker

oasis.elephantine.galaxy.cedarclbfcjoidz

oasis.elephantine.galaxy.airportqqhdyodiqial

oasis.elephantine.galaxy.octobervfccivk

oasis.elephantine.galaxy.missionppihjafeaywi

oasis.elephantine.galaxy.galleryesilyzloxrdjeauk

oasis.elephantine.galaxy.phoenixzjfhwvu

oasis.elephantine.galaxy.gondolaupzcjywcbyn

oasis.elephantine.galaxy.teacherozjlecwtzkwrdqb

oasis.elephantine.galaxy.orangewgndzhj

oasis.elephantine.galaxy.hunteracutvwdmdeu

oasis.elephantine.galaxy.minserv

oasis.elephantine.galaxy.devicejmwouixos

oasis.elephantine.galaxy.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

oasis.elephantine.galaxy.alarme

oasis.elephantine.galaxy.eveningfnegeqciiqkamxk

oasis.elephantine.galaxy.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

tikoker.apk