hwmEKcOdeVI[.]apk | Triage™

Reason

error processing APK: could not decode AXML: EOF

General

Target
hwmEKcOdeVI.apk
Size 25.5MB
Sample261024-spcm3aaw6x
SHA256 10852f560b13a2a848721b1c77bf7b757981b70de836d5c092ec1415cef04173
MD5 2dc4dcc28fdeab42aec0faf437131b0c
SHA1 dade42923118a74aeb1b386e9b14874e2eb472ca
SHA512 c75f4bfc4794d4e3431ba261787462580db4819b35deed922ba48a14b0fd29417c5904511d3f0fd086cb0490263fb10a340e7c52c684be6940bf99dd13eaeb0f
SSDEEP 786432:7M3sdBkFSYtuC1s428TpeHgZ1NQ4gx18VwZrCPv:72Y2fLs4260AZ1NQbx3mv
TLSH
T1A1472357FF84A97AF4F2933618355725E94B8C318B9392879904723C68F36E41F89EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Layer-1 encrypted wrapper APK: two AES-256-GCM blobs in assets + fake resources.arsc/ folder with 85 1 IoCs

resource	yara_rule
sample	Android_Dropper_TWISTORA_Wrapper

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
hwmEKcOdeVI.apk

SHA256 10852f560b13a2a848721b1c77bf7b757981b70de836d5c092ec1415cef04173
MD5 2dc4dcc28fdeab42aec0faf437131b0c
SHA1 dade42923118a74aeb1b386e9b14874e2eb472ca
SHA512 c75f4bfc4794d4e3431ba261787462580db4819b35deed922ba48a14b0fd29417c5904511d3f0fd086cb0490263fb10a340e7c52c684be6940bf99dd13eaeb0f
SSDEEP 786432:7M3sdBkFSYtuC1s428TpeHgZ1NQ4gx18VwZrCPv:72Y2fLs4260AZ1NQbx3mv
TLSH
T1A1472357FF84A97AF4F2933618355725E94B8C318B9392879904723C68F36E41F89EC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Layer-1 encrypted wrapper APK: two AES-256-GCM blobs in assets + fake resources.arsc/ folder with 85
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

a7088a62aa62fcc1d178e60ea7ccba241e30490485a56db9d6504a59786a9add

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d