YTDLnis-1[.]9[.]0-arm64-v8a-github-release[.]apk

General

Target
YTDLnis-1.9.0-arm64-v8a-github-release.apk
Size 65.0MB
Sample261024-tqflsavycv
SHA256 aa7b78d52575c886e4639ab319c7cd6cbada7543a31c4e523b4237cebb0b43e7
MD5 25d98c3336f96527b671f182ad5a1421
SHA1 aa1634dfea38d9bdbc4c4490fb71363e339b93e5
SHA512 62118f79a556054bce71feed996a3f2dfd1b68b8306be4707ff5b9d2b2fc9734b31b9290171154fc8e13466b0719781039c6bf6228a7dc455f786c22e86d8860
SSDEEP 1572864:ZJo+RqXKMUz3Lay4ylxvZ0hqc/bZTBG3nCSurMDmEPJepbLiPgf:ZbRq6Rba/y2hqc/9Tc5uo/0Li4f
TLSH
T165E7338AA798EF2EC47710718C5D6339259A4C2A8B43DBC36914370C7AB75F44F19BE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
YTDLnis-1.9.0-arm64-v8a-github-release.apk

File Explorer

YTDLnis-1.9.0-arm64-v8a-github-release.apk

.apk 65.0MB

YTDLnis-1.9.0-arm64-v8a-github-release.apk

SHA256 aa7b78d52575c886e4639ab319c7cd6cbada7543a31c4e523b4237cebb0b43e7
MD5 25d98c3336f96527b671f182ad5a1421
SHA1 aa1634dfea38d9bdbc4c4490fb71363e339b93e5
SHA512 62118f79a556054bce71feed996a3f2dfd1b68b8306be4707ff5b9d2b2fc9734b31b9290171154fc8e13466b0719781039c6bf6228a7dc455f786c22e86d8860
SSDEEP 1572864:ZJo+RqXKMUz3Lay4ylxvZ0hqc/bZTBG3nCSurMDmEPJepbLiPgf:ZbRq6Rba/y2hqc/9Tc5uo/0Li4f
TLSH
T165E7338AA798EF2EC47710718C5D6339259A4C2A8B43DBC36914370C7AB75F44F19BE8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

786fdfae33306fff121bfac10a1d065928da40ce0554680480b92a23fb2a0c9b

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Denis Cerri,OU=Personal,O=Personal,L=Albania,ST=Albania,C=AL

com.deniscerri.ytdl

com.deniscerri.ytdl.MainActivity

com.deniscerri.ytdl.receiver.ShareActivity

android.intent.action.SEND android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.deniscerri.ytdl.receiver.TransparentActivity

android.intent.action.VIEW

com.deniscerri.ytdl.ui.more.settings.SettingsActivity

ytdlnis.settings.SettingsActivity

com.deniscerri.ytdl.ui.more.terminal.TerminalActivity

ytdlnis.TerminalActivity

com.deniscerri.ytdl.ui.more.cookies.WebViewActivity

ytdlnis.WebViewActivity

com.deniscerri.ytdl.ui.more.settings.advanced.generateyoutubepotokens.webview.PoTokenWebViewLoginActivity

ytdlnis.PoTokenWebViewLoginActivity

com.deniscerri.ytdl.receiver.ResumeActivity

ytdlnis.ResumeActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

Android Permissions

YTDLnis-1.9.0-arm64-v8a-github-release.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.POST_PROMOTED_NOTIFICATIONS

android.permission.ACTION_OPEN_DOCUMENT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS

com.deniscerri.ytdl.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

moe.shizuku.manager.permission.API_V23

YTDLnis-1.9.0-arm64-v8a-github-release.apk

File Signature issue

com.deniscerri.ytdl.MainActivity

com.deniscerri.ytdl.receiver.ShareActivity

com.deniscerri.ytdl.receiver.TransparentActivity

com.deniscerri.ytdl.ui.more.settings.SettingsActivity

com.deniscerri.ytdl.ui.more.terminal.TerminalActivity

com.deniscerri.ytdl.ui.more.cookies.WebViewActivity

com.deniscerri.ytdl.ui.more.settings.advanced.generateyoutubepotokens.webview.PoTokenWebViewLoginActivity

com.deniscerri.ytdl.receiver.ResumeActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

androidx.appcompat.app.AppLocalesMetadataHolderService

androidx.work.impl.foreground.SystemForegroundService

com.deniscerri.ytdl.services.BgUtilsPoTokenGeneratorService

com.deniscerri.ytdl.services.TerminalSessionService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

com.deniscerri.ytdl.receiver.CancelDownloadNotificationReceiver

com.deniscerri.ytdl.receiver.CancelWorkReceiver

com.deniscerri.ytdl.receiver.PauseDownloadNotificationReceiver

com.deniscerri.ytdl.receiver.CancelScheduleAlarmReceiver

com.deniscerri.ytdl.receiver.ScheduleAlarmReceiver

com.deniscerri.ytdl.receiver.ObserveSourceAlarmReceiver

com.deniscerri.ytdl.receiver.ObserveBootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

rikka.shizuku.ShizukuProvider

androidx.startup.InitializationProvider

com.squareup.picasso.PicassoProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

YTDLnis-1.9.0-arm64-v8a-github-release.apk

File Signature issue

com.deniscerri.ytdl.MainActivity

com.deniscerri.ytdl.receiver.ShareActivity

com.deniscerri.ytdl.receiver.TransparentActivity

com.deniscerri.ytdl.ui.more.settings.SettingsActivity

com.deniscerri.ytdl.ui.more.terminal.TerminalActivity

com.deniscerri.ytdl.ui.more.cookies.WebViewActivity

com.deniscerri.ytdl.ui.more.settings.advanced.generateyoutubepotokens.webview.PoTokenWebViewLoginActivity

com.deniscerri.ytdl.receiver.ResumeActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

androidx.appcompat.app.AppLocalesMetadataHolderService

androidx.work.impl.foreground.SystemForegroundService

com.deniscerri.ytdl.services.BgUtilsPoTokenGeneratorService

com.deniscerri.ytdl.services.TerminalSessionService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

com.deniscerri.ytdl.receiver.CancelDownloadNotificationReceiver

com.deniscerri.ytdl.receiver.CancelWorkReceiver

com.deniscerri.ytdl.receiver.PauseDownloadNotificationReceiver

com.deniscerri.ytdl.receiver.CancelScheduleAlarmReceiver

com.deniscerri.ytdl.receiver.ScheduleAlarmReceiver

com.deniscerri.ytdl.receiver.ObserveSourceAlarmReceiver

com.deniscerri.ytdl.receiver.ObserveBootReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

rikka.shizuku.ShizukuProvider

androidx.startup.InitializationProvider

com.squareup.picasso.PicassoProvider

Android Permissions

YTDLnis-1.9.0-arm64-v8a-github-release.apk