1DM+-v20[.]0_build_30257-Mod_v2-arm64-v8a[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
1DM+-v20.0_build_30257-Mod_v2-arm64-v8a.apk
Size 57.2MB
Sample261026-sfvsaaxtg1
SHA256 bcdae59a4114e4a654b207ffe322bf5ba9a2fcf0612d71267ddbda330e492611
MD5 c35d19639989b2bcf3212a159324dffb
SHA1 55ae8e7b0bcc9ac6ae4f39711cb9378331b43f4b
SHA512 e7b088c351e1fc1c08fb91b854a6d35401d364ab551d651565942b000b368adb4373400e8d59f7698e4c31b561672ddaa53d40a24e5eecbc7867392e288378e9
SSDEEP 786432:jTkniL4VdkyDhD8tAqADlvhIax8Ui9uzlm1GKcUW3NWbajaLQeoxnw0ly:nX4HB8cZvmUFzlmMKIn6
TLSH
T16DD7C00DF74CE83ADED6F1BC8C5A05B271263CB45B52C1A62811B22DF9B3AE44635BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
1DM+-v20.0_build_30257-Mod_v2-arm64-v8a.apk

File Explorer

1DM+-v20.0_build_30257-Mod_v2-arm64-v8a.apk

.apk 57.2MB

1DM+-v20.0_build_30257-Mod_v2-arm64-v8a.apk

SHA256 bcdae59a4114e4a654b207ffe322bf5ba9a2fcf0612d71267ddbda330e492611
MD5 c35d19639989b2bcf3212a159324dffb
SHA1 55ae8e7b0bcc9ac6ae4f39711cb9378331b43f4b
SHA512 e7b088c351e1fc1c08fb91b854a6d35401d364ab551d651565942b000b368adb4373400e8d59f7698e4c31b561672ddaa53d40a24e5eecbc7867392e288378e9
SSDEEP 786432:jTkniL4VdkyDhD8tAqADlvhIax8Ui9uzlm1GKcUW3NWbajaLQeoxnw0ly:nX4HB8cZvmUFzlmMKIn6
TLSH
T16DD7C00DF74CE83ADED6F1BC8C5A05B271263CB45B52C1A62811B22DF9B3AE44635BD1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8921cd8657238870760cdda30098b28e11b3a670d66ae74d9e184dfc1eaa4837

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=rockz5555 OU=Droid Freedom Unit O=Droid Freedom Inc L=Unknown S=Unknown C=LK

idm.internet.download.manager.plus

acr.browser.lightning.activity.WebsiteSettingsListActivity

idm.internet.download.manager.CustomThemePreviewActivity

android.intent.action.VIEW

acr.browser.lightning.activity.BrowserHistoryActivity

acr.browser.lightning.activity.WebSiteSettingsActivity

idm.internet.download.manager.MainActivity

android.intent.action.MAIN

idm.internet.download.manager.AppIconRestartActivity

idm.internet.download.manager.FolderPicker

acr.browser.lightning.activity.MainActivity

android.intent.action.MAIN info.guardianproject.panic.action.TRIGGER

acr.browser.lightning.activity.MainActivityLauncher

android.intent.action.MAIN

acr.browser.lightning.activity.SettingsActivity

android.intent.action.SETTINGS

acr.browser.lightning.activity.BrowserLauncherInternal

acr.browser.lightning.activity.NormalBrowserNewTabLauncherInternal

acr.browser.lightning.activity.IncognitoBrowserNewTabLauncherInternal

acr.browser.lightning.activity.FileChooserCameraActivity

acr.browser.lightning.activity.BrowserLauncher

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.SEND android.intent.action.SENDTO android.intent.action.WEB_SEARCH android.intent.action.WEB_SEARCH android.intent.action.PROCESS_TEXT

acr.browser.lightning.activity.IncognitoActivity

android.intent.action.INCOGNITO info.guardianproject.panic.action.TRIGGER

acr.browser.lightning.activity.IncognitoActivityLauncher

android.intent.action.MAIN

acr.browser.lightning.activity.ReadingActivity

android.intent.action.READING

idm.internet.download.manager.IDMSettingsActivity

idm.internet.download.manager.SavedPasswords

idm.internet.download.manager.backup.BackupRestoreActivity

com.dropbox.core.android.AuthActivity

android.intent.action.VIEW

idm.internet.download.manager.TorrentDetails

idm.internet.download.manager.Downloader

android.intent.action.VIEW android.intent.action.VIEW

idm.internet.download.manager.ColorSelection

idm.internet.download.manager.WebsiteDownloadLimit

idm.internet.download.manager.HostsManagement

idm.internet.download.manager.Archive

acr.browser.lightning.activity.GrabberActivity

acr.browser.lightning.activity.TextViewerActivity

idm.internet.download.manager.AdblockWhitelistActivity

idm.internet.download.manager.HostsSourceManagement

idm.internet.download.manager.HostsWhitelistManagement

idm.internet.download.manager.DomainPartLimitActivity

acr.browser.lightning.activity.ShortcutMenuStripSettingsActivity

idm.internet.download.manager.IDMTileSettingsActivity

android.service.quicksettings.action.QS_TILE_PREFERENCES

acr.browser.lightning.activity.AdblockerSourceManagementActivity

acr.browser.lightning.activity.PageResourceListActivity

acr.browser.lightning.activity.ManualFilterSourceActivity

acr.browser.lightning.activity.HideElementFilterSourceActivity

acr.browser.lightning.activity.PasswordManagerActivity

idm.internet.download.manager.BadFiltersManagement

idm.internet.download.manager.ExitDownloadService

android.intent.action.VIEW

idm.internet.download.manager.ExitAppUiAndDownloadService

android.intent.action.VIEW

acr.browser.lightning.activity.DisableMainActivityLauncher

acr.browser.lightning.activity.DisableIncognitoActivityLauncher

idm.internet.download.manager.NotificationOptOutActivity

idm.internet.download.manager.DownloaderForSkipEditor

acr.browser.lightning.activity.UrlToAppMappingActivity

idm.internet.download.manager.userscript.activities.UserscriptNotificationActivity

idm.internet.download.manager.userscript.activities.UserScriptListActivity

idm.internet.download.manager.userscript.activities.UserScriptPermissionActivity

idm.internet.download.manager.userscript.activities.UserScriptLogActivity

androidx.biometric.internal.ui.FingerprintDialogActivity

com.google.android.gms.common.api.GoogleApiActivity

idm.internet.download.manager.IDMTileServiceQuaternary

android.service.quicksettings.action.QS_TILE

idm.internet.download.manager.IDMTileServiceTertiary

android.service.quicksettings.action.QS_TILE

idm.internet.download.manager.IDMTileServiceSecondary

android.service.quicksettings.action.QS_TILE

idm.internet.download.manager.IDMTileServicePrimary

android.service.quicksettings.action.QS_TILE

idm.internet.download.manager.DownloadService

acr.browser.lightning.activity.MediaPlaybackService

idm.internet.download.manager.MediaScannerService

idm.internet.download.manager.CheckAppVersion

idm.internet.download.manager.backup.AppActionBackupService

idm.internet.download.manager.IDMFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT com.google.firebase.INSTANCE_ID_EVENT

idm.internet.download.manager.TempFilesDeletionService

idm.internet.download.manager.LogcatCaptureService

idm.internet.download.manager.IDMVpnService

android.net.VpnService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

androidx.room.MultiInstanceInvalidationService

Android Permissions

1DM+-v20.0_build_30257-Mod_v2-arm64-v8a.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIDE_OVERLAY_WINDOWS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_FINE_LOCATION

android.permission.SCHEDULE_EXACT_ALARM

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.QUERY_ALL_PACKAGES

android.permission.PACKAGE_USAGE_STATS

android.permission.READ_PHONE_STATE

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.c2dm.permission.RECEIVE

idm.internet.download.manager.plus.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION