LiquidIsland-2[.]0[.]0[.]apk

General

Target
LiquidIsland-2.0.0.apk
Size 4.7MB
Sample261027-elwpwabs9m
SHA256 3e459ddacb185e3f23302f86d525c7374d4ed3a5a805597badc4a05eb528d16b
MD5 00dc95f0da618683603f186f48351805
SHA1 3361cc57948292d7505eabe91e43362c23f4f0ed
SHA512 22bee3737b957cfb0febe7acc2e9efcd025f3e9a3a35e2f7fda87aada5227642b7bca8570b14dbb4e5be043e7aee3a40c80dd09d9659a66f43459c767bd72a57
SSDEEP 98304:KG7pE3ydPV4DYRb30uWOhTjEwrbnU4YVad9bT6iQSBVhaJ5lDGYe:T7yiXAufhbhY0VmiQSBVh6bxe
TLSH
T1C4361115BA897C6FC833C1369D46D665642ADC6A9F93C707B0243B3D24BB3E48F192E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
LiquidIsland-2.0.0.apk

File Explorer

LiquidIsland-2.0.0.apk

.apk 4.7MB

LiquidIsland-2.0.0.apk

SHA256 3e459ddacb185e3f23302f86d525c7374d4ed3a5a805597badc4a05eb528d16b
MD5 00dc95f0da618683603f186f48351805
SHA1 3361cc57948292d7505eabe91e43362c23f4f0ed
SHA512 22bee3737b957cfb0febe7acc2e9efcd025f3e9a3a35e2f7fda87aada5227642b7bca8570b14dbb4e5be043e7aee3a40c80dd09d9659a66f43459c767bd72a57
SSDEEP 98304:KG7pE3ydPV4DYRb30uWOhTjEwrbnU4YVad9bT6iQSBVhaJ5lDGYe:T7yiXAufhbhY0VmiQSBVh6bxe
TLSH
T1C4361115BA897C6FC833C1369D46D665642ADC6A9F93C707B0243B3D24BB3E48F192E4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

89e86fc52b10f29c518587fc0a568f77d022814295e5cc87eb546c5a391feebd

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=B0rzy B0rzy,OU=B0rzy,O=B0rzy,L=B0rzy,ST=B0rzy,C=B0rzy

com.example.liquidisland

Android Permissions

LiquidIsland-2.0.0.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.READ_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.READ_CALL_LOG

android.permission.READ_CONTACTS

android.permission.WRITE_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CALL_PHONE

android.permission.PACKAGE_USAGE_STATS

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.example.liquidisland.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

LiquidIsland-2.0.0.apk

File Signature issue

com.example.liquidisland.MainActivity

com.example.liquidisland.assistant.SiriAssistActivity

com.example.liquidisland.services.DynamicIslandService

com.example.liquidisland.services.DynamicIslandAccessibilityService

com.example.liquidisland.services.NotificationListener

com.example.liquidisland.services.LiquidCallScreeningService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.example.liquidisland.api.IslandApiReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

LiquidIsland-2.0.0.apk

File Signature issue

com.example.liquidisland.MainActivity

com.example.liquidisland.assistant.SiriAssistActivity

com.example.liquidisland.services.DynamicIslandService

com.example.liquidisland.services.DynamicIslandAccessibilityService

com.example.liquidisland.services.NotificationListener

com.example.liquidisland.services.LiquidCallScreeningService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.example.liquidisland.api.IslandApiReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

LiquidIsland-2.0.0.apk