mZL2xNB5e1[.]apk | Triage™

General

Target
mZL2xNB5e1.apk
Size 22.9MB
Sample261029-w4rbjsssd1
SHA256 ff2d5eb17c6ccb5f9829f2db958a02464de0b2fa78c66e37cb818b8ceb2d556e
MD5 b4320e171c201f785c871764a05ee6c0
SHA1 770ce65453609c6b560d10c3bd2e3ed8a6499e27
SHA512 34efc88760d0cf1962d4471e05d846ddbe87bd7fce6fb59336b9366707fdfaf0fc29c6345a2b223077d26e8d3e31fa4d8e6a571447d13a4e77581e3efa6186fe
SSDEEP 196608:87tChsaDidkziEkyWCdsxTdExhHeSntmXb2h/ni/UsJyHXgwAVcZETLBe0Hw4ZGc:hz7ZWTxpExhVtkW/WUbGVcgBBQ4Zep0N
TLSH
T12D37CF0AD51CC532D5DFF17C6E7E0A27B139687805AAC05BBD1DA108FB9B2F015B2B92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
mZL2xNB5e1.apk

File Explorer

mZL2xNB5e1.apk

.apk 22.9MB

mZL2xNB5e1.apk

SHA256 ff2d5eb17c6ccb5f9829f2db958a02464de0b2fa78c66e37cb818b8ceb2d556e
MD5 b4320e171c201f785c871764a05ee6c0
SHA1 770ce65453609c6b560d10c3bd2e3ed8a6499e27
SHA512 34efc88760d0cf1962d4471e05d846ddbe87bd7fce6fb59336b9366707fdfaf0fc29c6345a2b223077d26e8d3e31fa4d8e6a571447d13a4e77581e3efa6186fe
SSDEEP 196608:87tChsaDidkziEkyWCdsxTdExhHeSntmXb2h/ni/UsJyHXgwAVcZETLBe0Hw4ZGc:hz7ZWTxpExhVtkW/WUbGVcgBBQ4Zep0N
TLSH
T12D37CF0AD51CC532D5DFF17C6E7E0A27B139687805AAC05BBD1DA108FB9B2F015B2B92
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:x64 arch:arm arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c4ffc3d79f7f359c173edcf84698e6279ab34e4f58f8d73a334b3725282042a5

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=C9YA66,OU=9QCGXEH9,O=Y498KM5ZKS,L=4DDHXKA8,ST=A3VN3SCX,C=AY,1.2.840.113549.1.9.1=#0c104559423434403253484e43562e636f6d

com.seypsyzxog.bnkxbt

Android Permissions

mZL2xNB5e1.apk

Permissions

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CALL_LOG

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_CALL_LOG

com.seypsyzxog.bnkxbt.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.INTERNET

mZL2xNB5e1.apk

File Signature issue

com.seypsyzxog.bnkxbt.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.lyokone.location.FlutterLocationService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

mZL2xNB5e1.apk

File Signature issue

com.seypsyzxog.bnkxbt.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

com.lyokone.location.FlutterLocationService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

mZL2xNB5e1.apk