download_34858816[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
download_34858816.apk
Size 29.9MB
Sample261029-wc2cfa1we1
SHA256 a6c5161f0489ccc7b7c6dc55a54d3da1797fbb3faef97bdce124924d3beeb06e
MD5 4833bda4f9b19e12707e245429cb2b37
SHA1 9dcc7de9c120117af21a4227f623b7ab806691b1
SHA512 7b39f5f35e60bceeb28fb6c43c511802f66d119faf49b454cba45f094630ec2609fecb196952b349cd76ff7ce9006fe35331c4923f930f6b6de093c1e206aee7
SSDEEP 786432:kHCGsRQ2PTEOcIokzeNpYlrBmOPg9KdVdI0:1/RZTEizcO15PgeVX
TLSH
T1C867231AFB4CAF5FC4FB6374497E612261065C698B03D6C72E24737C28B79D00A46BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
download_34858816.apk

File Explorer

download_34858816.apk

.apk 29.9MB

download_34858816.apk

SHA256 a6c5161f0489ccc7b7c6dc55a54d3da1797fbb3faef97bdce124924d3beeb06e
MD5 4833bda4f9b19e12707e245429cb2b37
SHA1 9dcc7de9c120117af21a4227f623b7ab806691b1
SHA512 7b39f5f35e60bceeb28fb6c43c511802f66d119faf49b454cba45f094630ec2609fecb196952b349cd76ff7ce9006fe35331c4923f930f6b6de093c1e206aee7
SSDEEP 786432:kHCGsRQ2PTEOcIokzeNpYlrBmOPg9KdVdI0:1/RZTEizcO15PgeVX
TLSH
T1C867231AFB4CAF5FC4FB6374497E612261065C698B03D6C72E24737C28B79D00A46BE9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c6f8dd71b88784d1551e516aa28eafb6d842e9945ed8f46421963e38611bdfe1

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=ECNMTmbIsQe,OU=lcxaQTCBR,O=caaoNfrptgDU,L=RkquZTXVBQq,ST=aKgfVWMrRb,C=nxUtdp

com.kelsos.mbrc

com.kelsos.mbrc.ui.MainActivity

android.intent.action.MAIN

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.google.android.gms.common.api.GoogleApiActivity

com.kelsos.mbrc.TXHLuWGeyRLaxHDAca

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.facebook.ads.AudienceNetworkActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.PopupAdActivity

sg.bigo.ads.api.LandingStyleableActivity

sg.bigo.ads.api.LandscapeAdActivity

sg.bigo.ads.api.CompanionAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

Android Permissions

download_34858816.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

com.kelsos.mbrc.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.MANAGE_OWN_CALLS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Sharing

General

Malware Config

Signatures

File Explorer

download_34858816.apk

File Signature issue

com.kelsos.mbrc.ui.MainActivity

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.google.android.gms.common.api.GoogleApiActivity

com.kelsos.mbrc.TXHLuWGeyRLaxHDAca

com.unity3d.services.ads.adunit.AdUnitActivity

com.unity3d.services.ads.adunit.AdUnitTransparentActivity

com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity

com.unity3d.services.ads.adunit.AdUnitSoftwareActivity

com.unity3d.ads.adplayer.FullScreenWebViewDisplay

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.mbridge.msdk.newreward.player.MBRewardVideoActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity

com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity

com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore

com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity

com.fyber.inneractive.sdk.activities.FyberReportAdActivity

com.facebook.ads.AudienceNetworkActivity

sg.bigo.ads.ad.splash.AdSplashActivity

sg.bigo.ads.ad.splash.LandscapeAdSplashActivity

sg.bigo.ads.controller.form.AdFormActivity

sg.bigo.ads.api.AdActivity

sg.bigo.ads.api.PopupAdActivity

sg.bigo.ads.api.LandingStyleableActivity

sg.bigo.ads.api.LandscapeAdActivity

sg.bigo.ads.api.CompanionAdActivity

sg.bigo.ads.api.LandscapeCompanionAdActivity

sg.bigo.ads.core.mraid.MraidVideoActivity

com.bytedance.sdk.openadsdk.activity.TTCeilingLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity

com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity

com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity

com.bytedance.sdk.openadsdk.activity.TTAdActivity

com.kelsos.mbrc.service.RemoteService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.components.ComponentDiscoveryService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

androidx.core.widget.RemoteViewsCompatService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.kelsos.mbrc.xAwlnITQjLnekmIxrhIH

com.kelsos.mbrc.rsskLIODhFRVHUf

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.kelsos.mbrc.feature.widgets.glance.NormalWidgetReceiver

com.kelsos.mbrc.service.mediasession.MediaButtonReceiver

com.kelsos.mbrc.feature.widgets.glance.SmallWidgetReceiver

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver