crypter_clean[.]apk

General

Target
crypter_clean.apk
Size 8.4MB
Sample261029-zq9gratt3q
SHA256 fc3ede427b8119a7c66622a70f45fb123ffe5ed1f36f9f02f935d0c81e5402d0
MD5 2d7fbe22b85341edfe931f9304a7adba
SHA1 cee13a08e5594f02e1e59ef11edd628efffdebfb
SHA512 7ef90031faa9bdf771b63191695cb9d17a5f8c09d011e38bc202786918db446eba81a7b21322227618197f2edcdbffe286c20b46c67ee7dea229b9de02650f44
SSDEEP 98304:CNo/KrrOWX4np8wT5ymKMCTkIfMlozbHn6jSOx4UnG87cydd82FrjNPMlEF1b+3G:Cee4OaMhTUlozbHOJXG84uFlkw1b+vLC
TLSH
T1F496E046FB40DA16D4FE57724CBEC3D0621B6E91CF5382A77804732C29B36C16E9AAC5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
crypter_clean.apk

File Explorer

crypter_clean.apk

.apk 8.4MB

crypter_clean.apk

SHA256 fc3ede427b8119a7c66622a70f45fb123ffe5ed1f36f9f02f935d0c81e5402d0
MD5 2d7fbe22b85341edfe931f9304a7adba
SHA1 cee13a08e5594f02e1e59ef11edd628efffdebfb
SHA512 7ef90031faa9bdf771b63191695cb9d17a5f8c09d011e38bc202786918db446eba81a7b21322227618197f2edcdbffe286c20b46c67ee7dea229b9de02650f44
SSDEEP 98304:CNo/KrrOWX4np8wT5ymKMCTkIfMlozbHn6jSOx4UnG87cydd82FrjNPMlEF1b+3G:Cee4OaMhTUlozbHOJXG84uFlkw1b+vLC
TLSH
T1F496E046FB40DA16D4FE57724CBEC3D0621B6E91CF5382A77804732C29B36C16E9AAC5
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

661250aa0aba8082e2fdf00a1ff332dc5ab0ad127a4d2666c6d0491288f05b5c

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=SystemUpdate

daisy.zeppelin.cannon

daisy.zeppelin.cannon.Splasher

daisy.zeppelin.cannon.HomeSIM

android.intent.action.MAIN

daisy.zeppelin.cannon.HomeWallp

android.intent.action.MAIN

daisy.zeppelin.cannon.HomeSmsung

android.intent.action.MAIN

daisy.zeppelin.cannon.PlayS

android.intent.action.MAIN

daisy.zeppelin.cannon.sunrisebosjqxusqcb

daisy.zeppelin.cannon.dolphinvmuuusjufasc

daisy.zeppelin.cannon.quantumjarwgew

daisy.zeppelin.cannon.jacketgxycrkenixz

daisy.zeppelin.cannon.journalhsimthjtlb

daisy.zeppelin.cannon.thunderstormwxwwalwrtzym

daisy.zeppelin.cannon.whistleylojaxk

daisy.zeppelin.cannon.speakit

daisy.zeppelin.cannon.kestreldbckqge

daisy.zeppelin.cannon.westwardyfbrqlnizaowg

daisy.zeppelin.cannon.gravityinvgbesov

daisy.zeppelin.cannon.Toastit

daisy.zeppelin.cannon.carbonxukeompkcnhh

daisy.zeppelin.cannon.quantumoonxxqscie

daisy.zeppelin.cannon.Inputstarlightzztxmfhgpu

daisy.zeppelin.cannon.kingdomtngiqp

daisy.zeppelin.cannon.grovewvvbhyqygpcav

daisy.zeppelin.cannon.flamevpwetmpoz

daisy.zeppelin.cannon.specterdeevzqjm

daisy.zeppelin.cannon.eaglevfysbisv

daisy.zeppelin.cannon.starlightzztxmfhgpu

daisy.zeppelin.cannon.knightansofzgcdukai

daisy.zeppelin.cannon.wanderlustoadfgimptfxug

daisy.zeppelin.cannon.naturesjzqflv

daisy.zeppelin.cannon.bananagrsezthf

daisy.zeppelin.cannon.CallBacker

daisy.zeppelin.cannon.gladepugfnmmpbhwigox

daisy.zeppelin.cannon.alarme

AppAlarm

daisy.zeppelin.cannon.jacketzyogdsmjsb

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

daisy.zeppelin.cannon.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

crypter_clean.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

daisy.zeppelin.cannon.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.PACKAGE_USAGE_STATS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

daisy.zeppelin.cannon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

crypter_clean.apk

File Signature issue

daisy.zeppelin.cannon.Splasher

daisy.zeppelin.cannon.HomeSIM

daisy.zeppelin.cannon.HomeWallp

daisy.zeppelin.cannon.HomeSmsung

daisy.zeppelin.cannon.PlayS

daisy.zeppelin.cannon.sunrisebosjqxusqcb

daisy.zeppelin.cannon.dolphinvmuuusjufasc

daisy.zeppelin.cannon.quantumjarwgew

daisy.zeppelin.cannon.jacketgxycrkenixz

daisy.zeppelin.cannon.journalhsimthjtlb

daisy.zeppelin.cannon.thunderstormwxwwalwrtzym

daisy.zeppelin.cannon.whistleylojaxk

daisy.zeppelin.cannon.speakit

daisy.zeppelin.cannon.kestreldbckqge

daisy.zeppelin.cannon.westwardyfbrqlnizaowg

daisy.zeppelin.cannon.gravityinvgbesov

daisy.zeppelin.cannon.Toastit

daisy.zeppelin.cannon.carbonxukeompkcnhh

daisy.zeppelin.cannon.quantumoonxxqscie

daisy.zeppelin.cannon.Inputstarlightzztxmfhgpu

daisy.zeppelin.cannon.kingdomtngiqp

daisy.zeppelin.cannon.grovewvvbhyqygpcav

daisy.zeppelin.cannon.flamevpwetmpoz

daisy.zeppelin.cannon.specterdeevzqjm

daisy.zeppelin.cannon.eaglevfysbisv

daisy.zeppelin.cannon.starlightzztxmfhgpu

daisy.zeppelin.cannon.knightansofzgcdukai

daisy.zeppelin.cannon.wanderlustoadfgimptfxug

daisy.zeppelin.cannon.naturesjzqflv

daisy.zeppelin.cannon.bananagrsezthf

daisy.zeppelin.cannon.CallBacker

daisy.zeppelin.cannon.gladepugfnmmpbhwigox

daisy.zeppelin.cannon.utensilscpypdc

daisy.zeppelin.cannon.nightfallbeiaynyguozu

daisy.zeppelin.cannon.diamondsgjzjwlo

daisy.zeppelin.cannon.xanaduvgqafntibukce

daisy.zeppelin.cannon.railwayzqlfetcvdsfj

daisy.zeppelin.cannon.desertedhnfysqgm

daisy.zeppelin.cannon.hammergkxizzpiz

daisy.zeppelin.cannon.bridgeajvdrsidireo

daisy.zeppelin.cannon.crescentwdkdqayhg

daisy.zeppelin.cannon.minserv

daisy.zeppelin.cannon.ultimatebfjykbgqml

daisy.zeppelin.cannon.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

daisy.zeppelin.cannon.alarme

daisy.zeppelin.cannon.jacketzyogdsmjsb

daisy.zeppelin.cannon.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

crypter_clean.apk