amadz[.]apk | Triage™

General

Target
amadz.apk
Size 14.6MB
Sample261030-2cf96afv6x
SHA256 db3f49d2547890ac20abc435d0a8568d22fce5fd6b70810b78b9225378ca091b
MD5 d5748725ef3850366347fd7ecced6633
SHA1 b2405ada9c92096c36cac4dfc5daf1342c67c75c
SHA512 ca70eb1a7bf039cc46bf0cdf84b031ccbaa47bafaa3bad527362088ba15f01f74cd8344cdf3aeadc71d9ab7e4eda4982b8de632c7642bb7a6df1c66402091cca
SSDEEP 393216:PC3t8vhqTbk66A4JysjGIDffiN/HdBBkJTIP/ZnQN85SATq:PC3t8vcTYw4JysVLfCHdBBM0mNqT+
TLSH
T1D9F62381B3689E5ECCB3C4310C0DD1365509ED62CB93CB4BDF642A84765FAE82EC52E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by in-call services to bind with the system. Allows apps to handle aspects of phone calls while they are in progress.	android.permission.BIND_INCALL_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
amadz.apk

File Explorer

amadz.apk

.apk 14.6MB

amadz.apk

SHA256 db3f49d2547890ac20abc435d0a8568d22fce5fd6b70810b78b9225378ca091b
MD5 d5748725ef3850366347fd7ecced6633
SHA1 b2405ada9c92096c36cac4dfc5daf1342c67c75c
SHA512 ca70eb1a7bf039cc46bf0cdf84b031ccbaa47bafaa3bad527362088ba15f01f74cd8344cdf3aeadc71d9ab7e4eda4982b8de632c7642bb7a6df1c66402091cca
SSDEEP 393216:PC3t8vhqTbk66A4JysjGIDffiN/HdBBkJTIP/ZnQN85SATq:PC3t8vcTYw4JysVLfCHdBBM0mNqT+
TLSH
T1D9F62381B3689E5ECCB3C4310C0DD1365509ED62CB93CB4BDF642A84765FAE82EC52E9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8c8360a266c9f0912d67ba1ea27afbe328aa697c303354c3e5610870a9d919cb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Muhammad Usman,OU=Dev,O=Amadz,L=Sialkot,ST=Punjab,C=Pk

com.talsk.amadz

Android Permissions

amadz.apk

Permissions

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.intent.action.HEADSET_PLUG

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.USE_FULL_SCREEN_INTENT

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_PHONE_CALL

com.talsk.amadz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

amadz.apk

File Signature issue

com.talsk.amadz.ui.onboarding.OnboardingActivity

com.talsk.amadz.ui.ongoingCall.CallActivity

com.talsk.amadz.MainActivity

com.talsk.amadz.core.CallService

com.talsk.amadz.core.CallForegroundService

com.talsk.amadz.core.CallActionReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

amadz.apk

File Signature issue

com.talsk.amadz.ui.onboarding.OnboardingActivity

com.talsk.amadz.ui.ongoingCall.CallActivity

com.talsk.amadz.MainActivity

com.talsk.amadz.core.CallService

com.talsk.amadz.core.CallForegroundService

com.talsk.amadz.core.CallActionReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

amadz.apk