flow-foss-arm64-v8a[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
flow-foss-arm64-v8a.apk
Size 19.8MB
Sample261030-3ff91ag16n
SHA256 fedcfdeefce84ac43b776ca0ad7bae8e89aa717f187dc23dfbffefa0ceb3a53d
MD5 cc51cb3f849c919fb7203eb6f7d8d491
SHA1 ddc71de58a8005f16a9603baa9df29436c71a5ed
SHA512 6fe24f78d547472877a0acdeda2a471fe05388a897907b16624f9fa6422f9e8d5036dac553730ec9ca2912bc0901e9af128ffd1382d18ddc8bbbec23744f68a6
SSDEEP 393216:IXwpBKYk3yACpVcoR5QzOgCuErpZuCJiQjD9s0:dKyhpVcWQDCuErv9J20
TLSH
T14927015EBA8DA42ECCB670BDCC8A05B6702A2D751F02D61738153B1D79736F88B293D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
flow-foss-arm64-v8a.apk

File Explorer

flow-foss-arm64-v8a.apk

.apk 19.8MB

flow-foss-arm64-v8a.apk

SHA256 fedcfdeefce84ac43b776ca0ad7bae8e89aa717f187dc23dfbffefa0ceb3a53d
MD5 cc51cb3f849c919fb7203eb6f7d8d491
SHA1 ddc71de58a8005f16a9603baa9df29436c71a5ed
SHA512 6fe24f78d547472877a0acdeda2a471fe05388a897907b16624f9fa6422f9e8d5036dac553730ec9ca2912bc0901e9af128ffd1382d18ddc8bbbec23744f68a6
SSDEEP 393216:IXwpBKYk3yACpVcoR5QzOgCuErpZuCJiQjD9s0:dKyhpVcWQDCuErv9J20
TLSH
T14927015EBA8DA42ECCB670BDCC8A05B6702A2D751F02D61738153B1D79736F88B293D4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

52b4d2dec5c8780b50df38fe213ba6c0b5d8f06fd689dc7cc79042153cb6190c

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Flow,OU=AEDev,O=AEDev,L=Unknown,ST=Unknown,C=US

io.github.aedev.flow

androidx.media3.session.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

io.github.aedev.flow.data.video.downloader.work.DownloadActionReceiver

io.github.aedev.flow.notification.NotificationActionReceiver

io.github.aedev.flow.action.CANCEL_DOWNLOAD io.github.aedev.flow.action.RETRY_DOWNLOAD io.github.aedev.flow.action.PAUSE_DOWNLOAD io.github.aedev.flow.action.RESUME_DOWNLOAD io.github.aedev.flow.action.DISMISS_NOTIFICATION

io.github.aedev.flow.platform.LauncherAliasRepairReceiver

android.intent.action.MY_PACKAGE_REPLACED