MoonlitV2[.]apk | Triage™

General

Target
MoonlitV2.apk
Size 18.3MB
Sample261030-byvfssvx4j
SHA256 f30e749a8fbee94bd0c10fd4f34cbf0b46468896b52bbcc077d55b5641c4e732
MD5 695819bc787e3358d6c3bc339086e91e
SHA1 afafada975e1f2d7aa0de09ca727dcd3b16c7d57
SHA512 4702628d1afa0df0c3f73171fbb24d120dbcaa538dc65eaf1c37c8c2b549aaada5b16f47c9757b5de9c4148d049bcc22f6d1f0ccc5a03218883b961cc1104121
SSDEEP 98304:zo+9CXVhAmiotyoM7SRIxjK62y24su/oEzcCQ1pdTE5vVXDguJQBg30vhjIcuvtX:zPyVubXsSzDQ1pdTS2qQWrcXuf/fZpr
TLSH
T16717AF02F3429D31D49CCB366CF68B857B316A557B439B172044F6BDFCA36C9AA942C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
MoonlitV2.apk

File Explorer

MoonlitV2.apk

.apk 18.3MB

MoonlitV2.apk

SHA256 f30e749a8fbee94bd0c10fd4f34cbf0b46468896b52bbcc077d55b5641c4e732
MD5 695819bc787e3358d6c3bc339086e91e
SHA1 afafada975e1f2d7aa0de09ca727dcd3b16c7d57
SHA512 4702628d1afa0df0c3f73171fbb24d120dbcaa538dc65eaf1c37c8c2b549aaada5b16f47c9757b5de9c4148d049bcc22f6d1f0ccc5a03218883b961cc1104121
SSDEEP 98304:zo+9CXVhAmiotyoM7SRIxjK62y24su/oEzcCQ1pdTE5vVXDguJQBg30vhjIcuvtX:zPyVubXsSzDQ1pdTS2qQWrcXuf/fZpr
TLSH
T16717AF02F3429D31D49CCB366CF68B857B316A557B439B172044F6BDFCA36C9AA942C8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a35044eeda9d020084f1f976222f9346febb87e49b1ab839d2856631942ecd36

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

dev.moonlit.quest

Android Permissions

MoonlitV2.apk

Permissions

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.providers.gsf.permission.READ_GSERVICES

MoonlitV2.apk

File Signature issue

dev.delta.quest.MainActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

dev.delta.quest.DeltaService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.provider.FirebaseInitProvider

Sharing

General

Malware Config

Signatures

File Explorer

MoonlitV2.apk

File Signature issue

dev.delta.quest.MainActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

dev.delta.quest.DeltaService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

MoonlitV2.apk