DuoRemotes[.]apk | Triage™

General

Target
DuoRemotes.apk
Size 5.6MB
Sample261030-peatyaed96
SHA256 6be6b7d3dfadca8944a7e69e3dfbd19cba7cf13546ea54e0df3769c6f993d7c2
MD5 d620a52937ff049663eab5436f9750e6
SHA1 62c6127db7a2ebf8b64a5ff319b58f148acf134c
SHA512 3a0950c9be6f34af1cf41807d5da173b0b9e064da128267c25e8335c67feffed97c33bc90049e0a1189b96d5872693af374e12f0f3380cada6e63ae09d1a5319
SSDEEP 98304:0eqNpOwkLSVzqP0fPIcuvtiuzfbnbb1lrTZ5LR:1CpbkFMfQcXuf/fZpR
TLSH
T15E56BF0AE5118E63C86C933A59B79395B3315C93AA87431B1405B5BCBF771F227CA3B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
DuoRemotes.apk

File Explorer

DuoRemotes.apk

.apk 5.6MB

DuoRemotes.apk

SHA256 6be6b7d3dfadca8944a7e69e3dfbd19cba7cf13546ea54e0df3769c6f993d7c2
MD5 d620a52937ff049663eab5436f9750e6
SHA1 62c6127db7a2ebf8b64a5ff319b58f148acf134c
SHA512 3a0950c9be6f34af1cf41807d5da173b0b9e064da128267c25e8335c67feffed97c33bc90049e0a1189b96d5872693af374e12f0f3380cada6e63ae09d1a5319
SSDEEP 98304:0eqNpOwkLSVzqP0fPIcuvtiuzfbnbb1lrTZ5LR:1CpbkFMfQcXuf/fZpR
TLSH
T15E56BF0AE5118E63C86C933A59B79395B3315C93AA87431B1405B5BCBF771F227CA3B8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

05ba254be6d610c3cec50a4e3281ecd6314b10c729410218c20a95de114896583851b68437c232d49821571cf5374b0dfd2f56e416bbf12ee867c7ce158140cf

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Rani Ophir,O=DuoRemotes,C=IL

com.raniophir.duoremotes

Android Permissions

DuoRemotes.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

com.raniophir.duoremotes.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

DuoRemotes.apk

File Signature issue

com.raniophir.duoremotes.MainActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

DuoRemotes.apk

File Signature issue

com.raniophir.duoremotes.MainActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

DuoRemotes.apk