Remaster Cheat[.]apk

General

Target
Remaster Cheat.apk
Size 4.3MB
Sample261030-tpjxtaew5l
SHA256 f9da9b00abefdc9ff594b0703d4b38dc566cacfce489f359a9a3c63d3fdc8085
MD5 19778cf8ef012c03503a2a6aa1660fff
SHA1 c6e5404862cf45ce71c48f910a806f766883f02d
SHA512 ec13df6268adc17cadcfecc398fecc2d1024292be54d62d64f9c96e70dde4edc372e81eccdec1fdf09cfca37f12bc3a67b1dc160ec8fdeae8c679d84c6c45047
SSDEEP 98304:UAIP1f5fPIsSuVlFAOSa5+MDzyRRXaG5hCOuudvRoongyItS0+3n:UA8f5fP0IT8I+ezyRRXOmdvRbgyItd+n
TLSH
T1222633FF4AEA5116DE8D1CB99E54D52B9E97A8FA01202F0C0CB9F87860F5D2780117B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Remaster Cheat.apk

File Explorer

Remaster Cheat.apk

.apk 4.3MB

Remaster Cheat.apk

SHA256 f9da9b00abefdc9ff594b0703d4b38dc566cacfce489f359a9a3c63d3fdc8085
MD5 19778cf8ef012c03503a2a6aa1660fff
SHA1 c6e5404862cf45ce71c48f910a806f766883f02d
SHA512 ec13df6268adc17cadcfecc398fecc2d1024292be54d62d64f9c96e70dde4edc372e81eccdec1fdf09cfca37f12bc3a67b1dc160ec8fdeae8c679d84c6c45047
SSDEEP 98304:UAIP1f5fPIsSuVlFAOSa5+MDzyRRXaG5hCOuudvRoongyItS0+3n:UA8f5fP0IT8I+ezyRRXOmdvRbgyItd+n
TLSH
T1222633FF4AEA5116DE8D1CB99E54D52B9E97A8FA01202F0C0CB9F87860F5D2780117B7
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

eca774e26e018f6e906a76af90d9382cc210a5c058c5c86c465dcb1e8ac9e899

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=APK Signer,OU=Earth,O=Earth

ru.zglahazn6.ev58s3z1f

bn.bp.bm.bf

android.accounts.AccountAuthenticator

x.mf.SAnqdaxxxb5h93y6c

ru.zglahazn6.ev58s3z1f.mf.action.hzkasayjqoude0gau5agvg5n

x.mf.SYu1xibmpuwf9uaw4

ru.zglahazn6.ev58s3z1f.mf.action.ay2yewe85j2eih56h128namw

x.mf.SQ876nql4zaayuyqm

ru.zglahazn6.ev58s3z1f.mf.action.r30x016dpjsjx3t2zripc4fg

x.mf.SYlr21zsqfk57l2y8

ru.zglahazn6.ev58s3z1f.mf.action.v7160wvsdzsi5t7ebytcy6i5

x.mf.SLkmw5fmlxd316cms

ru.zglahazn6.ev58s3z1f.mf.action.ae0qgkcs6ptx3a2bico35oh2

bn.bp.bm.ag

android.intent.action.RESPOND_VIA_MESSAGE

bn.bp.bm.az

bn.bp.bm.aw

android.service.notification.NotificationListenerService

bn.bp.bm.bi

android.content.SyncAdapter

x.mf.SUbvmxfa21t12neu1

ru.zglahazn6.ev58s3z1f.mf.action.igr949yehwx83f5ntpytezot

x.mf.SJh3rp4d0cqzjc9u5

ru.zglahazn6.ev58s3z1f.mf.action.amujwddgq2z9mm2g15i7bm3f

x.mf.SJmmy8h8qoj9yh87h

ru.zglahazn6.ev58s3z1f.mf.action.wx4nkr0hq5hp59yetb8uwuem

bn.bp.bm.al

x.mf.SC82jp4nx046cmz5j

ru.zglahazn6.ev58s3z1f.mf.action.sd74nb5q20y6ev168epfyzrt

x.mf.SV8yo9els0sbbyja2

ru.zglahazn6.ev58s3z1f.mf.action.v4rz6q6bbc0ufxyewwi88z71

x.mf.SEd1c9ol5qz4n4a2g

ru.zglahazn6.ev58s3z1f.mf.action.mejs8pjemnrv5zod041qujll

x.mf.SOd5zwnvnftoaudzc

ru.zglahazn6.ev58s3z1f.mf.action.cfsy0hu27hcj2sqwxskgwtk7

x.mf.RVt2sohr6ep48d802

ru.zglahazn6.ev58s3z1f.mf.action.s9t3dcvv7mg6hwqfu7u9uvsw

x.mf.RHosd6xk2bdk1sxib

ru.zglahazn6.ev58s3z1f.mf.action.sg5m7a2r61iii3mzy5a0bnm2

bn.bp.bm.ap

ru.zglahazn6.ev58s3z1f.SERVICE_MONITOR

bn.bp.bm.bb

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

x.mf.RUb2cms7qg5g9wmda

ru.zglahazn6.ev58s3z1f.mf.action.aroj71fz6138ef4alkagfnnm

bn.bp.bm.ao

android.provider.Telephony.WAP_PUSH_DELIVER

x.mf.RZhi5kh13ied8t3vk

ru.zglahazn6.ev58s3z1f.mf.action.zbdhhc4yv6ka2v7wghma8e59

x.mf.RW2r18kz4x72d6ktd

ru.zglahazn6.ev58s3z1f.mf.action.kcja4q6adrpr4bp3kssphczt

x.mf.RZnu4tt8aq4oyb8wy

ru.zglahazn6.ev58s3z1f.mf.action.jjgo74sf5s0xyyed51s955of

bn.bp.bm.bl

ru.zglahazn6.ev58s3z1f.WATCHDOG_PING

x.mf.RSodidnh3z3isin7r

ru.zglahazn6.ev58s3z1f.mf.action.odndrizxn7qxo7p6rnmc9mz7

x.mf.RUkv47q48jagl50wq

ru.zglahazn6.ev58s3z1f.mf.action.hzhuwv4cl0tca8idhz5mtd8o

x.mf.RCy3r03d7o6orknmz

ru.zglahazn6.ev58s3z1f.mf.action.kwy3p7xzp1nbiyhij8krgy2n

x.mf.RAf5uil8y01c8zcjv

ru.zglahazn6.ev58s3z1f.mf.action.r77btgyzye0sojl2qjhffiu1

bn.bp.bm.h

SMS_DELIVERED SMS_SENT

x.mf.RJ2pmxoaa6gi0gf55

ru.zglahazn6.ev58s3z1f.mf.action.jeahwhp6vjx8u3nojplh2bv3

bn.bp.bm.ax

android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON android.intent.action.USER_PRESENT android.intent.action.USER_UNLOCKED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.SCREEN_ON android.net.conn.CONNECTIVITY_CHANGE android.intent.action.MY_PACKAGE_REPLACED android.provider.Telephony.SMS_DELIVER android.provider.action.DEFAULT_SMS_PACKAGE_CHANGED ru.zglahazn6.ev58s3z1f.RESTART_SERVICE

x.mf.RMwxz1n4y07kakewk

ru.zglahazn6.ev58s3z1f.mf.action.xfg0tt2l5nx4n62p35qjfi7p

Android Permissions

Remaster Cheat.apk

Permissions

android.permission.USE_EXACT_ALARM

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CALL_LOG

android.permission.SEND_SMS

android.permission.POST_NOTIFICATIONS

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_CONTACTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.CALL_PHONE

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_SMS

android.permission.GET_ACCOUNTS

android.permission.SCHEDULE_EXACT_ALARM

Sharing

General

Malware Config

Signatures

File Explorer

Remaster Cheat.apk

File Signature issue

x.mf.AQio5tddide4zzwsi

x.mf.AKbty8v4bzuzf35x2

bn.bp.bm.f

x.mf.AE6hfoggtmf46wn9b

x.mf.AB8du4xung005ka03

x.mf.AY48hqrn200gj9u9j

x.mf.AQ132i60ef1rbp6nu

bn.bp.bm.an

x.mf.ANpbu9u54w1zl7fu9

x.mf.ATy9ijb77hmg4jrmp

bn.bp.bm.bf

x.mf.SAnqdaxxxb5h93y6c

x.mf.SYu1xibmpuwf9uaw4

x.mf.SQ876nql4zaayuyqm

x.mf.SYlr21zsqfk57l2y8

x.mf.SLkmw5fmlxd316cms

bn.bp.bm.ag

bn.bp.bm.az

bn.bp.bm.aw

bn.bp.bm.bi

x.mf.SUbvmxfa21t12neu1

x.mf.SJh3rp4d0cqzjc9u5

x.mf.SJmmy8h8qoj9yh87h

bn.bp.bm.al

x.mf.SC82jp4nx046cmz5j

x.mf.SV8yo9els0sbbyja2

x.mf.SEd1c9ol5qz4n4a2g

x.mf.SOd5zwnvnftoaudzc

x.mf.RVt2sohr6ep48d802

x.mf.RHosd6xk2bdk1sxib

bn.bp.bm.ap

bn.bp.bm.bb

x.mf.RUb2cms7qg5g9wmda

bn.bp.bm.ao

x.mf.RZhi5kh13ied8t3vk

x.mf.RW2r18kz4x72d6ktd

x.mf.RZnu4tt8aq4oyb8wy

bn.bp.bm.bl

x.mf.RSodidnh3z3isin7r

x.mf.RUkv47q48jagl50wq

x.mf.RCy3r03d7o6orknmz

x.mf.RAf5uil8y01c8zcjv

bn.bp.bm.h

x.mf.RJ2pmxoaa6gi0gf55

bn.bp.bm.ax

x.mf.RMwxz1n4y07kakewk

x.mf.PSpsg4mtdsn03t6hq

x.mf.PFnofqf94w2jzokqu

x.mf.PPmr90iv8ijccltjh

bn.bp.bm.bg

x.mf.PRrhkk9fyzvzek2bv

Android Permissions

Remaster Cheat.apk