testt[.]apk | Triage™

General

Target
testt.apk
Size 6.5MB
Sample261030-xtx7saew91
SHA256 380c741a509b34120e38b108535f0391702435551e2a37b503680c12d7c354a3
MD5 c442f87a0185f5f1d6f1cbd3a2368ebc
SHA1 fa9ac33371762803f22010389c13dc9309eb1fc1
SHA512 c34479d7f4b54fd9dc6679a08686a8ea8fd135f299510d195c26a08d40b5b5ab84fe63486a2b75fd672c4c19df2f5f42d257006bdb43c2046e7bcb8ebb205ef9
SSDEEP 196608:iIfVsCs4N/jub08JchYQNmt5GW7X5ivCORzRu:hfrVyg8im37X5O+
TLSH
T1D6662376C61ED717E547E231F124FEA7480841A91702BB8F362A904D8DD79C0EF8ABE5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
testt.apk

File Explorer

testt.apk

.apk 6.5MB

testt.apk

SHA256 380c741a509b34120e38b108535f0391702435551e2a37b503680c12d7c354a3
MD5 c442f87a0185f5f1d6f1cbd3a2368ebc
SHA1 fa9ac33371762803f22010389c13dc9309eb1fc1
SHA512 c34479d7f4b54fd9dc6679a08686a8ea8fd135f299510d195c26a08d40b5b5ab84fe63486a2b75fd672c4c19df2f5f42d257006bdb43c2046e7bcb8ebb205ef9
SSDEEP 196608:iIfVsCs4N/jub08JchYQNmt5GW7X5ivCORzRu:hfrVyg8im37X5O+
TLSH
T1D6662376C61ED717E547E231F124FEA7480841A91702BB8F362A904D8DD79C0EF8ABE5
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2fe8ee881c70b2fdfb1311f0f018b6088e1e76ff0faccd588c50b91c5bca1d39

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Crypter

travel.volcano.quality

travel.volcano.quality.Splasher

travel.volcano.quality.HomeSIM

android.intent.action.MAIN

travel.volcano.quality.HomeWallp

android.intent.action.MAIN

travel.volcano.quality.HomeSmsung

android.intent.action.MAIN

travel.volcano.quality.PlayS

android.intent.action.MAIN

travel.volcano.quality.oyjyncrmuncwwfyeoj

travel.volcano.quality.pwjqegxmytdpoiip

travel.volcano.quality.vwhmvudkvcxtqkj

travel.volcano.quality.yclmjxippdwujxnwuur

travel.volcano.quality.mkwaeasasphgttcavwz

travel.volcano.quality.uzoyxnctmunpwgmrhz

travel.volcano.quality.mvdkykpxmtvfcd

travel.volcano.quality.speakit

travel.volcano.quality.ielaxomjsdpo

travel.volcano.quality.tosvzjgugkza

travel.volcano.quality.womkedkhjyai

travel.volcano.quality.Toastit

travel.volcano.quality.mraxfmuergdyatrtvlg

travel.volcano.quality.RequestAdm

travel.volcano.quality.Inputmtizinlcosufsdz

travel.volcano.quality.gbzzwqbbtpkvbemwwrx

travel.volcano.quality.rkpcmyhpegsjnheyvw

travel.volcano.quality.jmgcdeqcorqs

travel.volcano.quality.eckbvhllrvizrzfu

travel.volcano.quality.itetjewomh

travel.volcano.quality.mtizinlcosufsdz

travel.volcano.quality.hbftoccqexaoioj

travel.volcano.quality.tofront

travel.volcano.quality.vwjdotyxok

travel.volcano.quality.qezxnrwayhmsjosavug

travel.volcano.quality.CallBacker

travel.volcano.quality.iscjjilljem

travel.volcano.quality.alarme

AppAlarm

travel.volcano.quality.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

travel.volcano.quality.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

testt.apk

Permissions

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.CALL_PHONE

travel.volcano.quality.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

testt.apk

File Signature issue

travel.volcano.quality.Splasher

travel.volcano.quality.HomeSIM

travel.volcano.quality.HomeWallp

travel.volcano.quality.HomeSmsung

travel.volcano.quality.PlayS

travel.volcano.quality.oyjyncrmuncwwfyeoj

travel.volcano.quality.pwjqegxmytdpoiip

travel.volcano.quality.vwhmvudkvcxtqkj

travel.volcano.quality.yclmjxippdwujxnwuur

travel.volcano.quality.mkwaeasasphgttcavwz

travel.volcano.quality.uzoyxnctmunpwgmrhz

travel.volcano.quality.mvdkykpxmtvfcd

travel.volcano.quality.speakit

travel.volcano.quality.ielaxomjsdpo

travel.volcano.quality.tosvzjgugkza

travel.volcano.quality.womkedkhjyai

travel.volcano.quality.Toastit

travel.volcano.quality.mraxfmuergdyatrtvlg

travel.volcano.quality.RequestAdm

travel.volcano.quality.Inputmtizinlcosufsdz

travel.volcano.quality.gbzzwqbbtpkvbemwwrx

travel.volcano.quality.rkpcmyhpegsjnheyvw

travel.volcano.quality.jmgcdeqcorqs

travel.volcano.quality.eckbvhllrvizrzfu

travel.volcano.quality.itetjewomh

travel.volcano.quality.mtizinlcosufsdz

travel.volcano.quality.hbftoccqexaoioj

travel.volcano.quality.tofront

travel.volcano.quality.vwjdotyxok

travel.volcano.quality.qezxnrwayhmsjosavug

travel.volcano.quality.CallBacker

travel.volcano.quality.iscjjilljem

travel.volcano.quality.ssxpoafsabs

travel.volcano.quality.vknhtnkts

travel.volcano.quality.ixcfrhdpogzpwsrtw

travel.volcano.quality.nbkwqwukscmrwxy

travel.volcano.quality.yjilinebftyioywv

travel.volcano.quality.nhqvtuatqfxmqd

travel.volcano.quality.nqldyzafwugrll

travel.volcano.quality.cxujhhfvltuqujb

travel.volcano.quality.dldkymokvrzitp

travel.volcano.quality.minserv

.hprvqxbet

travel.volcano.quality.DownloadForegroundService

travel.volcano.quality.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

travel.volcano.quality.alarme

travel.volcano.quality.BootReceiver

travel.volcano.quality.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

testt.apk