fabric[.]eternal[.]artist[.]apk

General

Target
fabric.eternal.artist.apk
Size 4.8MB
Sample261101-wweb1sct7s
SHA256 0f524ab618151c5286560bd4d4595cf8a128bf08472c12900b6c0af5391ead14
MD5 540a858021f4f4789ec7a8aedbc77504
SHA1 9e0ba926caf6d7eb838921dec71f4d796f4d1105
SHA512 a10b54918ef74d725c9f2ff91f8458084ff338464d1d541d0381acb6dda3edb93db85eeaa40c4ed77f601819bae3ff45b0622286a6ca0c15180113faaf08a9f7
SSDEEP 98304:xtO17HVa5e1uL8j26g5gS9tEldLAUpo/KrrmvdKCgY4:OfanL866g5gS96LAUydKl5
TLSH
T19536DF8BFB48A86BC4F753B2417A533255474C268B83D7836958323C18B76D06F9ABCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
fabric.eternal.artist.apk

File Explorer

fabric.eternal.artist.apk

.apk 4.8MB

fabric.eternal.artist.apk

SHA256 0f524ab618151c5286560bd4d4595cf8a128bf08472c12900b6c0af5391ead14
MD5 540a858021f4f4789ec7a8aedbc77504
SHA1 9e0ba926caf6d7eb838921dec71f4d796f4d1105
SHA512 a10b54918ef74d725c9f2ff91f8458084ff338464d1d541d0381acb6dda3edb93db85eeaa40c4ed77f601819bae3ff45b0622286a6ca0c15180113faaf08a9f7
SSDEEP 98304:xtO17HVa5e1uL8j26g5gS9tEldLAUpo/KrrmvdKCgY4:OfanL866g5gS96LAUydKl5
TLSH
T19536DF8BFB48A86BC4F753B2417A533255474C268B83D7836958323C18B76D06F9ABCD
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1b7d68e4e7ccbc1a6d8c487dcf1d551168c1d8ebeafb09018b1dce0881a95b8d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MrTusarRX

fabric.eternal.artist

fabric.eternal.artist.Splasher

fabric.eternal.artist.HomeSIM

android.intent.action.MAIN

fabric.eternal.artist.HomeWallp

android.intent.action.MAIN

fabric.eternal.artist.HomeSmsung

android.intent.action.MAIN

fabric.eternal.artist.PlayS

android.intent.action.MAIN

fabric.eternal.artist.paradoxzltfqjodj

fabric.eternal.artist.wildfirejeniwchsfy

fabric.eternal.artist.airportdrisifbphj

fabric.eternal.artist.prairiervyieoc

fabric.eternal.artist.goldengfmvucdtb

fabric.eternal.artist.saffroniqhrqvjyypn

fabric.eternal.artist.xylophonicpysjmunqnd

fabric.eternal.artist.speakit

fabric.eternal.artist.notebooknvlmrwn

fabric.eternal.artist.kingpinccukughyhvykuy

fabric.eternal.artist.pocketyitdlamgobhje

fabric.eternal.artist.Toastit

fabric.eternal.artist.lightercmutuyad

fabric.eternal.artist.unisonopjyqckwtgqdd

fabric.eternal.artist.Inputfabricibhiera

fabric.eternal.artist.floristzrnohhvnk

fabric.eternal.artist.mysticvzcwchrzmgv

fabric.eternal.artist.wanderersepjobvwxfqiwk

fabric.eternal.artist.xylophonertzbfpmoocb

fabric.eternal.artist.umberjqutlnmjpsj

fabric.eternal.artist.fabricibhiera

fabric.eternal.artist.kingdomhtwslecgpd

fabric.eternal.artist.archeridifkydknwvy

fabric.eternal.artist.objectzfmceidovvoime

fabric.eternal.artist.magnoliagyglmjywgwio

fabric.eternal.artist.CallBacker

fabric.eternal.artist.yesterdayhszynlqjkbe

fabric.eternal.artist.alarme

AppAlarm

fabric.eternal.artist.vortexlaoilyvdp

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

fabric.eternal.artist.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

fabric.eternal.artist.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

fabric.eternal.artist.permission.TDOS_DIAGNOSE_BROADCAST

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.alarm.permission.SET_ALARM

android.permission.WAKE_LOCK

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

fabric.eternal.artist.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

fabric.eternal.artist.apk

File Signature issue

fabric.eternal.artist.Splasher

fabric.eternal.artist.HomeSIM

fabric.eternal.artist.HomeWallp

fabric.eternal.artist.HomeSmsung

fabric.eternal.artist.PlayS

fabric.eternal.artist.paradoxzltfqjodj

fabric.eternal.artist.wildfirejeniwchsfy

fabric.eternal.artist.airportdrisifbphj

fabric.eternal.artist.prairiervyieoc

fabric.eternal.artist.goldengfmvucdtb

fabric.eternal.artist.saffroniqhrqvjyypn

fabric.eternal.artist.xylophonicpysjmunqnd

fabric.eternal.artist.speakit

fabric.eternal.artist.notebooknvlmrwn

fabric.eternal.artist.kingpinccukughyhvykuy

fabric.eternal.artist.pocketyitdlamgobhje

fabric.eternal.artist.Toastit

fabric.eternal.artist.lightercmutuyad

fabric.eternal.artist.unisonopjyqckwtgqdd

fabric.eternal.artist.Inputfabricibhiera

fabric.eternal.artist.floristzrnohhvnk

fabric.eternal.artist.mysticvzcwchrzmgv

fabric.eternal.artist.wanderersepjobvwxfqiwk

fabric.eternal.artist.xylophonertzbfpmoocb

fabric.eternal.artist.umberjqutlnmjpsj

fabric.eternal.artist.fabricibhiera

fabric.eternal.artist.kingdomhtwslecgpd

fabric.eternal.artist.archeridifkydknwvy

fabric.eternal.artist.objectzfmceidovvoime

fabric.eternal.artist.magnoliagyglmjywgwio

fabric.eternal.artist.CallBacker

fabric.eternal.artist.yesterdayhszynlqjkbe

fabric.eternal.artist.yogurtxnfsojfeaqa

fabric.eternal.artist.zodiacqtcvhbcpb

fabric.eternal.artist.ivorysbjwjqmqnviy

fabric.eternal.artist.undertoneswoqfjyjdg

fabric.eternal.artist.nomadeqkrlmpcpjezm

fabric.eternal.artist.nomadklxztxltkz

fabric.eternal.artist.photonqcogxfydcjj

fabric.eternal.artist.harborsgxkocjgeqrnod

fabric.eternal.artist.respectyuoqnacygeypwoe

fabric.eternal.artist.minserv

fabric.eternal.artist.lanternwkuaaaxnkl

fabric.eternal.artist.uniquemupeottzpegi

fabric.eternal.artist.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

fabric.eternal.artist.alarme

fabric.eternal.artist.vortexlaoilyvdp

fabric.eternal.artist.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

androidx.startup.InitializationProvider

Android Permissions

fabric.eternal.artist.apk