7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.zip
- SHA256 a3510f90dc2668ac4d1491f541103862d924a0775caee9f96147265fa99d370a
Password
infected
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.apk
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
8 signatures
150 seconds
General
- Target 7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.zip
- Size 40.3MB
- Sample261102-3bkfvsfz5k
- SHA256 a3510f90dc2668ac4d1491f541103862d924a0775caee9f96147265fa99d370a
- MD5 b4475fa0af706a616981ae78a25c9e06
- SHA1 bf14b5a475ef5c163537315eb9422a08f787f4b6
- SHA512 ee54f5e38f53dbd482a29263ee000d65092500406661d8f48047b39859c05a2f11f0d2531bfd289804d3d9391ad16e9bfbcda205a46495088bd3907f4885cfc7
- SSDEEP 786432:0p89aP8KwW00X4662ktV5fq+PoiwDNIqP+wC3l1gvudHHVxaTy9/37j3A1XVBZa:0m92wWz4669tVFqwoicnP/C3wvAVx8yH
- TLSH T1909733B15F0A04D784DE378F3179F7D6846D5A325A24223C9BCBFA0261AF3213E8D965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Declares services with permission to bind to the system 4 IoCs
description ioc Required by telecom connection services to bind with the system. Allows apps to manage phone call aspects such as call setup and notifications. android.permission.BIND_TELECOM_CONNECTION_SERVICE Required by remote views services to bind with the system. Allows apps to share and display views across different processes. android.permission.BIND_REMOTEVIEWS Required by remote views services to bind with the system. Allows apps to share and display views across different processes. android.permission.BIND_REMOTEVIEWS Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions. android.permission.BIND_CHOOSER_TARGET_SERVICE - Requests dangerous framework permissions 23 IoCs
description ioc Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an application to access any geographic locations persisted in the user's shared collection. android.permission.ACCESS_MEDIA_LOCATION Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows read access to the device's phone number(s). android.permission.READ_PHONE_NUMBERS Allows an application to send SMS messages. android.permission.SEND_SMS Required to be able to connect to paired Bluetooth devices. android.permission.BLUETOOTH_CONNECT Allows an application to record audio. android.permission.RECORD_AUDIO Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to read image files from external storage. android.permission.READ_MEDIA_IMAGES Allows an application to read video files from external storage. android.permission.READ_MEDIA_VIDEO Allows an application to read audio files from external storage. android.permission.READ_MEDIA_AUDIO Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Required to be able to access the camera device. android.permission.CAMERA Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.apk
File Explorer
-
7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.zip.zip 40.3MB
-
7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.apk.apk 47.8MB
7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff.apk
- SHA256 7d44e0009d251ae4983f5bf29f7d8aa9af668df88dba05a17a7a314f6780ceff
- MD5 78336a1c63ba008af99fd984ef8f2775
- SHA1 d0953b36a6e6e09fbd7d93c07921ab2eecaf23b7
- SHA512 967be2c70382171bab52699252b3d184a0934162547a22f3d4c66f230a70920b8d0bca3829fdc1c22804fcb9c04034764feaa126f0ac0133e45ed42bc73b593f
- SSDEEP 786432:9gbPI+gXH1HYKCSxzQTDvrjQlCNwibgQIaYLc9wlMZd7Km7HLegrEvMKdN3kA32Z:GbVgl/YvElYwWItg9gMZ8m7iWEriIfdC
- TLSH T142B712E7F3315C3DD9770532966D6071EA284F24D622A30F2409B63EB9B33D68A857E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
infected
File Signature issue
Digest
ad2e7668d19860c01814af81e435f8d49592f7269a98a8d7b79a6a09a77dc651
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Developer,OU=Telegram,O=Telegram,L=Unknown,ST=Unknown,C=Unknown
Subject
CN=Android Developer,OU=Telegram,O=Telegram,L=Unknown,ST=Unknown,C=Unknown
Serial Number
55:b3:23:d1
Issuer
CN=Android Developer,OU=Telegram,O=Telegram,L=Unknown,ST=Unknown,C=Unknown
Timespan
Dec 2, 2019 - Apr 19, 2047
org.telegram.messenger
org.telegram.ui.LaunchActivity
com.google.android.c2dm.permission.RECEIVE
org.telegram.messenger.permission.MAPS_RECEIVE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_MEDIA_LOCATION
android.permission.CALL_PHONE
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.FOREGROUND_SERVICE_REMOTE_MESSAGING
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.FOREGROUND_SERVICE_CAMERA
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.FOREGROUND_SERVICE_MICROPHONE
android.permission.FOREGROUND_SERVICE_PHONE_CALL
android.permission.READ_CALL_LOG
android.permission.USE_FULL_SCREEN_INTENT
android.permission.READ_PHONE_STATE
android.permission.READ_PHONE_NUMBERS
android.permission.SEND_SMS
android.permission.READ_CLIPBOARD
android.permission.BLUETOOTH_CONNECT
android.permission.INTERNET
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_AUDIO
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_PROFILE
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.INSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.MANAGE_OWN_CALLS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.POST_NOTIFICATIONS
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.android.vending.BILLING
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_BACKGROUND_LOCATION
org.telegram.messenger.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
org.telegram.messenger.GoogleVoiceClientActivity
com.google.android.voicesearch.SEND_MESSAGE_TO_CONTACTS
org.telegram.ui.LaunchActivity
android.intent.action.MAIN
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
org.telegram.messenger.CREATE_STICKER_PACK
org.telegram.ui.BubbleActivity
org.telegram.ui.ShareActivity
android.intent.action.VIEW
org.telegram.ui.ExternalActionActivity
org.telegram.passport.AUTHORIZE
org.telegram.ui.ChatsWidgetConfigActivity
android.appwidget.action.APPWIDGET_CONFIGURE
org.telegram.ui.ContactsWidgetConfigActivity
android.appwidget.action.APPWIDGET_CONFIGURE
org.telegram.messenger.OpenChatReceiver
org.telegram.messenger.OpenAttachedMenuBotReceiver
org.telegram.ui.PopupNotificationActivity
org.telegram.ui.VoIPPermissionActivity
org.telegram.ui.VoIPFeedbackActivity
androidx.credentials.playservices.controllers.identityauth.HiddenActivity
androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity
com.android.billingclient.api.ProxyBillingActivity
com.android.billingclient.api.ProxyBillingActivityV2
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.play.core.common.PlayCoreDialogWrapperActivity
org.telegram.messenger.GcmPushListenerService
com.google.firebase.MESSAGING_EVENT
com.google.android.gms.measurement.AppMeasurementService
org.telegram.messenger.GoogleVoiceClientService
org.telegram.messenger.SMSJobsNotification
org.telegram.messenger.AuthenticatorService
android.accounts.AccountAuthenticator
org.telegram.messenger.ContactsSyncAdapterService
android.content.SyncAdapter
org.telegram.messenger.KeepAliveJob
org.telegram.messenger.BringAppForegroundService
org.telegram.messenger.NotificationsService
org.telegram.messenger.NotificationRepeat
org.telegram.messenger.VideoEncodingService
org.telegram.ui.Stories.recorder.StoryUploadingService
org.telegram.messenger.ImportingService
org.telegram.messenger.LocationSharingService
org.telegram.messenger.voip.VoIPService
org.telegram.messenger.MusicPlayerService
org.telegram.messenger.MusicBrowserService
android.media.browse.MediaBrowserService
org.telegram.messenger.voip.TelegramConnectionService
android.telecom.ConnectionService
org.telegram.messenger.ChatsWidgetService
org.telegram.messenger.ContactsWidgetService
org.telegram.messenger.FilesMigrationService
androidx.credentials.playservices.CredentialProviderMetadataHolder
com.google.android.gms.cast.framework.ReconnectionService
com.google.mlkit.common.internal.MlKitComponentDiscoveryService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.MESSAGING_EVENT
com.google.firebase.components.ComponentDiscoveryService
androidx.sharetarget.ChooserTargetServiceCompat
android.service.chooser.ChooserTargetService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.android.gms.measurement.UPLOAD
org.telegram.messenger.SMSResultService
org.telegram.messenger.AutoMessageHeardReceiver
org.telegram.messenger.ACTION_MESSAGE_HEARD
org.telegram.messenger.CopyCodeReceiver
org.telegram.messenger.ACTION_COPY_CODE
org.telegram.messenger.NotificationsDisabledReceiver
android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED
org.telegram.messenger.AutoMessageReplyReceiver
org.telegram.messenger.ACTION_MESSAGE_REPLY
org.telegram.messenger.SmsReceiver
com.google.android.gms.auth.api.phone.SMS_RETRIEVED
org.telegram.messenger.CallReceiver
android.intent.action.PHONE_STATE
org.telegram.messenger.MusicPlayerReceiver
org.telegram.android.musicplayer.close
org.telegram.android.musicplayer.pause
org.telegram.android.musicplayer.next
org.telegram.android.musicplayer.play
org.telegram.android.musicplayer.previous
android.intent.action.MEDIA_BUTTON
android.media.AUDIO_BECOMING_NOISY
org.telegram.messenger.voip.VoIPMediaButtonReceiver
android.intent.action.MEDIA_BUTTON
org.telegram.messenger.AppStartReceiver
org.telegram.start
android.intent.action.BOOT_COMPLETED
org.telegram.messenger.RefererReceiver
com.android.vending.INSTALL_REFERRER
org.telegram.messenger.WearReplyReceiver
org.telegram.messenger.StopLiveLocationReceiver
org.telegram.messenger.PopupReplyReceiver
org.telegram.messenger.NotificationCallbackReceiver
org.telegram.messenger.ShareBroadcastReceiver
org.telegram.messenger.CustomTabsCopyReceiver
org.telegram.messenger.NotificationDismissReceiver
org.telegram.messenger.voip.VoIPActionsReceiver
org.telegram.messenger.ShortcutResultReceiver
org.telegram.messenger.ChatsWidgetProvider
android.appwidget.action.APPWIDGET_UPDATE
org.telegram.messenger.ContactsWidgetProvider
android.appwidget.action.APPWIDGET_UPDATE
com.google.android.gms.cast.framework.media.MediaIntentReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
androidx.profileinstaller.ProfileInstallReceiver
androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION