crushonai-s-6[.]36[.]1[.]1131-b106bc92[.]apk

General

Target
crushonai-s-6.36.1.1131-b106bc92.apk
Size 58.7MB
Sample261102-b3nttagv8p
SHA256 8dcb2dbdc992ee3616f10a4f8ffc4a45d4f405a1b30b859a54afc8b922bbcd92
MD5 9a9b7df8a05f8c0f777770d64728d395
SHA1 1c7526659659aa7e7ca6f0964bd40259641174ab
SHA512 c13d286bc454d87b3f2a5392b4b970e6a00e7617dda9aa450d0f8549b1869f61a12ca0a0afa6e277c9864db6a2f1aa0a729ccc18f216e9597bd86f5ed4a31a4f
SSDEEP 1572864:0dsUO71iB33gioCrTupjeYcrd9tXzzlflbNbrIU4:cWo3yuTupjeYcrd9Rhfvr4
TLSH
T18DD73342EBECA81ED8B240739DAB25B441511E49C782C65B6EDCB3383573EA44FD4AF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
crushonai-s-6.36.1.1131-b106bc92.apk

File Explorer

crushonai-s-6.36.1.1131-b106bc92.apk

.apk 58.7MB

crushonai-s-6.36.1.1131-b106bc92.apk

SHA256 8dcb2dbdc992ee3616f10a4f8ffc4a45d4f405a1b30b859a54afc8b922bbcd92
MD5 9a9b7df8a05f8c0f777770d64728d395
SHA1 1c7526659659aa7e7ca6f0964bd40259641174ab
SHA512 c13d286bc454d87b3f2a5392b4b970e6a00e7617dda9aa450d0f8549b1869f61a12ca0a0afa6e277c9864db6a2f1aa0a729ccc18f216e9597bd86f5ed4a31a4f
SSDEEP 1572864:0dsUO71iB33gioCrTupjeYcrd9tXzzlflbNbrIU4:cWo3yuTupjeYcrd9Rhfvr4
TLSH
T18DD73342EBECA81ED8B240739DAB25B441511E49C782C65B6EDCB3383573EA44FD4AF4
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

621d44aec638032554d09d2900ada96d269d9b18b92c0f0f3fd298dd01f373fa

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Curshon AI,OU=Curshon AI,O=Crushon AI,L=US,ST=NY,C=001

ai.crushon.app

com.ai.app.MainActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW

com.yalantis.ucrop.UCropActivity

com.linusu.flutter_web_auth_2.CallbackActivity

android.intent.action.VIEW

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

com.linusu.flutter_web_auth_2.AuthenticationManagementActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.facebook.ads.AudienceNetworkActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

Android Permissions

crushonai-s-6.36.1.1131-b106bc92.apk

Permissions

android.permission.QUERY_ALL_PACKAGES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.gms.permission.AD_ID

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

com.android.vending.BILLING

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE

android.permission.ACCESS_ADSERVICES_TOPICS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

ai.crushon.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

crushonai-s-6.36.1.1131-b106bc92.apk

File Signature issue

com.ai.app.MainActivity

com.yalantis.ucrop.UCropActivity

com.linusu.flutter_web_auth_2.CallbackActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

com.linusu.flutter_web_auth_2.AuthenticationManagementActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

com.facebook.ads.AudienceNetworkActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.android.gms.metadata.ModuleDependencies

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

dev.fluttercommunity.plus.share.ShareFileProvider

com.facebook.internal.FacebookInitProvider

com.facebook.ads.AudienceNetworkContentProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

com.sensorsdata.analytics.android.sdk.data.SensorsDataContentProvider

Android Permissions

crushonai-s-6.36.1.1131-b106bc92.apk