Wi-឴Fi 1[.]0[.]apk

General

Target
Wi-឴Fi 1.0.apk
Size 2.5MB
Sample261102-c6x3bsdh97
SHA256 db32555782db59bec1e6023c6a1f523e881aaacd3f5326bd2a6690f44b9ef8e6
MD5 a6bc94bab7aee5744fddf8b31d927729
SHA1 ba064976058f4620c65ddacc8d76da2370869d08
SHA512 3d8bc1e9b92d2fbc230d950ffd9213cdee798808ab6115120619a453b56e93b5ee6533275738bf92dc150cfece02005c06740dcb4d87a29decda71ce2aabf968
SSDEEP 49152:UYSXjUFSRCIlHPYxjYIYAlZAipS/GLYeyPswg6qgxA4aIdxnCyQ:UYsLwIlvYZaEAipvLYrdvX7dxC
TLSH
T1B5C50243F9145A07C0B5C3B83D271E39161A2D689643B3EF34197FFA3AB66D40E8A19D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
Wi-឴Fi 1.0.apk

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
Wi-឴Fi 1.0.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Wi-឴Fi 1.0.apk

File Explorer

Wi-឴Fi 1.0.apk

.apk 2.5MB

Wi-឴Fi 1.0.apk

SHA256 db32555782db59bec1e6023c6a1f523e881aaacd3f5326bd2a6690f44b9ef8e6
MD5 a6bc94bab7aee5744fddf8b31d927729
SHA1 ba064976058f4620c65ddacc8d76da2370869d08
SHA512 3d8bc1e9b92d2fbc230d950ffd9213cdee798808ab6115120619a453b56e93b5ee6533275738bf92dc150cfece02005c06740dcb4d87a29decda71ce2aabf968
SSDEEP 49152:UYSXjUFSRCIlHPYxjYIYAlZAipS/GLYeyPswg6qgxA4aIdxnCyQ:UYsLwIlvYZaEAipvLYrdvX7dxC
TLSH
T1B5C50243F9145A07C0B5C3B83D271E39161A2D689643B3EF34197FFA3AB66D40E8A19D
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6d67ce057330aab18389420ff90c5828f45fd065

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

[email protected],OU=nlUzDkiLLS,O=TdSlVIHKlN,L=DTiSVpmJMg,ST=RsCIpVtVOC,C=JP

Chains

Oct 26, 2026

[email protected],OU=nlUzDkiLLS,O=TdSlVIHKlN,L=DTiSVpmJMg,ST=RsCIpVtVOC,C=JP

com.yrejthsu.tqetbzml

com.COlqRQaseJUtuihdhQEG.PyWNqbKzXWOJpDh.sGoLqzgOLBofiGPWs

com.wVPFXYXqRyOR.mqdwMHOvinmRrqgsXB.ygABpDtDUYlzPPTOy

com.TgsWjBPuHhAXmgDq.ilHVRlynlQmWzTD.oNuKqEdayTihj

com.fnIroJhBhUmx.DfDlMgyHTrDyNGsYXr.risTzymBjfZFzt

com.eiNkcCYEZairRY.WjCDUNCbypWIfuRIl.NloAqOPLZuGVQxQhbpnW

com.LUqiNraBVv.AYetEQlyKDdCbW.TEYcXQJBBLqk

com.bBMyNpGJrqjgsmnJEAW.pPAxCVEDdaheIhfWEW.ObUlMuDRMcHrWR

com.yrejthsu.tqetbzml.LiInHXuain

android.intent.action.MAIN

com.yrejthsu.tqetbzml.Welcome

com.yrejthsu.tqetbzml.AppProfileActivity

com.yrejthsu.tqetbzml.PurposeConformationActivity

com.yrejthsu.tqetbzml.Installer

com.yrejthsu.tqetbzml.Uninstaller

com.yrejthsu.tqetbzml.WmEClWDlBq

android.intent.action.MAIN

com.yrejthsu.tqetbzml.VuflIhVyYE

android.intent.action.MAIN

com.yrejthsu.tqetbzml.eGKLtnFvNX

com.yrejthsu.tqetbzml.protocol.pcIrfasToA

com.yrejthsu.tqetbzml.core.scnXKsmiUI

com.yrejthsu.tqetbzml.core.XPhxQYBEBY

com.yrejthsu.tqetbzml.sBvmKLTNKp

com.yrejthsu.tqetbzml.JeWNzaDHHL

com.yrejthsu.tqetbzml.hDlpbaXBgL

com.yrejthsu.tqetbzml.uwhQIVuOrj

com.yrejthsu.tqetbzml.ivmcyMylXL

com.yrejthsu.tqetbzml.UvofFhzSsz

org.appspot.apprtc.GnhJSkedCM

com.yrejthsu.tqetbzml.XiXumrldsq

com.google.android.gms.common.api.GoogleApiActivity

com.LeAZvpxBXT.roJAlmPmhusxZUD.immrtjEDQkpvbGddN

com.JHMzjbbyICMtybxtv.MtZZdYSbrMeuMLdm.rHokkZPgWCjtXfTjuT

com.XatagDquecJiT.lATbFLtoXcQZXNbS.gldGGcqHffjjRc

com.yrejthsu.tqetbzml.core.usWpSiNIkA

com.yrejthsu.tqetbzml.core.usWpSiNIkA.TIMER_ALARM

com.yrejthsu.tqetbzml.core.jgTANliVLl

com.yrejthsu.tqetbzml.core.jgTANliVLl.START com.yrejthsu.tqetbzml.core.jgTANliVLl.STOP

com.yrejthsu.tqetbzml.core.WAigVIcZLE

android.intent.action.NEW_OUTGOING_CALL android.provider.Telephony.SMS_RECEIVED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED android.intent.action.ACTION_SHUTDOWN android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.PHONE_STATE android.intent.action.SIM_STATE_CHANGED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_ADDED android.intent.action.AIRPLANE_MODE

com.yrejthsu.tqetbzml.UBFjyUtfcB

com.google.android.c2dm.intent.REGISTRATION com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.RETRY

com.yrejthsu.tqetbzml.advance.NotificationReceiver

com.yrejthsu.tqetbzml.advance.ACTION_REPLY

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE com.google.android.c2dm.intent.REGISTRATION com.google.android.c2dm.intent.RECEIVE

com.yrejthsu.tqetbzml.core.osSkHimtwl

android.app.action.DEVICE_ADMIN_ENABLED

Android Permissions

Wi-឴Fi 1.0.apk

Permissions

com.yrejthsu.tqetbzml.permission.C2D_MESSAGE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_LOGS

android.permission.READ_CALL_LOG

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SDCARD_WRITE

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CALENDAR

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.BIND_DEVICE_ADMIN

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_SUPERUSER

android.permission.SYSTEM_ALERT_WINDOW

android.permission.PACKAGE_USAGE_STATS

android.permission.USES_POLICY_WIPE_DATA

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

Wi-឴Fi 1.0.apk

File Signature issue

com.COlqRQaseJUtuihdhQEG.PyWNqbKzXWOJpDh.sGoLqzgOLBofiGPWs

com.wVPFXYXqRyOR.mqdwMHOvinmRrqgsXB.ygABpDtDUYlzPPTOy

com.TgsWjBPuHhAXmgDq.ilHVRlynlQmWzTD.oNuKqEdayTihj

com.fnIroJhBhUmx.DfDlMgyHTrDyNGsYXr.risTzymBjfZFzt

com.eiNkcCYEZairRY.WjCDUNCbypWIfuRIl.NloAqOPLZuGVQxQhbpnW

com.LUqiNraBVv.AYetEQlyKDdCbW.TEYcXQJBBLqk

com.bBMyNpGJrqjgsmnJEAW.pPAxCVEDdaheIhfWEW.ObUlMuDRMcHrWR

com.yrejthsu.tqetbzml.LiInHXuain

com.yrejthsu.tqetbzml.Welcome

com.yrejthsu.tqetbzml.AppProfileActivity

com.yrejthsu.tqetbzml.PurposeConformationActivity

com.yrejthsu.tqetbzml.Installer

com.yrejthsu.tqetbzml.Uninstaller

com.yrejthsu.tqetbzml.WmEClWDlBq

com.yrejthsu.tqetbzml.VuflIhVyYE

com.yrejthsu.tqetbzml.eGKLtnFvNX

com.yrejthsu.tqetbzml.protocol.pcIrfasToA

com.yrejthsu.tqetbzml.core.scnXKsmiUI

com.yrejthsu.tqetbzml.core.XPhxQYBEBY

com.yrejthsu.tqetbzml.sBvmKLTNKp

com.yrejthsu.tqetbzml.JeWNzaDHHL

com.yrejthsu.tqetbzml.hDlpbaXBgL

com.yrejthsu.tqetbzml.uwhQIVuOrj

com.yrejthsu.tqetbzml.ivmcyMylXL

com.yrejthsu.tqetbzml.UvofFhzSsz

org.appspot.apprtc.GnhJSkedCM

com.yrejthsu.tqetbzml.XiXumrldsq

com.google.android.gms.common.api.GoogleApiActivity

com.FUXKskJDUzMTWp.NSCVjVEvgLc.ebSXUTkggCZ

com.pJtWEdMdJC.vzdxgtAHIBvCyDDvPs.mKigBJDFdFOlUu

com.yrejthsu.tqetbzml.core.qnZMJzPjoB

com.yrejthsu.tqetbzml.core.QQXewCSqZh

com.yrejthsu.tqetbzml.securechannel.gwvKqkSlrT

com.yrejthsu.tqetbzml.advance.PairingService

com.google.firebase.iid.FirebaseInstanceIdService

com.yrejthsu.tqetbzml.xnhzKrQoIl

com.yrejthsu.tqetbzml.KOlekmxnWv

com.yrejthsu.tqetbzml.core.listener.KVJFDsuKJc

com.yrejthsu.tqetbzml.core.listener.BedNVyLBPP

com.yrejthsu.tqetbzml.util.FfjQhaaXQB

com.yrejthsu.tqetbzml.core.listener.RfVlMHyOfj

com.google.firebase.messaging.FirebaseMessagingService

com.LeAZvpxBXT.roJAlmPmhusxZUD.immrtjEDQkpvbGddN

com.JHMzjbbyICMtybxtv.MtZZdYSbrMeuMLdm.rHokkZPgWCjtXfTjuT

com.XatagDquecJiT.lATbFLtoXcQZXNbS.gldGGcqHffjjRc

com.yrejthsu.tqetbzml.core.usWpSiNIkA

com.yrejthsu.tqetbzml.core.jgTANliVLl

com.yrejthsu.tqetbzml.core.WAigVIcZLE

com.yrejthsu.tqetbzml.UBFjyUtfcB

com.yrejthsu.tqetbzml.advance.NotificationReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.yrejthsu.tqetbzml.core.osSkHimtwl

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

Wi-឴Fi 1.0.apk