F-Droid[.]apk | Triage™

General

Target
F-Droid.apk
Size 12.0MB
Sample261102-l41j4ssvfx
SHA256 19d51fad482239f6df6a99120e34513667e9a86d136dafdc4a211a68c3327b52
MD5 c5978cfbf0b5c5333f518819a8ca4cb8
SHA1 7156e2e04d1818299c984d09b832a2f1ad7c6a86
SHA512 bf5706fb01301c3f9609ce2b03bb1977ff5f5f1152e2840e15cb095b997a04c827cbcc5ad2877f240e0a8ee9060e8e0def03be6106f4c0a88775625637e7ccae
SSDEEP 196608:RfSlHfhhU6ceRw/qSpiYGnwZ+ejQ82Sf0y9eTu6DirPUiHcXul/fZpvGDj9elv:R031/wSSqw5jQNTuMi0e1f7IEv
TLSH
T1D5C6029BB3D8092ACC3500F68D9E5661269B8DF95E438A037D48372C38B71E46F59BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
F-Droid.apk

File Explorer

F-Droid.apk

.apk 12.0MB

F-Droid.apk

SHA256 19d51fad482239f6df6a99120e34513667e9a86d136dafdc4a211a68c3327b52
MD5 c5978cfbf0b5c5333f518819a8ca4cb8
SHA1 7156e2e04d1818299c984d09b832a2f1ad7c6a86
SHA512 bf5706fb01301c3f9609ce2b03bb1977ff5f5f1152e2840e15cb095b997a04c827cbcc5ad2877f240e0a8ee9060e8e0def03be6106f4c0a88775625637e7ccae
SSDEEP 196608:RfSlHfhhU6ceRw/qSpiYGnwZ+ejQ82Sf0y9eTu6DirPUiHcXul/fZpvGDj9elv:R031/wSSqw5jQNTuMi0e1f7IEv
TLSH
T1D5C6029BB3D8092ACC3500F68D9E5661269B8DF95E438A037D48372C38B71E46F59BDC
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b2eccc71b68a68f458607e6ab619c000191aa98f0e68b6648e2c5f98b59f1896

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Ciaran Gultnieks,OU=Unknown,O=Unknown,L=Wetherby,ST=Unknown,C=UK

org.fdroid.fdroid

Android Permissions

F-Droid.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

android.permission.WAKE_LOCK

android.permission.ACCESS_LOCAL_NETWORK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ENFORCE_UPDATE_OWNERSHIP

android.permission.UPDATE_PACKAGES_WITHOUT_USER_ACTION

org.fdroid.fdroid.permission.UPDATE_REPOS

android.permission.QUERY_ALL_PACKAGES

org.fdroid.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.CAMERA

F-Droid.apk

File Signature issue

org.fdroid.fdroid.nearby.SwapWorkflowActivity

org.fdroid.ui.panic.PanicActivity

org.fdroid.ui.panic.PanicResponderActivity

org.fdroid.ui.panic.ExitActivity

org.fdroid.ui.ipfs.IpfsGatewaySettingsActivity

org.fdroid.MainActivity

org.fdroid.ui.crash.CrashActivity

com.journeyapps.barcodescanner.CaptureActivity

org.fdroid.ui.repositories.UpdateRepoActivity

org.acra.dialog.CrashReportDialog

org.fdroid.fdroid.nearby.SwapService

org.fdroid.fdroid.nearby.LocalRepoService

org.fdroid.fdroid.nearby.TreeUriScannerIntentService

org.fdroid.fdroid.nearby.SDCardScannerService

org.fdroid.install.AppInstallService

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

org.acra.sender.LegacySenderService

org.acra.sender.JobSenderService

org.fdroid.fdroid.nearby.UsbDeviceAttachedReceiver

org.fdroid.fdroid.nearby.UsbDeviceDetachedReceiver

org.fdroid.fdroid.nearby.UsbDeviceMediaMountedReceiver

org.fdroid.install.UnarchivePackageReceiver

org.fdroid.updates.SelfUpdateReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

org.fdroid.install.ApkFileProvider

androidx.core.content.FileProvider

org.jetbrains.compose.resources.AndroidContextProvider

org.acra.attachment.AcraContentProvider

Sharing

General

Malware Config

Signatures

File Explorer

F-Droid.apk

File Signature issue

org.fdroid.fdroid.nearby.SwapWorkflowActivity

org.fdroid.ui.panic.PanicActivity

org.fdroid.ui.panic.PanicResponderActivity

org.fdroid.ui.panic.ExitActivity

org.fdroid.ui.ipfs.IpfsGatewaySettingsActivity

org.fdroid.MainActivity

org.fdroid.ui.crash.CrashActivity

com.journeyapps.barcodescanner.CaptureActivity

org.fdroid.ui.repositories.UpdateRepoActivity

org.acra.dialog.CrashReportDialog

org.fdroid.fdroid.nearby.SwapService

org.fdroid.fdroid.nearby.LocalRepoService

org.fdroid.fdroid.nearby.TreeUriScannerIntentService

org.fdroid.fdroid.nearby.SDCardScannerService

org.fdroid.install.AppInstallService

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

org.acra.sender.LegacySenderService

org.acra.sender.JobSenderService

org.fdroid.fdroid.nearby.UsbDeviceAttachedReceiver

org.fdroid.fdroid.nearby.UsbDeviceDetachedReceiver

org.fdroid.fdroid.nearby.UsbDeviceMediaMountedReceiver

org.fdroid.install.UnarchivePackageReceiver

org.fdroid.updates.SelfUpdateReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

org.fdroid.install.ApkFileProvider

androidx.core.content.FileProvider

org.jetbrains.compose.resources.AndroidContextProvider

org.acra.attachment.AcraContentProvider

Android Permissions

F-Droid.apk