scope_hrms_1_8_0[.]apk

General

Target
scope_hrms_1_8_0.apk
Size 5.6MB
Sample261102-w1kplact9s
SHA256 1ebd11331f48d45217317b7ab630709d979c8236fcffd5c884c73826550ad62d
MD5 ae2027383dc8c91b3745ec60729a8218
SHA1 6eb73aee986c1ff1fdad7706fc516c2f071ab728
SHA512 83afcdaf6b9f5cd6204aca3c9e61a1ff7f9580b66bef47a14c1c548c921c562cc9c6903ac6753c7cccf0e212fa6838ff49c01ea6b761efa3411ecf396a1d1a47
SSDEEP 98304:Sh1+NUe4tUygs0m48gFBu6G79J1TCt4AK5EBgXWNhLkybwC82+EuwXibrnzav:Sh1BZtpC8qBl2TCtmEBgXWoO82+WSvna
TLSH
T154561286F7E89D2FCCB780720B9B523652268E66C302E74B5948B73C68737D80E917D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
scope_hrms_1_8_0.apk

File Explorer

scope_hrms_1_8_0.apk

.apk 5.6MB

scope_hrms_1_8_0.apk

SHA256 1ebd11331f48d45217317b7ab630709d979c8236fcffd5c884c73826550ad62d
MD5 ae2027383dc8c91b3745ec60729a8218
SHA1 6eb73aee986c1ff1fdad7706fc516c2f071ab728
SHA512 83afcdaf6b9f5cd6204aca3c9e61a1ff7f9580b66bef47a14c1c548c921c562cc9c6903ac6753c7cccf0e212fa6838ff49c01ea6b761efa3411ecf396a1d1a47
SSDEEP 98304:Sh1+NUe4tUygs0m48gFBu6G79J1TCt4AK5EBgXWNhLkybwC82+EuwXibrnzav:Sh1BZtpC8qBl2TCtmEBgXWoO82+WSvna
TLSH
T154561286F7E89D2FCCB780720B9B523652268E66C302E74B5948B73C68737D80E917D5
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ef4d01a92d062b07442b343fff8c59b5daa5d9b05ab22b7721d1561ff2adbd06

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

scopehrms.ascopes.com

scopehrms.ascopes.com.NoteReminderReceiver

scopehrms.ascopes.com.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

scope_hrms_1_8_0.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.USE_BIOMETRIC

android.permission.POST_NOTIFICATIONS

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SCHEDULE_EXACT_ALARM

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

scopehrms.ascopes.com.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

scope_hrms_1_8_0.apk

File Signature issue

scopehrms.ascopes.com.NotificationRouterActivity

scopehrms.ascopes.com.NotificationsActivity

scopehrms.ascopes.com.ForceUpdateActivity

scopehrms.ascopes.com.SettingsActivity

scopehrms.ascopes.com.AboutActivity

scopehrms.ascopes.com.LockSetupActivity

scopehrms.ascopes.com.AppLockActivity

scopehrms.ascopes.com.OfflineActivity

scopehrms.ascopes.com.MaintenanceActivity

scopehrms.ascopes.com.WebPageActivity

scopehrms.ascopes.com.GpsAttendanceActivity

scopehrms.ascopes.com.MenuActivity

scopehrms.ascopes.com.HomeActivity

scopehrms.ascopes.com.DeviceBlockedActivity

scopehrms.ascopes.com.PhoneLinkStatusActivity

scopehrms.ascopes.com.SimUnavailableApprovalActivity

scopehrms.ascopes.com.PhoneLinkRequestActivity

scopehrms.ascopes.com.GuidedCaptureActivity

scopehrms.ascopes.com.LoginActivity

scopehrms.ascopes.com.SplashActivity

com.google.android.gms.common.api.GoogleApiActivity

scopehrms.ascopes.com.BusLocationService

scopehrms.ascopes.com.ScopeFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.camera.core.impl.MetadataHolderService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

scopehrms.ascopes.com.NoteReminderReceiver

scopehrms.ascopes.com.BootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

scope_hrms_1_8_0.apk