saawariya[.]apk | Triage™

General

Target
saawariya.apk
Size 33.8MB
Sample261107-phyeeaeg87
SHA256 0c685119314d58a07376a189acdf9630d6eaefeda97eacbfccea951f6a1dc2d1
MD5 188702f082c56c9707dc06eedcd51bab
SHA1 562065ae795d06201eea6e90d432dc2eb3d7cdf8
SHA512 1a975523ee0ca4a5e8a5a4c86c6e64508bbd7b061fc2bdb4e51a0d977f6af07e49aea6b07c36d7e33898d7af413433b74e1186ef6d5bd6b6bf0183d02da0f207
SSDEEP 786432:p6sC8iqtG9Orr2InH2sZd0H8rweHzmDpCZyG98D3iIn7NNjHYzP:pvTrr22HZd0H+tHsK6Rn7/w
TLSH
T1317733E1FB1AA95FEE7B10F60EA5423152660DC28E8296D33428371C34779E90F697DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
saawariya.apk

File Explorer

saawariya.apk

.apk 33.8MB

saawariya.apk

SHA256 0c685119314d58a07376a189acdf9630d6eaefeda97eacbfccea951f6a1dc2d1
MD5 188702f082c56c9707dc06eedcd51bab
SHA1 562065ae795d06201eea6e90d432dc2eb3d7cdf8
SHA512 1a975523ee0ca4a5e8a5a4c86c6e64508bbd7b061fc2bdb4e51a0d977f6af07e49aea6b07c36d7e33898d7af413433b74e1186ef6d5bd6b6bf0183d02da0f207
SSDEEP 786432:p6sC8iqtG9Orr2InH2sZd0H8rweHzmDpCZyG98D3iIn7NNjHYzP:pvTrr22HZd0H+tHsK6Rn7/w
TLSH
T1317733E1FB1AA95FEE7B10F60EA5423152660DC28E8296D33428371C34779E90F697DC
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

7754b0dc2b72e1d42432f3eadb5fba3d7844adfc66c68df2438da1e37687d76a

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.sawariya.game

Android Permissions

saawariya.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.CAMERA

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

com.google.android.c2dm.permission.RECEIVE

com.sawariya.game.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

saawariya.apk

File Signature issue

com.sawariya.game.MainActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

io.flutter.plugins.urllauncher.WebViewActivity

dev.shreyaspatil.easyupipayment.ui.PaymentUiActivity

com.payu.upisdk.upiintent.PaymentResponseUpiSdkActivity

com.google.android.gms.common.api.GoogleApiActivity

com.journeyapps.barcodescanner.CaptureActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

com.zaihui.installplugin.InstallFileProvider

com.crazecoder.openfile.FileProvider

io.flutter.plugins.share.ShareFileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

saawariya.apk

File Signature issue

com.sawariya.game.MainActivity

com.pichillilorenzo.flutter_inappwebview_android.in_app_browser.InAppBrowserActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivity

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ChromeCustomTabsActivitySingleInstance

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.TrustedWebActivitySingleInstance

io.flutter.plugins.urllauncher.WebViewActivity

dev.shreyaspatil.easyupipayment.ui.PaymentUiActivity

com.payu.upisdk.upiintent.PaymentResponseUpiSdkActivity

com.google.android.gms.common.api.GoogleApiActivity

com.journeyapps.barcodescanner.CaptureActivity

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

com.pichillilorenzo.flutter_inappwebview_android.chrome_custom_tabs.ActionBroadcastReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

io.flutter.plugins.imagepicker.ImagePickerFileProvider

com.zaihui.installplugin.InstallFileProvider

com.crazecoder.openfile.FileProvider

io.flutter.plugins.share.ShareFileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

saawariya.apk