base[.]apk | Triage™

Resubmissions

07/11/2026, 12:37

261107-ptyvbabz6y8

07/11/2026, 12:35

261107-psg56sbz5z8

Sharing

Copy URL Twitter E-mail

General

Target
base.apk
Size 150.5MB
Sample261107-ptyvbabz6y
SHA256 46932f5219c615e880432b3ee2eaa0b397c4a8deb20cb039f097bc4e21f5ce50
MD5 0325aaf914ce94b73839e04038ddd762
SHA1 67574eb0dd742ef1b5e87d8c86a7ad0f2e0ed81e
SHA512 873e776c850d789ce66f7a31781ba78d75f6e7fe5b184c992bffb52070ca0d862168268ccaf064139871dc76ac45e98624c367a81111bb98c044b9bf6e891330
SSDEEP 1572864:HIXp2Bv6cmNua8+vYoM+BVGD3zfDOU/Z7v3Oj:HkqvpmNuIvYoMvbDThfO
TLSH
T175783386F74AF92EF4F79232483542A2C02B2C658B43D2D36925733D64B3AE44F56BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
base.apk

File Explorer

base.apk

.apk 150.5MB

base.apk

SHA256 46932f5219c615e880432b3ee2eaa0b397c4a8deb20cb039f097bc4e21f5ce50
MD5 0325aaf914ce94b73839e04038ddd762
SHA1 67574eb0dd742ef1b5e87d8c86a7ad0f2e0ed81e
SHA512 873e776c850d789ce66f7a31781ba78d75f6e7fe5b184c992bffb52070ca0d862168268ccaf064139871dc76ac45e98624c367a81111bb98c044b9bf6e891330
SSDEEP 1572864:HIXp2Bv6cmNua8+vYoM+BVGD3zfDOU/Z7v3Oj:HkqvpmNuIvYoMvbDThfO
TLSH
T175783386F74AF92EF4F79232483542A2C02B2C658B43D2D36925733D64B3AE44F56BD4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

0c8d3387f358b914dfcb7e6fe0fae88cd78ddb7956c8495ba35cfdbc91bb0eb1

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android Debug,O=Android,C=US

com.tortula.subprior2702

com.tortula.subprior2702.permission.PROFILE_BRIDGE com.google.android.c2dm.permission.RECEIVE com.tortula.subprior2702.permission.C2D_MESSAGE android.permission.PACKAGE_USAGE_STATS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SYSTEM_ALERT_WINDOW android.permission.MANAGE_EXTERNAL_STORAGE android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.READ_SMS android.permission.RECEIVE_SMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_NOTIFICATION_POLICY android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.FOREGROUND_SERVICE_CAMERA android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED android.permission.RECEIVE_BOOT_COMPLETED android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH_CONNECT android.permission.POST_NOTIFICATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM android.permission.WAKE_LOCK android.permission.REORDER_TASKS android.permission.QUERY_ALL_PACKAGES android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.REQUEST_DELETE_PACKAGES android.permission.REQUEST_INSTALL_PACKAGES android.permission.GET_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.WRITE_SYNC_SETTINGS android.permission.WRITE_CONTACTS android.permission.READ_PHONE_NUMBERS android.permission.READ_PHONE_STATE android.permission.READ_CONTACTS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.CALL_PHONE android.permission.WRITE_SECURE_SETTINGS android.permission.INTERACT_ACROSS_USERS android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT com.tortula.subprior2702.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.tortula.subprior2702.ui.EntryWindowActivity

com.tortula.subprior2702.ui.ToFrontActivity

com.tortula.subprior2702.vpn.VpnPermissionActivity

com.tortula.subprior2702.realtime.c239c299bddab2b4e61fb

com.tortula.subprior2702.camera.c98f6192a68afb3fc98f3

com.tortula.subprior2702.ui.ClipboardReadActivity

com.tortula.subprior2702.ui.ClipboardWriteActivity

com.tortula.subprior2702.ui.c6261e1c64aba7746579e

com.tortula.subprior2702.keep_alive.c1c19daf411d0f1c41537

com.tortula.subprior2702.accessibility.cfad8b8fc87ee11ff4e23

com.tortula.subprior2702.accessibility.c9060b7760679066d2710

com.tortula.subprior2702.accessibility.c0ecfb48432b2748cb4ad

com.tortula.subprior2702.accessibility.ce0722b74ccd0b50b662e

com.tortula.subprior2702.clone.BACK_LOAD com.tortula.subprior2702.clone.BACK_SYNC com.tortula.subprior2702.clone.BACK_ALERT

com.tortula.subprior2702.clone.CloneLaunchActivity

com.tortula.subprior2702.clone.LAUNCH

com.tortula.subprior2702.clone.CloneSetupActivity

com.tortula.subprior2702.clone.SETUP com.tortula.subprior2702.clone.LOAD com.tortula.subprior2702.clone.CLONE com.tortula.subprior2702.clone.UNINSTALL com.tortula.subprior2702.clone.REFRESH com.tortula.subprior2702.clone.DESTROY

com.tortula.subprior2702.clone.cb67fcce5e3cc88853373

com.tortula.subprior2702.clone.CloneOperationActivity

com.tortula.subprior2702.clone.INTERNAL_SETUP com.tortula.subprior2702.clone.INTERNAL_LOAD com.tortula.subprior2702.clone.INTERNAL_CLONE com.tortula.subprior2702.clone.INTERNAL_UNINSTALL com.tortula.subprior2702.clone.INTERNAL_REFRESH com.tortula.subprior2702.clone.INTERNAL_DESTROY com.tortula.subprior2702.clone.INSTALL_RESULT com.tortula.subprior2702.clone.UNINSTALL_RESULT

com.tortula.subprior2702.accessibility.c3ebfe1e22c9adf86c5ad

com.tortula.subprior2702.accessibility.c8c44f945cc889158f97b

com.tortula.subprior2702.inject.InjectWebViewActivity

com.tortula.subprior2702.lockscreen.Fakezfmdwpcxpueyuzwkcxmjplnetwhl

com.tortula.subprior2702.broadcast.cb6ebae83869e63954d7b

com.tortula.subprior2702.broadcast.c21802c6fc0b7d74575e7

com.google.android.gms.common.api.GoogleApiActivity

com.tortula.subprior2702.vpn.RuleVpnService

android.net.VpnService

com.tortula.subprior2702.push.c4ddedce4614717fae2a7

com.google.firebase.MESSAGING_EVENT

com.tortula.subprior2702.services.axfkpsahchvyfahjygeiibService

com.tortula.subprior2702.services.CoreWorkService

com.tortula.subprior2702.services.c8a58879451ecac0442a2

com.tortula.subprior2702.services.c06fb5e92b4be53031631

com.tortula.subprior2702.services.ca3e0b540417c27090b74

com.tortula.subprior2702.camera.CameraStreamService

com.tortula.subprior2702.services.HelloAudioService

com.tortula.subprior2702.services.ServiceKeepAliveJobService

com.tortula.subprior2702.services.c0cfef9786c28444f1261

android.accounts.AccountAuthenticator

com.tortula.subprior2702.services.c69c4389faa39277d9a39

android.content.SyncAdapter

com.tortula.subprior2702.clone.CloneProfileService

com.tortula.subprior2702.keep_alive.cdbdcef8aa23d1440fe42

android.service.quicksettings.action.QS_TILE

com.tortula.subprior2702.keep_alive.c9108025d0662ea74baa8

android.media.browse.MediaBrowserService

com.tortula.subprior2702.keep_alive.c178c93be1819d383d0e4

android.media.MediaRouteProviderService

com.tortula.subprior2702.keep_alive.c2b46fb734282e0b5b135

android.media.MediaRoute2ProviderService

com.tortula.subprior2702.keep_alive.OlebDreamService

android.service.dreams.DreamService

com.tortula.subprior2702.accessibility.AppAccessibilityService

android.accessibilityservice.AccessibilityService

com.tortula.subprior2702.accessibility.cf9326f584d1a913a5308

android.service.notification.NotificationListenerService

com.tortula.subprior2702.accessibility.c7d5d4a84c00a677f19b0

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.tortula.subprior2702.clone.c20f57fee5c2438cf3335

com.tortula.subprior2702.keep_alive.OlebAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.tortula.subprior2702.keep_alive.HardwareEventReceiver

android.bluetooth.device.action.ACL_CONNECTED android.bluetooth.device.action.ACL_DISCONNECTED android.bluetooth.device.action.ACL_DISCONNECT_REQUESTED android.bluetooth.a2dp.profile.action.CONNECTION_STATE_CHANGED android.hardware.usb.action.USB_DEVICE_ATTACHED android.hardware.usb.action.USB_DEVICE_DETACHED android.hardware.usb.action.USB_ACCESSORY_ATTACHED android.hardware.usb.action.USB_ACCESSORY_DETACHED

com.tortula.subprior2702.services.BootStartupReceiver

com.globalnew.botreceiver.ACTION_START com.tortula.subprior2702.action.DROPPER_READY android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.MY_PACKAGE_REPLACED

com.tortula.subprior2702.app_management.ca1a92c0b63915b133401

com.tortula.subprior2702.action.REPLACEMENT_INSTALL_PREPARED com.tortula.subprior2702.action.REPLACEMENT_INSTALL_SUBMITTED com.tortula.subprior2702.action.REPLACEMENT_INSTALL_USER_ACTION_REQUIRED com.tortula.subprior2702.action.REPLACEMENT_INSTALL_RESULT

com.tortula.subprior2702.services.ServiceKeepAliveAlarmReceiver

MY_CUSTOM_ACTION com.tortula.subprior2702.action.KEEPALIVE_TICK

com.tortula.subprior2702.services.ServiceResetReceiver

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.SCREEN_ON android.intent.action.SCREEN_OFF android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE

com.tortula.subprior2702.services.SmsSignalReceiver

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.tortula.subprior2702.accessibility.AppDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED android.intent.action.ACTION_SHUTDOWN android.intent.action.USER_PRESENT android.intent.action.SCREEN_OFF android.intent.action.SCREEN_ON

com.tortula.subprior2702.clone.c7644e4f10d12ade52c55

android.app.action.DEVICE_ADMIN_ENABLED android.app.action.PROFILE_PROVISIONING_COMPLETE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

base.apk

Permissions

com.tortula.subprior2702.permission.PROFILE_BRIDGE

com.google.android.c2dm.permission.RECEIVE

com.tortula.subprior2702.permission.C2D_MESSAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_CAMERA

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.POST_NOTIFICATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

android.permission.WAKE_LOCK

android.permission.REORDER_TASKS

android.permission.QUERY_ALL_PACKAGES

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.WRITE_CONTACTS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS