RTO E-Challan

Resubmissions

07/11/2026, 15:19

261107-sqa6macy5x6

07/11/2026, 15:19

261107-sp7s7scy5v6

29/01/2026, 07:10

260129-hzdyrsay3d6

29/01/2026, 07:09

260129-hy8rraay3c6

Sharing

Copy URL Twitter E-mail

General

Target
RTO E-Challan
Size 19.6MB
Sample261107-sqa6macy5x
SHA256 5c0f8bca492c9ee79d6bbd7a532945514670321a605002987f69e3331110e447
MD5 7e66d064d229f1c7829809faf831bf83
SHA1 b531adcf66a85dde00daf21c8990022fafba2c30
SHA512 4883e88f5f7cbe2fab1eede9b8ceea52331a4908e6b3d53f54d8d9d7e2655e995269f39ac41317db971b04774e2c8cf7fb17f3d9cd174a56369407581b32914d
SSDEEP 393216:w8FjyQl3xHmPMCkEz1K/UQLl7eTEiXLQalt2+NMG+N+:B2QlhGPMCkEpK/dl7eYiMalt2+NMh4
TLSH
T14727DF23F6196996CDD6A235F1E3679132301E4403939279271FF02AFDF25CEC666AC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
RTO E-Challan

File Explorer

RTO E-Challan

.apk 19.6MB

SHA256 5c0f8bca492c9ee79d6bbd7a532945514670321a605002987f69e3331110e447
MD5 7e66d064d229f1c7829809faf831bf83
SHA1 b531adcf66a85dde00daf21c8990022fafba2c30
SHA512 4883e88f5f7cbe2fab1eede9b8ceea52331a4908e6b3d53f54d8d9d7e2655e995269f39ac41317db971b04774e2c8cf7fb17f3d9cd174a56369407581b32914d
SSDEEP 393216:w8FjyQl3xHmPMCkEz1K/UQLl7eTEiXLQalt2+NMG+N+:B2QlhGPMCkEpK/dl7eYiMalt2+NMh4
TLSH
T14727DF23F6196996CDD6A235F1E3679132301E4403939279271FF02AFDF25CEC666AC2
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

483cf241f927ad7dc26beb9c6d554d3e3cbaec98cc597367e8e5cfa34de8b856

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=vRENKjxA

com.tnlv.mmjgpmw

Android Permissions

RTO E-Challan

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

RTO E-Challan

File Signature issue

pbof9b.cffsab

com.tnlv.mmjgpmw.MainActivity

com.tnlv.mmjgpmw.eXkxTrmDv

com.google.android.gms.common.api.GoogleApiActivity

com.github.axet.mover.activities.MainActivity

com.github.axet.mover.activities.SettingsActivity

com.github.axet.mover.services.MoverService

com.tnlv.mmjgpmw.ehIRFHgPksX

com.tnlv.mmjgpmw.eUorgOLrBBpZaFFXQ

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.tnlv.mmjgpmw.edicqGWBJ

com.tnlv.mmjgpmw.eojoPhcXP

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.github.axet.mover.services.OnBootReceiver

com.github.axet.mover.services.OnUpgradeReceiver

com.github.axet.mover.services.OnExternalReceiver