Noviq[.]apk | Triage™

General

Target
Noviq.apk
Size 1.7MB
Sample261107-wtak2sdy4w
SHA256 8fa9f9e2e2c4c930a2330ee228fd6702b4d614bd3920cc1ffd7fba08bf76a08a
MD5 28b3ea9527aa18ddf62a0527600d52d6
SHA1 1cc5d68f95d3f755441fe4506d6169969ce7d102
SHA512 a31caa0ef9552c84891f4a58d4bb194b28baac85e743c3de304f037485cf478efd1c03bbcff12567a0926ac50dca5bb42a634a7bcae8fecd397aef4506052155
SSDEEP 49152:TiVOnYaKSThZ74XDWeS6230N6yDcv+F1zNfAvDHMukEd1J7bUE:WVLaKSThZEzWenoyYvQz7Ed1OE
TLSH
T1F3851216B738AA6ECD71007A1E1EA774176A7C63CE018703B514776C78BB6E80F467E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Noviq.apk

File Explorer

Noviq.apk

.apk 1.7MB

Noviq.apk

SHA256 8fa9f9e2e2c4c930a2330ee228fd6702b4d614bd3920cc1ffd7fba08bf76a08a
MD5 28b3ea9527aa18ddf62a0527600d52d6
SHA1 1cc5d68f95d3f755441fe4506d6169969ce7d102
SHA512 a31caa0ef9552c84891f4a58d4bb194b28baac85e743c3de304f037485cf478efd1c03bbcff12567a0926ac50dca5bb42a634a7bcae8fecd397aef4506052155
SSDEEP 49152:TiVOnYaKSThZ74XDWeS6230N6yDcv+F1zNfAvDHMukEd1J7bUE:WVLaKSThZEzWenoyYvQz7Ed1OE
TLSH
T1F3851216B738AA6ECD71007A1E1EA774176A7C63CE018703B514776C78BB6E80F467E2
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

afd28178f076a6c260c8e599b62066aae2a3212736436492df45e623c07a6333

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=cash.noviq.android,O=Noviq

cash.noviq.android

Android Permissions

Noviq.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.READ_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

cash.noviq.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Noviq.apk

File Signature issue

ru.advokatagent.myapplication.SplashActivity

ru.advokatagent.myapplication.WebOnlyMainActivity

ru.advokatagent.myapplication.AppPermissionsActivity

ru.advokatagent.myapplication.anketa.AnketaActivity

ru.advokatagent.myapplication.MainActivity

ru.advokatagent.evacfeature.EvacSplashActivity

ru.advokatagent.evacfeature.EvacMainActivity

ru.advokatagent.evacfeature.EvacPermissionsActivity

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

Noviq.apk

File Signature issue

ru.advokatagent.myapplication.SplashActivity

ru.advokatagent.myapplication.WebOnlyMainActivity

ru.advokatagent.myapplication.AppPermissionsActivity

ru.advokatagent.myapplication.anketa.AnketaActivity

ru.advokatagent.myapplication.MainActivity

ru.advokatagent.evacfeature.EvacSplashActivity

ru.advokatagent.evacfeature.EvacMainActivity

ru.advokatagent.evacfeature.EvacPermissionsActivity

androidx.work.impl.foreground.SystemForegroundService

androidx.work.impl.background.systemjob.SystemJobService

androidx.room.MultiInstanceInvalidationService

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

Android Permissions

Noviq.apk