Maya-1[.]0[.]0[.]apk

General

Target
Maya-1.0.0.apk
Size 27.5MB
Sample261107-wvss1sff46
SHA256 65a91b5bd2e99c80e433cafbfe91bb00e7487428d7f361aba55ce11265ec5b95
MD5 832b6f9a666d3942c54d30fb9d953641
SHA1 8620bf66e50d5058ae2e93baa75d12148c61ead3
SHA512 de842e32d4529c420b5e089bb9f8af3389c801660493189bc1c4a88815eee4a3786f394834f567f98b8026b683fa3009da455704c47510ede7390e8caeed1455
SSDEEP 393216:njk8r6nCL+IdhpjKsQXzGRv4rnd7Hk7BJa+c0KyaSSuJVPBNip4/G9Kv6aFzk6mw:NrECL+IfjK7zGRC231l
TLSH
T12657E185F55B44FDC9AAF874468E9133E6243C094312949B9F85FB20BA337E09F3A752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 9 IoCs

description	ioc
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Maya-1.0.0.apk

File Explorer

Maya-1.0.0.apk

.apk 27.5MB

Maya-1.0.0.apk

SHA256 65a91b5bd2e99c80e433cafbfe91bb00e7487428d7f361aba55ce11265ec5b95
MD5 832b6f9a666d3942c54d30fb9d953641
SHA1 8620bf66e50d5058ae2e93baa75d12148c61ead3
SHA512 de842e32d4529c420b5e089bb9f8af3389c801660493189bc1c4a88815eee4a3786f394834f567f98b8026b683fa3009da455704c47510ede7390e8caeed1455
SSDEEP 393216:njk8r6nCL+IdhpjKsQXzGRv4rnd7Hk7BJa+c0KyaSSuJVPBNip4/G9Kv6aFzk6mw:NrECL+IfjK7zGRC231l
TLSH
T12657E185F55B44FDC9AAF874468E9133E6243C094312949B9F85FB20BA337E09F3A752
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

10ae43dd03f03722dc3099b9aee5af79d6d467731fc47fb6376c3fb9adf39417

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Xentoryx Labs,O=Xentoryx Labs,C=BD

com.xentoryxlabs.mayav1app

com.xentoryxlabs.mayav1app.feature.notifications.service.PhoneCallReceiver

android.intent.action.PHONE_STATE

com.xentoryxlabs.mayav1app.feature.widget.presentation.FocusStatsWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

com.xentoryxlabs.mayav1app.feature.widget.presentation.DeviceStatusWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

com.xentoryxlabs.mayav1app.feature.widget.presentation.WeatherTimeWidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

android.intent.action.MY_PACKAGE_REPLACED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

Maya-1.0.0.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.NEARBY_WIFI_DEVICES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.xentoryxlabs.mayav1app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

Maya-1.0.0.apk

File Signature issue

com.xentoryxlabs.mayav1app.MainActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.xentoryxlabs.mayav1app.feature.notifications.service.MayaNotificationListenerService

com.xentoryxlabs.mayav1app.feature.notifications.service.MayaPushService

androidx.camera.core.impl.MetadataHolderService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.core.widget.RemoteViewsCompatService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.xentoryxlabs.mayav1app.feature.notifications.service.PhoneCallReceiver

com.xentoryxlabs.mayav1app.feature.widget.presentation.FocusStatsWidgetReceiver

com.xentoryxlabs.mayav1app.feature.widget.presentation.DeviceStatusWidgetReceiver

com.xentoryxlabs.mayav1app.feature.widget.presentation.WeatherTimeWidgetReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.mlkit.common.internal.MlKitInitProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

Android Permissions

Maya-1.0.0.apk