dbbet[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
dbbet.apk
Size 41.2MB
Sample261110-pehvjsfb78
SHA256 40e8daec43315f6601ad4b349a7cd9a1a2ca1dafd9d0a72d142e3f190c6754fa
MD5 9bfee2349192bc7b286d4201f24618d4
SHA1 aa364219d42c90fe1561c85d0c4ad6589744f72f
SHA512 22889f59a3bc413a3fe95cc4fc329e7c51a65f9887b365c19ccd9703d9f2aac64a5449146b51d3dfff737a70e3a431c67d5d4454d736686259ee894e8e257250
SSDEEP 786432:vcDb2Z/8QvKdivD8tvDGhNBoP/VbwmlSQnOYvCq9QOwCnOl63zEDU3S:EDb2Z/8AuAAtvwN8/VbwmwUOYvCKQOfG
TLSH
T11797239BF32D482ED87736728C7E013526260D9946927B5B3408372D3AB3AD84F5DBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 6 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
dbbet.apk

File Explorer

dbbet.apk

.apk 41.2MB

dbbet.apk

SHA256 40e8daec43315f6601ad4b349a7cd9a1a2ca1dafd9d0a72d142e3f190c6754fa
MD5 9bfee2349192bc7b286d4201f24618d4
SHA1 aa364219d42c90fe1561c85d0c4ad6589744f72f
SHA512 22889f59a3bc413a3fe95cc4fc329e7c51a65f9887b365c19ccd9703d9f2aac64a5449146b51d3dfff737a70e3a431c67d5d4454d736686259ee894e8e257250
SSDEEP 786432:vcDb2Z/8QvKdivD8tvDGhNBoP/VbwmlSQnOYvCq9QOwCnOl63zEDU3S:EDb2Z/8AuAAtvwN8/VbwmwUOYvCKQOfG
TLSH
T11797239BF32D482ED87736728C7E013526260D9946927B5B3408372D3AB3AD84F5DBC9
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

1543c574b79dc47b801eabe4ddbfb72409a41e125daf986bff89c410ca1e328f

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=dbbet,OU=dbbet,O=dbbet,L=dbbet,C=CY

org.dbbet.vac

android.permission.VIBRATE android.permission.INTERNET android.permission.ACCESS_FINE_LOCATION android.permission.READ_PHONE_STATE android.permission.USE_CREDENTIALS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.POST_NOTIFICATIONS android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.USE_FINGERPRINT android.permission.USE_SIP android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_ALL_DOWNLOADS android.permission.CAMERA android.permission.ACCESS_COARSE_LOCATION android.permission.FOREGROUND_SERVICE com.google.android.gms.permission.AD_ID android.permission.SCHEDULE_EXACT_ALARM android.permission.HIGH_SAMPLING_RATE_SENSORS android.permission.GET_TASKS android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.REQUEST_INSTALL_PACKAGES android.permission.READ_PRIVILEGED_PHONE_STATE android.permission.USE_BIOMETRIC com.google.android.providers.gsf.permission.READ_GSERVICES com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_AD_ID com.google.android.c2dm.permission.RECEIVE android.permission.RECEIVE_BOOT_COMPLETED org.dbbet.vac.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION com.samsung.android.mapsagent.permission.READ_APP_INFO com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA org.dbbet.vac.permission.PROCESS_PUSH_MSG org.dbbet.vac.permission.PUSH_PROVIDER

org.xplatform.client1.features.appactivity.ApplicationActivity

org.xplatform.client1.features.appactivity.IntentForwardingActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.yandex.authsdk.internal.AuthSdkActivity

com.yandex.authsdk.internal.ChromeTabLoginActivity

com.yandex.authsdk.internal.WebViewLoginActivity

com.yandex.authsdk.internal.ChromeTabDataActivity

android.intent.action.VIEW android.intent.action.VIEW

com.vk.api.sdk.ui.VKWebViewAuthActivity

com.vk.api.sdk.ui.VKCaptchaActivity

com.vk.api.sdk.ui.VKConfirmationActivity

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

androidx.credentials.playservices.controllers.identityauth.HiddenActivity

androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity

androidx.biometric.internal.ui.FingerprintDialogActivity

ru.ok.android.sdk.OkAuthActivity

ru.ok.android.sdk.OkPostingActivity

ru.ok.android.sdk.OkAppInviteActivity

ru.ok.android.sdk.OkAppSuggestActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.compose.ui.tooling.PreviewActivity

com.journeyapps.barcodescanner.CaptureActivity

com.jakewharton.processphoenix.PhoenixActivity

com.huawei.hms.support.api.push.TransActivity

com.huawei.hms.hwid.internal.ui.activity.HwIdSignInHubActivity

com.huawei.hms.account.internal.ui.activity.AccountSignInHubActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.huawei.hms.activity.BridgeActivity

com.huawei.hms.activity.EnableServiceActivity

org.xplatform.feature.online_call.impl.service.OnlineCallService

org.xplatform.feature.online_call.impl.service.OnlineCallService.STOP_CALL org.xplatform.feature.online_call.impl.service.OnlineCallService.STOP_SERVICE

org.xplatform.game_broadcasting.impl.presentation.video.window_screen.GameVideoWindowService

org.xplatform.game_broadcasting.impl.presentation.zone.window_screen.GameZoneWindowService

org.xplatform.widget.impl.presentation.top.live.AppWidgetTopLiveService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.live.AppWidgetTopLiveSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.line.AppWidgetTopLineService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.top.line.AppWidgetTopLineSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.favorites.AppWidgetFavoritesService

android.intent.action.PACKAGE_REPLACED

org.xplatform.widget.impl.presentation.favorites.AppWidgetFavoritesSmallService

android.intent.action.PACKAGE_REPLACED

org.xplatform.app_update.impl.presentation.apk_service.AppUpdateDownloadApkService

org.xplatform.background_video.impl.presentation.BackgroundVideoService

org.xplatform.services.mobile_services.impl.presentation.services.HuaweiMessagingService

com.huawei.push.action.MESSAGING_EVENT

org.xplatform.services.mobile_services.impl.presentation.services.GoogleMessagingService

com.google.firebase.MESSAGING_EVENT

androidx.camera.core.impl.MetadataHolderService

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room3.MultiInstanceInvalidationService

androidx.room.MultiInstanceInvalidationService

com.google.firebase.sessions.SessionLifecycleService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.jakewharton.processphoenix.PhoenixService

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG com.huawei.push.msg.PASSBY_MSG