kkuk[.]apk | Triage™

General

Target
kkuk.apk
Size 11.2MB
Sample261113-anmsjad131
SHA256 81c407d2cdf133e3db3eca40f4a167f81092190b80360e3f3bb558ff9ee4d4a4
MD5 2b20d3c6f5491b5fed5f3a83dde8538d
SHA1 d142f810e622f4a52d56cbe45371513ddca95aa4
SHA512 f40f0792b9fad04669c4196122390f37c744eca3de70d0f372a2dd8788e0294c56c9fa37af09ea979a707753eb257727b790e8dfa65c56949d3451f0a2f03d06
SSDEEP 196608:OiGrX2/Nbsa7oklN3rid4ZG3IzksxdGLMIoUw3zG1IG8UlzJwkEQT1yC2IOayheR:O2/NwklN3GeZG3WdGwFUw3zG/LlWnSxR
TLSH
T12AC623A3F7BD486FD8B281B2485B017666358E048609BE5B359C7B7D3877A5C4F8A3C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
kkuk.apk

File Explorer

kkuk.apk

.apk 11.2MB

kkuk.apk

SHA256 81c407d2cdf133e3db3eca40f4a167f81092190b80360e3f3bb558ff9ee4d4a4
MD5 2b20d3c6f5491b5fed5f3a83dde8538d
SHA1 d142f810e622f4a52d56cbe45371513ddca95aa4
SHA512 f40f0792b9fad04669c4196122390f37c744eca3de70d0f372a2dd8788e0294c56c9fa37af09ea979a707753eb257727b790e8dfa65c56949d3451f0a2f03d06
SSDEEP 196608:OiGrX2/Nbsa7oklN3rid4ZG3IzksxdGLMIoUw3zG1IG8UlzJwkEQT1yC2IOayheR:O2/NwklN3GeZG3WdGwFUw3zG/LlWnSxR
TLSH
T12AC623A3F7BD486FD8B281B2485B017666358E048609BE5B359C7B7D3877A5C4F8A3C0
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

481906c95834837e03546c8a394836b6c76a5be17ae39d7754150e532dce06c1

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Kkuk,OU=Kkuk,O=Kkuk,L=Seoul,C=KR

app.kkuk.kkuk

Android Permissions

kkuk.apk

Permissions

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

app.kkuk.kkuk.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

kkuk.apk

File Signature issue

app.kkuk.kkuk.MainActivity

io.flutter.plugins.urllauncher.WebViewActivity

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

app.kkuk.kkuk.KkukTileService

com.google.firebase.components.ComponentDiscoveryService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingBackgroundService

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.core.widget.RemoteViewsCompatService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

app.kkuk.kkuk.KkukWidgetProvider

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingReceiver

dev.fluttercommunity.plus.share.SharePlusPendingIntent

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

io.flutter.plugins.firebase.messaging.FlutterFirebaseMessagingInitProvider

dev.fluttercommunity.plus.share.ShareFileProvider

androidx.startup.InitializationProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

kkuk.apk