[DETECTION] Unknown compiler of uk.co.santander.santanderUK

[reveny]

com.santander.santanderUK.apk

Issue:
The sample is currently not detected by apkid.
compiler : unknown (please file detection issue!)

APKiD current results...

[+] APKiD 2.1.5 :: from RedNaga :: rednaga.io
[*] /input/uk.co.santander.santanderUK.apk!classes.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : DexGuard
[*] /input/uk.co.santander.santanderUK.apk!classes10.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes11.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes12.dex
 |-> anti_vm : Build.MANUFACTURER check, device ID check, possible Build.SERIAL check, subscriber ID check
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable field names, unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes13.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes14.dex
 |-> anti_vm : Build.MANUFACTURER check, network operator name check
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : DexGuard
[*] /input/uk.co.santander.santanderUK.apk!classes2.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes3.dex
 |-> anti_vm : Build.FINGERPRINT check, Build.HARDWARE check, Build.MANUFACTURER check, Build.MODEL check, Build.PRODUCT check, Build.TAGS check, possible VM check, ro.kernel.qemu check
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes4.dex
 |-> anti_vm : Build.MODEL check
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes5.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes6.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes7.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes8.dex
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names
[*] /input/uk.co.santander.santanderUK.apk!classes9.dex
 |-> anti_vm : possible VM check
 |-> compiler : unknown (please file detection issue!)
 |-> obfuscator : unreadable method names

[enovella]

To check packed libs:

• libmmlpuhpxxls.so
• libtaz_full.5.10.0.25.so

[AbhiTheModder]

Hello @reveny,

Regarding the unknown compiler results, do you have any information, ideas, or clue about them?

Thanks,
Abhi

[enovella]

To check packed libs:

• libmmlpuhpxxls.so
• libtaz_full.5.10.0.25.so

Probably this TSO stands for `Trusteer SOlutions" - https://www.ibm.com/trusteer

[AbhiTheModder]

Probably this TSO stands for `Trusteer SOlutions" - https://www.ibm.com/trusteer

Yeah, it seems so,

Lcom/trusteer/tas/TAS_VERSION_INFO;

https://docs.verify.ibm.com/verify/v2.0/docs/adaptive-access-sdk-adaptive-sdk-for-android

https://github.com/MobileFirst-Platform-Developer-Center/DevCenter/blob/master/tutorials/en/product-integration/7.1/trusteer-android.md

[enovella]

[*] ./split_config.arm64_v8a.apk!lib/arm64-v8a/libmmlpuhpxxls.so
 |-> packer : Trusteer SDK (TSO) (to be verified!)
[*] ./split_config.arm64_v8a.apk!lib/arm64-v8a/libtaz_full.5.10.0.25.so
 |-> packer : Trusteer SDK (TSO) (to be verified!)
[*] ./split_config.arm64_v8a.apk!lib/arm64-v8a/libtoolChecker.so
 |-> anti_root : RootBeer

[enovella]

@AbhiTheModder I leave it open for the dex compiler issue.