831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b[.]apk

General

Target
831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk
Size 4.8MB
Sample220615-qmskdsbcb8
SHA256 831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b
MD5 c10d38a63e776e5940d281bddbb497d4
SHA1 ac0561ee9acc38c138409d03a24bdd992a5b1d96
SHA512 a9ddd9f1f370c0a15fc4f777ccd1bad8e2c3c6ad1236561fe8dc8e44690498e095fe86b755af68d43c14dc9a85cd0f9bbda452463e7dcad1e4bcdb2901ce3da5
SSDEEP 98304:5qBTEbLg6IcV1bVGgecr2uoyoqxQ7jjrXJ7dGK4z11GafG63W3KL:5BGcV1bVbjCuoyoqxIxGKk1QafN3BL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk

.apk 4.8MB

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk

SHA256 831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b
MD5 c10d38a63e776e5940d281bddbb497d4
SHA1 ac0561ee9acc38c138409d03a24bdd992a5b1d96
SHA512 a9ddd9f1f370c0a15fc4f777ccd1bad8e2c3c6ad1236561fe8dc8e44690498e095fe86b755af68d43c14dc9a85cd0f9bbda452463e7dcad1e4bcdb2901ce3da5
SSDEEP 98304:5qBTEbLg6IcV1bVGgecr2uoyoqxQ7jjrXJ7dGK4z11GafG63W3KL:5BGcV1bVbjCuoyoqxIxGKk1QafN3BL
MD5 SHA1 SHA512 SSDEEP

android

com.qiyi.video

Android Permissions

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk

Permissions

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.WRITE_SMS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_NETWORK_STATE

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk

com.qiyi.video.p0fcd1ad9

com.qiyi.video.p6a9561d7

com.qiyi.video.p31982e89

com.qiyi.video.p2f67ff12

com.qiyi.video.pc62f7d46

com.qiyi.video.pd96cb511

com.qiyi.video.p787da14d

com.qiyi.video.p70860378

com.qiyi.video.p50290c56

com.qiyi.video.p64e3a134

com.qiyi.video.p5a343004

com.qiyi.video.p799d2d37

Sharing

General

Malware Config

Signatures

File Explorer

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk

com.qiyi.video.p0fcd1ad9

com.qiyi.video.p6a9561d7

com.qiyi.video.p31982e89

com.qiyi.video.p2f67ff12

com.qiyi.video.pc62f7d46

com.qiyi.video.pd96cb511

com.qiyi.video.p787da14d

com.qiyi.video.p70860378

com.qiyi.video.p50290c56

com.qiyi.video.p64e3a134

com.qiyi.video.p5a343004

com.qiyi.video.p799d2d37

Android Permissions

831334e1e49ec7a25375562688543ee75b2b3cc7352afc019856342def52476b.apk