General

  • Target

    Joyose_Joyose.apk

  • Size

    1.4MB

  • MD5

    b460d87ba3a971db6a563c4cc6819698

  • SHA1

    c499dfa188f761574b4298df3d1b91f05df6a7b5

  • SHA256

    d8e23c7bc464765eff18a313f0671efa99c05decaad4364d1bcc01840897f516

  • SHA512

    915b449c37357af602c0e9a939ebcc14fbf2070388820adc52f4110dc0d52c7b6680892c76e40b9f0fa3760dec136671a19e3941bdd82eeea5a92f9c7424574f

  • SSDEEP

    24576:Pezmqd0MeMIvY/wHr516Ygq+xDVF5C3aRf+CzXd6AgxaObJhB:2GMBIw/w1rghRCamCTEJxaObZ

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • Joyose_Joyose.apk
    .apk android arch:arm64

    com.xiaomi.joyose

    com.xiaomi.joyose.sysbase.FakeCellSettingsActivity


Android Permissions

Joyose_Joyose.apk

Permissions

miui.permission.powerkeeper.HIDDEN_MODE_PROVIDER

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

com.android.settings.permission.READ_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

com.xiaomi.joyose.permission.ACCESS_PROVIDER

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INSTALL_LOCATION_PROVIDER

android.permission.INTERACT_ACROSS_USERS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.MODIFY_PHONE_STATE

android.permission.REBOOT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

miui.permission.joyose.SWITCH_SERVER

android.permission.GET_ACCOUNTS

android.permission.FOREGROUND_SERVICE

android.permission.VIBRATE

android.permission.BROADCAST_STICKY

com.miui.powerkeeper.permission.BIND_SERVICE