JR[.]apk | Triage™

General

Target
JR.apk
Size 11.5MB
Sample230328-e7874aag5v
SHA256 fe4e697561685131a36652c9d0cb67fe3ff3196d1e23c3d6b0783a72ebe296cb
MD5 13197d185e3f539b515257adb871dfd8
SHA1 0794785f2f5e8964e0581bcca209cb95b54eba6d
SHA512 7dea46f2efe7492bc847d8c533006a9ba8aa68cb82c3fe4191ccf3b7cd133ba139269bfed1db09ea2dc309c6e2880b25e12d52f130bbf60211748f730ae2f043
SSDEEP 196608:8FEaEMAbEmPIOEau02cBXXLtryQt43iygB+GSuE5nvG6+BiZfx71ckTNBx:811ABPRuYrywZVpSuIIBqx71cUvx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO

File Explorer

JR.apk

.apk 11.5MB

JR.apk

SHA256 fe4e697561685131a36652c9d0cb67fe3ff3196d1e23c3d6b0783a72ebe296cb
MD5 13197d185e3f539b515257adb871dfd8
SHA1 0794785f2f5e8964e0581bcca209cb95b54eba6d
SHA512 7dea46f2efe7492bc847d8c533006a9ba8aa68cb82c3fe4191ccf3b7cd133ba139269bfed1db09ea2dc309c6e2880b25e12d52f130bbf60211748f730ae2f043
SSDEEP 196608:8FEaEMAbEmPIOEau02cBXXLtryQt43iygB+GSuE5nvG6+BiZfx71ckTNBx:811ABPRuYrywZVpSuIIBqx71cUvx
MD5 SHA1 SHA512 SSDEEP

android arch:arm

uni.UNIF621530

Android Permissions

JR.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_SMS

android.permission.READ_SMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.FOREGROUND_SERVICE

JR.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

com.kj.kjsms.MainActivity

io.dcloud.sdk.base.service.DownloadService

com.kj.kjsms.KJSMSModule$HeadlessSmsSendService

com.taobao.weex.WXGlobalEventReceiver

com.kj.kjsms.MmsReceiver

com.kj.kjsms.SmsReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Sharing

General

Malware Config

Signatures

File Explorer

JR.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

com.kj.kjsms.MainActivity

io.dcloud.sdk.base.service.DownloadService

com.kj.kjsms.KJSMSModule$HeadlessSmsSendService

com.taobao.weex.WXGlobalEventReceiver

com.kj.kjsms.MmsReceiver

com.kj.kjsms.SmsReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Android Permissions

JR.apk