General

  • Target

    OfficeSuite_13.10.47670_offline_arm64_UserUpload.Net.apk

  • Size

    49.4MB

  • MD5

    3eca68731f03919c8d5e9ed4a7a390c8

  • SHA1

    c48ab906e5d4a6c2b25c78538ba0cd2c8d69814b

  • SHA256

    8285fd4e12d65c8b6e287d954a3d98dc08e09402a325dbea2c3fa74b6eeb55c0

  • SHA512

    632f9f6c73601c5eb83c5203bcef389c672d5d6d1d0579d807c8224bb8747817817a299570aedc3e637fb238332da413aebb1ce7b241df3019af326d317dd5ad

  • SSDEEP

    1572864:ZOfJdsI0iqCZ1Xu6BcAMXhEpONsej8Cy5z:ZOfd0rCW6BcAkEpaseW

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • OfficeSuite_13.10.47670_offline_arm64_UserUpload.Net.apk
    .apk android arch:arm64

    com.mobisystems.office

    com.microsoft.identity.client.BrowserTabActivity


  • 10Bokeh.jpg
  • 11DrawnLeaves.jpg
  • 12DrawnFlowers.jpg
  • 1PlainPaper.jpg
  • 2CrumpledPaper.jpg
  • 3BrushStroke.jpg
  • 4Wood.jpg
  • 5BricksLight.jpg
  • 6Bricks.jpg
  • 7Water.jpg
  • 83pv-RKSJ-H
  • 8Plants.jpg
  • 90ms-RKSJ-H
  • 90ms-RKSJ-V
  • 90msp-RKSJ-H
  • 9Watercolor.jpg
    .ps1
  • Adobe-CNS1-UCS2
  • Adobe-GB1-UCS2
  • Adobe-Japan1-UCS2
  • Adobe-Korea1-UCS2
  • AquaMail_exts.txt
  • AquaMail_mimes.txt
  • AutoConverter_exts.txt
  • AutoConverter_mimes.txt
  • B5pc-H
  • B5pc-V
  • CCWildWordsLowerRegular.otf
  • DefaultShaders.metal
  • DualQuaternionSkinning_Shadow.cg
  • ETen-B5-H
  • ETenms-B5-H
  • Excel_exts.txt
  • Excel_mimes.txt
  • FFPLib_AlphaTest.glsl
  • FFPLib_Common.glsl
  • FFPLib_Fog.glsl
  • FFPLib_Texturing.cg
  • FFPLib_Texturing.glsl
  • FFPLib_Transform.cg
  • FFPLib_Transform.glsl
  • GBK-EUC-H
  • GBK-EUC-V
  • GBK2K-H
  • GBK2K-V
  • GBpc-EUC-H
  • GTM-W23LZ2-1233.zip
    .zip
  • GTM-W23LZ2.json
  • HLSL_SM4Support.hlsl
  • HardwareSkinningShadow.cg
  • ImageViewer_exts.txt
  • ImageViewer_mimes.txt
  • KSCms-UHC-H
  • LibrariesUsed.html
  • LibrariesUsed_es.html
  • MusicPlayerPlaylist_exts.txt
  • MusicPlayerPlaylist_mimes.txt
  • MusicPlayer_exts.txt
  • MusicPlayer_mimes.txt
  • NewPresentation.pptx
    .pptx office2007
  • Normal.dotm
    .dotm office2007
  • OfficeFileBrowser_exts.txt
  • OfficeFileBrowser_mimes.txt
  • OgreUnifiedShader.h
  • Pdf_exts.txt
  • Pdf_mimes.txt
  • PowerPoint_exts.txt
  • PowerPoint_mimes.txt
  • SGXLib_DualQuaternion.glsl
  • SGXLib_IntegratedPSSM.glsl
  • SGXLib_LayeredBlending.glsl
  • SGXLib_NormalMap.glsl
  • SGXLib_PerPixelLighting.glsl
  • SGXLib_TextureAtlas.cg
  • SGXLib_TextureAtlas.glsl
  • SGXLib_TriplanarTexturing.glsl
  • ShadowBlend.frag
  • ShadowBlend.vert
  • ShadowExtrudeDirLight.vert
  • ShadowExtrudeDirLightFinite.vert
  • ShadowExtrudePointLight.vert
  • ShadowExtrudePointLightFinite.vert
  • ShadowVolumeExtude.program
  • Shapes.csv
  • ShapesSerial
  • TOCStyles.xml
    .xml
  • UBReader_exts.txt
  • UBReader_mimes.txt
  • USWebCoatedSWOP.icc
  • UniCNS-UCS2-H
  • UniCNS-UCS2-V
  • UniCNS-UTF16-H
  • UniGB-UCS2-H
  • UniGB-UTF16-H
  • UniJIS-UCS2-H
  • UniJIS-UCS2-HW-H
  • UniJIS-UTF16-H
  • UniKS-UCS2-H
  • UniKS-UCS2-V
  • UniKS-UTF16-H
  • UniKS-UTF16-V
  • VideoPlayer_exts.txt
  • VideoPlayer_mimes.txt
  • Word_exts.txt
  • Word_mimes.txt
  • animations.zip
    .zip
  • MediaCallPlay.xml
    .xml
  • MediaCallTogglePause.xml
    .xml
  • list.xml
    .xml
  • api_key.txt
  • app.js
    .js
  • audio.png
    .png
  • barn_inHorizontal_effect.fsh
  • barn_inVertical_effect.fsh
  • barn_outHorizontal_effect.fsh
  • barn_outVertical_effect.fsh
  • baseline.prof
  • baseline.profm
  • blankTemplate.xlsx
    .xlsx office2007
  • blinds_horizontal_effect.fsh
  • blinds_vertical_effect.fsh
  • bottom.png
    .png
  • bottomLeft.png
    .png
  • bottomRight.png
    .png
  • box_in_effect.fsh
  • box_out_effect.fsh
  • buildInTableStyles.xml
    .xml
  • cat_axis_bubble.xml
  • cat_axis_default.xml
  • cat_axis_radar.xml
  • center_ripple.fsh
  • cert_details.html
    .html
  • chart.png
    .png
  • chart_area.xml
  • chart_area3d.xml
  • chart_bar.xml
  • chart_bar3d.xml
  • chart_bubble.xml
  • chart_doughnut.xml
  • chart_line.xml
  • chart_line3d.xml
  • chart_ofpie.xml
  • chart_pie.xml
  • chart_pie3d.xml
  • chart_radar.xml
  • chart_scatter.xml
  • chart_stock.xml
  • chart_surface.xml
  • chart_surface3d.xml
  • checkerboard_across_effect.fsh
  • checkerboard_down_effect.fsh
  • circle.fsh
  • circle.pod
  • circle_in_effect.fsh
  • circle_out_effect.fsh
  • clear.bmp
  • clip.png
    .png
  • color.js
    .js
  • colors10.xml
  • colors11.xml
  • colors12.xml
  • colors13.xml
  • colors14.xml
  • colors15.xml
  • colors16.xml
  • colors17.xml
  • colors18.xml
  • colors19.xml
  • colors20.xml
  • colors21.xml
  • colors22.xml
  • colors23.xml
  • colors24.xml
  • colors25.xml
  • config.js
  • console.js
  • copy_dependencies.bat
  • cross.bmp
  • csvTemplate.xlsx
    .xlsx office2007
  • cut.pod
  • dashDnDiag.bmp
  • dashHorz.bmp
  • dashUpDiag.bmp
  • dashVert.bmp
  • dateFormats.bin
  • dateFormats.txt
  • dateFormats.xlsx
    .xlsx office2007
  • date_axis_default.xml
  • default.fsh
  • default.vsh
  • defaultStyles.xml
    .xml
  • default_theme_from_rtf.zip
    .thmx office2007
  • diagBrick.bmp
  • diagCross.bmp
  • diagram.png
    .png
  • diamond.fsh
  • diamond.pod
  • diamond_in_effect.fsh
  • diamond_out_effect.fsh
  • dictionaries.txt
  • dissolve.fsh
  • dissolve.pod
  • dissolve_effect.fsh
  • dissolve_noise.png
    .png
  • dissolve_transition_noise.png
    .png
  • divot.bmp
  • dkDnDiag.bmp
  • dkGrid.bmp
  • dkHorz.bmp
  • dkTrellis.bmp
  • dkUpDiag.bmp
  • dkVert.bmp
  • dnDiag.bmp
  • doc.js
    .js
  • dotDmnd.bmp
  • dotGrid.bmp
  • down_box.pod
  • down_cover.pod
  • down_cube.pod
  • down_diamond_glitter.pod
  • down_hexagon_glitter.pod
  • down_pull.pod
  • down_push.pod
  • down_vortex.pod
  • down_wipe.fsh
  • event.js
  • fade.fsh
  • fade.pod
  • fade_effect.fsh
  • field.js
    .js
  • flash.fsh
  • flash.pod
  • form.js
    .js
  • gallery.fsh
  • gallery.vsh
  • glob.js
    .js
  • global.js
  • honeycomb.pod
  • horizontal_blinds.pod
  • horizontal_checkers.pod
  • horizontal_comb.pod
  • horizontal_doors.pod
  • horizontal_randombars_transition_noise.png
    .png
  • horz.bmp
  • horzBrick.bmp
  • icons.pdf
    .pdf
  • image_effect.fsh
  • in_horizontal_split.fsh
  • in_rect_shred.pod
  • in_rectangle.fsh
  • in_strip_shred.pod
  • in_vertical_split.fsh
  • in_zoom.pod
  • instr.txt
  • jcifs-1.3.18-dexed.jar
    .apk android
  • jcifs-1.3.18.jar
    .jar
  • layout_1.xml
  • layout_10.xml
  • layout_101.xml
  • layout_102.xml
  • layout_103.xml
  • layout_104.xml
  • layout_105.xml
  • layout_106.xml
  • layout_107.xml
  • layout_11.xml
  • layout_111.xml
  • layout_112.xml
  • layout_113.xml
  • layout_114.xml
  • layout_115.xml
  • layout_116.xml
  • layout_117.xml
  • layout_118.xml
  • layout_119.xml
  • layout_121.xml
  • layout_1210.xml
  • layout_1211.xml
  • layout_122.xml
  • layout_124.xml
  • layout_125.xml
  • layout_126.xml
  • layout_127.xml
  • layout_128.xml
  • layout_1300.xml
  • layout_1301.xml
  • layout_1302.xml
  • layout_1303.xml
  • layout_1304.xml
  • layout_1305.xml
  • layout_1306.xml
  • layout_1307.xml
  • layout_131.xml
  • layout_132.xml
  • layout_135.xml
  • layout_137.xml
  • layout_141.xml
  • layout_142.xml
  • layout_143.xml
  • layout_144.xml
  • layout_151.xml
  • layout_152.xml
  • layout_153.xml
  • layout_154.xml
  • layout_155.xml
  • layout_161.xml
  • layout_162.xml
  • layout_163.xml
  • layout_1900.xml
  • layout_1901.xml
  • layout_1902.xml
  • layout_1903.xml
  • layout_1904.xml
  • layout_1905.xml
  • layout_1906.xml
  • layout_2.xml
  • layout_21.xml
  • layout_210.xml
  • layout_22.xml
  • layout_23.xml
  • layout_24.xml
  • layout_25.xml
  • layout_27.xml
  • layout_29.xml
  • layout_3.xml
  • layout_31.xml
  • layout_310.xml
  • layout_32.xml
  • layout_33.xml
  • layout_34.xml
  • layout_35.xml
  • layout_37.xml
  • layout_39.xml
  • layout_4.xml
  • layout_41.xml
  • layout_410.xml
  • layout_42.xml
  • layout_43.xml
  • layout_44.xml
  • layout_45.xml
  • layout_46.xml
  • layout_47.xml
  • layout_48.xml
  • layout_49.xml
  • layout_5.xml
  • layout_51.xml
  • layout_510.xml
  • layout_52.xml
  • layout_53.xml
  • layout_54.xml
  • layout_55.xml
  • layout_56.xml
  • layout_57.xml
  • layout_58.xml
  • layout_59.xml
  • layout_61.xml
  • layout_610.xml
  • layout_62.xml
  • layout_63.xml
  • layout_64.xml
  • layout_65.xml
  • layout_66.xml
  • layout_67.xml
  • layout_68.xml
  • layout_69.xml
  • layout_7.xml
  • layout_71.xml
  • layout_710.xml
  • layout_711.xml
  • layout_712.xml
  • layout_72.xml
  • layout_73.xml
  • layout_74.xml
  • layout_75.xml
  • layout_76.xml
  • layout_77.xml
  • layout_78.xml
  • layout_79.xml
  • layout_8.xml
  • layout_81.xml
  • layout_82.xml
  • layout_83.xml
  • layout_84.xml
  • layout_85.xml
  • layout_86.xml
  • layout_87.xml
  • layout_88.xml
  • layout_91.xml
  • layout_92.xml
  • layout_93.xml
  • layout_94.xml
  • layout_95.xml
  • layout_96.xml
  • layout_97.xml
  • left.png
    .png
  • left_box.pod
  • left_cover.pod
  • left_cube.pod
  • left_diamond_glitter.pod
  • left_flip.pod
  • left_gallery.pod
  • left_hexagon_glitter.pod
  • left_pull.pod
  • left_push.pod
  • left_switch.pod
  • left_vortex.pod
  • left_wipe.fsh
  • leftdown_cover.pod
  • leftdown_pull.pod
  • leftdown_ripple.fsh
  • leftdown_strips.fsh
  • leftup_cover.pod
  • leftup_pull.pod
  • leftup_ripple.fsh
  • leftup_strips.fsh
  • lgCheck.bmp
  • lgConfetti.bmp
  • lgGrid.bmp
  • loggers.config
  • loggers.debug.config
  • ltDnDiag.bmp
  • ltGrid.bmp
  • ltHorz.bmp
  • ltTrellis.bmp
  • ltUpDiag.bmp
  • ltVert.bmp
  • media.png
    .png
  • narHorz.bmp
  • narVert.bmp
  • newsflash.pod
  • no_image.png
    .png
  • odsTemplate.xlsx
    .xlsx office2007
  • offline.html
    .html
  • offlinepng.png
    .png
  • openDmnd.bmp
  • out_horizontal_split.fsh
  • out_rect_shred.pod
  • out_rectangle.fsh
  • out_strip_shred.pod
  • out_vertical_split.fsh
  • out_zoom.pod
  • passwordTemplate.xlsx
    .doc .xlsx windows office2003
  • pct10.bmp
  • pct12.bmp
  • pct15.bmp
  • pct20.bmp
  • pct25.bmp
  • pct30.bmp
  • pct35.bmp
  • pct37.bmp
  • pct40.bmp
  • pct45.bmp
  • pct5.bmp
  • pct50.bmp
  • pct55.bmp
  • pct60.bmp
  • pct62.bmp
  • pct65.bmp
  • pct70.bmp
  • pct75.bmp
  • pct80.bmp
  • pct85.bmp
  • pct87.bmp
  • pct90.bmp
  • pct95.bmp
  • plaid.bmp
  • plus.fsh
  • plus.pod
  • plus_in_effect.fsh
  • plus_out_effect.fsh
  • predefined_layouts.xml
  • predefined_styles.xml
  • presetShapeDefinitionsECMA376.dat
  • presetTableStyles.xml
  • randombar_horizontal_noise.png
    .png
  • randombar_vertical_noise.png
    .png
  • rectangle.pod
  • right.png
    .png
  • right_box.pod
  • right_cover.pod
  • right_cube.pod
  • right_diamond_glitter.pod
  • right_flip.pod
  • right_gallery.pod
  • right_hexagon_glitter.pod
  • right_pull.pod
  • right_push.pod
  • right_switch.pod
  • right_vortex.pod
  • right_wipe.fsh
  • rightdown_cover.pod
  • rightdown_pull.pod
  • rightdown_ripple.fsh
  • rightdown_strips.fsh
  • rightup_cover.pod
  • rightup_pull.pod
  • rightup_ripple.fsh
  • rightup_strips.fsh
  • ripple.pod
  • script.js
    .js
  • series_axis_default.xml
  • shingle.bmp
  • sig_details.html
    .html
  • sig_status_invalid.png
    .png
  • sig_status_unknown.png
    .png
  • sig_status_valid.png
    .png
  • sig_type_certify.png
    .png
  • sig_type_sign.png
    .png
  • sig_type_timestamp.png
    .png
  • sig_type_usage.png
    .png
  • slide_from_bottom_effect.fsh
  • slide_from_bottom_effect.vsh
  • slide_from_left_effect.fsh
  • slide_from_left_effect.vsh
  • slide_from_right_effect.fsh
  • slide_from_right_effect.vsh
  • slide_from_top_effect.fsh
  • slide_from_top_effect.vsh
  • smCheck.bmp
  • smConfetti.bmp
  • smGrid.bmp
  • solid.bmp
  • solidDmnd.bmp
  • space_empty.xml
  • space_ex.xml
    .xml
  • space_normal.xml
  • sphere.bmp
  • split.pod
  • spokes1_wheel.fsh
  • spokes1_wheelreverse.fsh
  • spokes2_wheel.fsh
  • spokes2_wheelreverse.fsh
  • spokes3_wheel.fsh
  • spokes3_wheelreverse.fsh
  • spokes4_wheel.fsh
  • spokes4_wheelreverse.fsh
  • spokes8_wheel.fsh
  • spokes8_wheelreverse.fsh
  • spot_shadow_fade.dds
  • strips.pod
  • strips_downLeft_effect.fsh
  • strips_downRight_effect.fsh
  • strips_upLeft_effect.fsh
  • strips_upRight_effect.fsh
  • styles.css
  • styles201.xml
  • styles202.xml
  • styles203.xml
  • styles205.xml
  • styles206.xml
  • styles207.xml
  • styles208.xml
  • styles209.xml
  • styles210.xml
  • styles211.xml
  • styles212.xml
  • styles213.xml
  • styles215.xml
  • styles216.xml
  • styles217.xml
  • styles218.xml
  • styles219.xml
  • styles220.xml
  • styles221.xml
  • styles222.xml
  • styles223.xml
  • styles224.xml
  • styles225.xml
  • styles227.xml
  • styles228.xml
  • styles230.xml
  • styles231.xml
  • styles232.xml
  • styles233.xml
  • styles234.xml
  • styles235.xml
  • styles236.xml
  • styles237.xml
  • styles239.xml
  • styles240.xml
  • styles241.xml
  • styles242.xml
  • styles243.xml
  • styles244.xml
  • styles245.xml
  • styles246.xml
  • styles248.xml
  • styles249.xml
  • styles250.xml
  • styles251.xml
  • styles252.xml
  • styles253.xml
  • styles254.xml
  • styles255.xml
  • styles256.xml
  • styles257.xml
  • styles258.xml
  • styles259.xml
  • styles260.xml
  • styles261.xml
  • styles262.xml
  • styles263.xml
  • styles264.xml
  • styles265.xml
  • styles266.xml
  • styles267.xml
  • styles268.xml
  • styles269.xml
  • styles270.xml
  • styles271.xml
  • styles272.xml
  • styles273.xml
  • styles274.xml
  • styles275.xml
  • styles276.xml
  • styles277.xml
  • styles278.xml
  • styles279.xml
  • styles280.xml
  • styles281.xml
  • styles282.xml
  • styles283.xml
  • styles284.xml
  • styles286.xml
  • styles287.xml
  • styles288.xml
  • styles289.xml
  • styles290.xml
  • styles291.xml
  • styles292.xml
  • styles293.xml
  • styles294.xml
  • styles296.xml
  • styles297.xml
  • styles298.xml
  • styles299.xml
  • styles300.xml
  • styles301.xml
  • styles302.xml
  • styles303.xml
  • styles304.xml
  • styles305.xml
  • styles306.xml
  • styles310.xml
  • styles317.xml
  • styles318.xml
  • styles319.xml
  • styles320.xml
  • styles321.xml
  • styles322.xml
  • styles323.xml
  • styles324.xml
  • styles325.xml
  • styles326.xml
  • styles327.xml
  • styles328.xml
  • styles329.xml
  • styles330.xml
  • styles331.xml
  • styles332.xml
  • styles333.xml
  • styles334.xml
  • styles335.xml
  • styles336.xml
  • styles337.xml
  • styles338.xml
  • styles339.xml
  • styles340.xml
  • styles341.xml
  • styles342.xml
  • styles343.xml
  • styles344.xml
  • styles345.xml
  • styles346.xml
  • styles347.xml
  • styles348.xml
  • styles349.xml
  • styles351.xml
  • styles352.xml
  • styles372.xml
  • styles389.xml
  • styles395.xml
  • styles396.xml
  • styles397.xml
  • styles398.xml
  • styles399.xml
  • styles400.xml
  • styles419.xml
  • styles423.xml
  • styles424.xml
  • styles425.xml
  • styles426.xml
  • styles427.xml
  • styles428.xml
  • styles429.xml
  • styles430.xml
  • tableStyles.zip
    .zip
  • test-config.xml
  • throughblack_cut.pod
  • throughblack_fade.pod
  • top.png
    .png
  • topLeft.png
    .png
  • topRight.png
    .png
  • transition.fsh
  • transition.vsh
  • trellis.bmp
  • unknown_chart.png
    .png
  • upDiag.bmp
  • up_box.pod
  • up_cover.pod
  • up_cube.pod
  • up_diamond_glitter.pod
  • up_hexagon_glitter.pod
  • up_pull.pod
  • up_push.pod
  • up_vortex.pod
  • up_wipe.fsh
  • util.js
    .js
  • value_axis_area.xml
  • value_axis_default.xml
  • value_axis_radar.xml
  • value_axis_stock.xml
  • value_axis_surface.xml
  • value_axis_surface3d.xml
  • vert.bmp
  • vertical_blinds.pod
  • vertical_checkers.pod
  • vertical_comb.pod
  • vertical_doors.pod
  • vertical_randombars_transition_noise.png
    .png
  • wave.bmp
  • wdDnDiag.bmp
  • wdUpDiag.bmp
  • weave.bmp
  • wedge.fsh
  • wedge.pod
  • wedge_effect.fsh
  • wheel.pod
  • wheel_1_effect.fsh
  • wheel_2_effect.fsh
  • wheel_3_effect.fsh
  • wheel_4_effect.fsh
  • wheel_8_effect.fsh
  • wheelreverse.pod
  • whitelist.txt
  • wipe.pod
  • wipe_down_effect.fsh
  • wipe_left_effect.fsh
  • wipe_right_effect.fsh
  • wipe_up_effect.fsh
  • xlsTemplate.xlsx
    .xlsx office2007
  • zigZag.bmp

Android Permissions

OfficeSuite_13.10.47670_offline_arm64_UserUpload.Net.apk

Permissions

com.mobisystems.CustomReadWritePermission

disabled_android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

com.google.android.providers.gmail.permission.READ_GMAIL

android.permission.WAKE_LOCK

disabled_android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_USER_DICTIONARY

android.permission.MANAGE_DOCUMENTS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.FOREGROUND_SERVICE

android.permission.AUTHENTICATE_ACCOUNTS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.POST_NOTIFICATIONS

android.permission.NFC