Resubmissions

16/06/2023, 12:24

230616-pk9v8aeh95 7

16/06/2023, 12:21

230616-pje98aeh89 7

General

  • Target

    ALUTECH Smart_1.0.9_apkcombo.com.apk

  • Size

    108.8MB

  • MD5

    9b7f821a8523a75a71d2df9962c090ab

  • SHA1

    0b813a020f796fa1cbc2d2b766e7683d9517ea74

  • SHA256

    8faa35e589d287dfe0cc04ad40e45422e7c3ada2a9a34be50bb00782440b6516

  • SHA512

    d1e95fe27e0d9a594215b3394ab14658bbecae5cbc545d87c161063b555a74e15066b5e2be599580979ed25c8d09b9f6e47def266bd0842184e66e785c060ac2

  • SSDEEP

    3145728:X4rGRVQu5M8OC7xsKjmJkX7WNn+XkzKZA32irO:X26CuK8vrEkX7WN3zKZ2/K

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 13 IoCs

Files

  • ALUTECH Smart_1.0.9_apkcombo.com.apk
    .apk android arch:arm64 arch:arm

    com.alt.app

    com.smart.ThingSplashActivity


  • AmazonRootCA1.pem
  • AmazonRootCA2.pem
  • AmazonRootCA3.pem
  • AmazonRootCA4.pem
  • AudioKit.json
  • BaseKit.json
  • BaseWidgetPage.html
    .html
  • BizKit.json
  • CategoryCommonBizKit.json
  • DeviceKit.json
  • HomeKit.json
  • IPCKit.json
  • Juicer.png
    .png
  • Manrope-Bold.ttf
  • MapKit.json
  • MediaKit.json
  • MiniKit.json
  • P2PKit.json
  • PlayNetKit.json
  • SFSRootCAG2.pem
  • SweeperKit.json
  • TTTScopeInfo.json
  • TUNIAPIRequestManager.json
  • TUNIAPMManager.json
  • TUNIAccelerometerManager.json
  • TUNIApDirectlyDeviceManager.json
  • TUNIAppInfoManager.json
  • TUNIAppleHealthManager.json
  • TUNIAudioManager.json
  • TUNIAuthorizeManager.json
  • TUNIBLEPairingManager.json
  • TUNIBaseMiniProgramManager.json
  • TUNIBluetoothManager.json
  • TUNICloudStorageSignatureManager.json
  • TUNICompassManager.json
  • TUNICountrySelectManager.json
  • TUNIDLCameraManager.json
  • TUNIDLIPCManager.json
  • TUNIDLMapManager.json
  • TUNIDLVideoManager.json
  • TUNIDLWebViewManager.json
  • TUNIDeviceActivationManager.json
  • TUNIDeviceControlManager.json
  • TUNIDeviceDetailManager.json
  • TUNIDeviceMotionManager.json
  • TUNIDeviceSceneManager.json
  • TUNIDiffLayerManager.json
  • TUNIDownloadFileManager.json
  • TUNIExtMiniAppInfoManager.json
  • TUNIFileManager.json
  • TUNIFontManager.json
  • TUNIGZLTabBarManager.json
  • TUNIGeofenceManager.json
  • TUNIGroupControlManager.json
  • TUNIGyroscopeManager.json
  • TUNIHomeDataManager.json
  • TUNIHomeDeviceListManager.json
  • TUNIIPCCameraManager.json
  • TUNIIPCCameraSettingsManager.json
  • TUNIIPCDoorbellManager.json
  • TUNIImageNetworkManager.json
  • TUNIImagePickerManager.json
  • TUNIInteractionManager.json
  • TUNILocalizationManager.json
  • TUNILocationManager.json
  • TUNILoginManager.json
  • TUNIMemoryWarningManager.json
  • TUNIMeshManager.json
  • TUNIMiniHighwayManager.json
  • TUNIMiniProgramManager.json
  • TUNINavigationBarManager.json
  • TUNINavigatorManager.json
  • TUNINetworkManager.json
  • TUNIOTAManager.json
  • TUNIOpenExtApiManager.json
  • TUNIOpenPageManager.json
  • TUNIP2pFileManager.json
  • TUNIPayManager.json
  • TUNIPhoneBluetoothManager.json
  • TUNIPhoneCallManager.json
  • TUNIPhoneClipboardManager.json
  • TUNIPhoneManager.json
  • TUNIPhoneNetworkManager.json
  • TUNIPhoneScreenManager.json
  • TUNIPhoneVibrateManager.json
  • TUNIRecordingManager.json
  • TUNIRouterManager.json
  • TUNIScanCodeManager.json
  • TUNISceneManager.json
  • TUNIScrollManager.json
  • TUNIShareManager.json
  • TUNISiriManager.json
  • TUNIStorageManager.json
  • TUNIThingControlManager.json
  • TUNITransferManager.json
  • TUNIUploadFileManager.json
  • TUNIUserInfoManager.json
  • TUNIUtilsManager.json
  • TUNIWatchManager.json
  • TUniAudioDetectManager.json
  • ThingUIConfig.json
  • UispecsSansCondensed-Bold.ttf
  • WatchManager.json
  • activator-ui-kit_definition.json
  • activator_auto_serach_capacity.json
  • activator_bluemesh_lottie_anim.json
  • activator_img_0.png
    .png
  • activator_search_device_loading.json
  • activator_search_lottie.json
  • activity_device_list.json
  • armed_homepage_ani_refresh_done.json
  • armed_homepage_ani_refresh_pull.json
  • armed_homepage_ani_refresh_refresh.json
  • asset_resource.json
  • ballwave.json
  • barcode_ssd_mobilenet_v1_dmp25_quant.tflite
  • bg_draw_home.png
    .png
  • bluemesh_asset_anim_bluetooth.json
  • bluemesh_asset_anim_progress.json
  • cers
  • configList.json
  • config_net_progress_lottie.json
  • countryCodes.json
  • countryList.en.json
  • countryList.zh-Hans.json
  • countryList.zh-Hant.json
  • customDeviceDetailConfig.json
  • default_iconfont.json
  • default_iconfont.ttf
  • default_miniapp_permission_config.json
  • device-detail_definition.json
  • deviceDetail.json
  • deviceEditConfigList.json
  • dp_sound.mp3
  • dynamic_config.json
  • fixed_key.bmp
  • gzlConstantCommon.js
  • gzlConstantExtraV8.js
  • gzlTheme.js
    .js
  • gzlUILanguage.js
  • gzlWidgetConstant.js
  • gzlWidgetjsBridge.js
    .js
  • gzl_config.json
  • h2.ca.der
  • homeDeviceCard.json
  • homeDeviceLinearCard.json
  • homeNav.json
  • homeRoomTab.json
  • homeSceneRecommendTab.json
  • homeSceneTab.json
  • home_fragment.json
  • home_fragment_new.json
  • home_light_scene_lottie.json
  • homepage_ani_refresh_done.json
  • homepage_ani_refresh_pull.json
  • homepage_ani_refresh_refresh.json
  • iconfont.json
  • iconfont.ttf
  • img_0.png
    .png
  • img_1.png
    .png
  • initializer_definition.json
  • intelligence_fragment.json
  • intelligence_shimmer_dark.json
  • intelligence_shimmer_light.json
  • jsBridgeService.js
    .js
  • jsBridgeWebView.js
    .js
  • lightHomeDeviceCard.json
  • lightSceneNav.json
  • lightSceneTab.json
  • light_ani_refresh_done.json
  • light_ani_refresh_pull.json
  • light_ani_refresh_refresh.json
  • light_lottie_music.json
  • light_number_iconfont.ttf
  • light_scene_lottie.json
  • lighting_scene_executing_anim.json
  • linkage_img_dark_0.png
    .png
  • linkage_img_light_0.png
    .png
  • linkage_shimmer_dark.json
  • linkage_shimmer_light.json
  • loading_launchpage_dark.json
  • loading_launchpage_light.json
  • messagepush-core_definition.json
  • miniContent.json
  • miniapp_AudioKit.js
    .js
  • miniapp_BaseKit.js
    .js
  • miniapp_BizKit.js
    .js
  • miniapp_CategoryCommonBizKit.js
    .js
  • miniapp_DeviceKit.js
    .js
  • miniapp_HomeKit.js
    .js
  • miniapp_IPCKit.js
    .js
  • miniapp_MapKit.js
    .js
  • miniapp_MediaKit.js
    .js
  • miniapp_MiniKit.js
    .js
  • miniapp_P2PKit.js
    .js
  • miniapp_PlayNetKit.js
    .js
  • miniapp_SweeperKit.js
    .js
  • miniapp_WatchManager.js
    .js
  • miniapp_ide_dom.js
    .js
  • miniapp_offline
    .gz
  • miniapp_offline.tar
    .tar .js
  • miniapp_offline/base_i18n_en.json
  • miniapp_offline/base_i18n_zh_Hans_CN.json
  • miniapp_offline/jssdk/service.js
    .js
  • miniapp_offline/jssdk/vconsole.js
    .js
  • miniapp_offline/jssdk/view.js
    .js
  • miniapp_offline/jssdk/widget.main.js
    .js
  • miniapp_offline/jssdk/widget.runtime.js
    .js
  • miniapp_offline/jssdk/widget.service.js
    .js
  • miniapp_offline/jssdk/widget.view.js
    .js
  • miniapp_offline/jssdk_info.json
  • miniapp_offline/offline_info.json
  • miniapp_offline/tycryc71qaug8at6yt/functional/app-config.json
  • miniapp_offline/tycryc71qaug8at6yt/functional/app-service.json
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/arrow-right.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/bg-bottom.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/bg-top.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/card-icon-group.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/card-icon-info.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/card-icon-network.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/card-icon-scene.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/card-icon-share.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/fish.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/logo-bg-block.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/logo-linear.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/logo.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/mall.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/triangle.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/assets/images/xiaodu.png
    .png
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/e9sfGg.js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/eo8LLi.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/esdEim.css
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/e7FRwz/e7X4WP/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/e7FRwz/e7X4WP/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/e7FRwz/g-1zqwLW/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/e7FRwz/g-1zqwLW/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-4wCfM.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/dehtb/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/dehtb/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/e7HK4I/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/e7HK4I/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/eoEBnD/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/eoEBnD/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/eufOls/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/eufOls/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/ev4X0I/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/ev4X0I/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f-l32Xg/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f-l32Xg/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f1stMS9/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f1stMS9/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f2kicoV/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/f2kicoV/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/g-1rcuop/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-4wCfM/f-wjhUq/g-1rcuop/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-Nch7i.js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/f-lTV9c.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/g-25QW1k.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/b1y/g-2ahenB.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/f-KmKgH.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/f1jYmD7.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/pages/detail/index.html
    .html .js
  • miniapp_offline/tycryc71qaug8at6yt/functional/pages/third/index.html
    .html .js
  • miniapp_offline/tycryc71qaug8at6yt/i18n_en.json
  • miniapp_offline/tycryc71qaug8at6yt/i18n_zh_Hans_CN.json
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/app-config.dark.json
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/app-config.json
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/app-service.json
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/cq0T/cq0T.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/cq0T/e7FRwz/dfDAu/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/cq0T/e7FRwz/dfDAu/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/cq0T/e7FRwz/dfDAv/e7f5ut.css.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/cq0T/e7FRwz/dfDAv/e7f5ut.tpl.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/e9sfGg.js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/eo8LLi.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/esdEim.css
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/f-lTV9c.js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/g-1u3Vtl.js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/g-25QW1k.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/b1y/g-2ahenB.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/f-KmKgH.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/f1jYmD7.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/g-179y1k.js
    .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/pages/tab1/index.html
    .html .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram/pages/tab2/index.html
    .html .js
  • miniapp_offline/tycryc71qaug8at6yt/miniprogram_info.json
  • mocktheme.json
  • module_app.json
  • multi_language_switching.json
  • od_ring_1.mp3
  • oned_auto_regressor_mobile.tflite
  • oned_feature_extractor_mobile.tflite
  • open_source_description.html
    .html .js
  • outdoors_panel_uiids.json
  • personalInfo.json
  • personal_about_config_list.json
  • personal_account_info_config_list.json
  • personal_account_security_config_list.json
  • personal_center_config_list.json
  • personal_center_pad_config_list.json
  • personal_center_toolbar_config_list.json
  • personal_more_setting_config_list.json
  • personal_privacy_setting_config_list.json
  • personal_setting_config_list.json
  • pins
  • polyfill.min.js
    .js
  • profilePicture.json
  • refrigerator.png
    .png
  • regions
  • res_file_map.json
  • scan.json
  • sceneAuto.json
  • sceneNav.json
  • sceneOneClick.json
  • sceneRecommend.json
  • sceneSceneTab.json
  • security_homepage_ani_refresh_done.json
  • security_homepage_ani_refresh_pull.json
  • security_homepage_ani_refresh_refresh.json
  • security_skills_config.json
  • security_skills_status_config.json
  • sha256.js
    .js
  • shoppingMall.json
  • shoppingMallDetail.json
  • size_config.json
  • skeleton_home_phone.png
    .png
  • skeleton_pad_dark.json
  • skeleton_pad_light.json
  • skeleton_phone_dark.json
  • skeleton_phone_light.json
  • strings.xml
  • style_2_iconfont.json
  • style_2_iconfont.ttf
  • style_3_iconfont.json
  • style_3_iconfont.ttf
  • style_default_iconfont.woff.json
  • style_default_iconfont.woff.ttf
  • t_s.bmp
  • tab_config.json
  • tab_mapper.json
  • tabbar_rn_config.json
  • tangram_path_config.json
  • tecrkcehc
  • tecrkcehc_ext
  • thingDuckBody.txt
  • thing_dpcprovider_config.json
  • thing_pbt_group_config.json
  • thing_plugin_config.json
  • thing_ui_biz_weather_anim_cloud.zip
    .zip
  • 多云json0610/data.json
  • thing_ui_biz_weather_anim_fog.zip
    .zip
  • 多云json0610/data.json
  • thing_ui_biz_weather_anim_rainy.zip
    .zip
  • __MACOSX/._data.json
  • data.json
  • thing_ui_biz_weather_anim_snow.zip
    .zip
  • 下雪json/data.json
  • thing_ui_biz_weather_anim_sunny.zip
    .zip
  • __MACOSX/ty_ui_biz_weather_anim_sunny/._.DS_Store
  • __MACOSX/ty_ui_biz_weather_anim_sunny/._data.json
  • ty_ui_biz_weather_anim_sunny/.DS_Store
  • ty_ui_biz_weather_anim_sunny/data.json
  • ty_ui_biz_weather_anim_sunny/images/img_0.webp
  • ty_ui_biz_weather_anim_sunny/images/img_1.webp
  • thing_wait_for_recognize.json
  • thingarchercell_config.json
  • thirdParty.json
  • thirdPartyMultiB.json
  • thirdPartySingleB.json
  • trackcontrol_definition.json
  • typb_login.json
  • ui_component_config.json
  • ui_config_default.json
  • ui_theme_config.json
  • use_case_config.json
  • view_suite_config.json
  • washingmachine.png
    .png
  • weather.json
  • weatherEmpty.json
  • weatherOrigin.json
  • weatherOriginEmpty.json
  • x_platform_config.json

Android Permissions

ALUTECH Smart_1.0.9_apkcombo.com.apk

Permissions

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH

android.permission.READ_MEDIA_IMAGES

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.FOREGROUND_SERVICE

com.google.android.c2dm.permission.RECEIVE

android.permission.POST_NOTIFICATIONS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.VIBRATE

com.android.vending.CHECK_LICENSE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_FULL_SCREEN_INTENT

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.SET_WALLPAPER

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS

android.permission.HIGH_SAMPLING_RATE_SENSORS