General

  • Target

    com.xiaomi.hm.health_5.0.1.apk

  • Size

    113.3MB

  • MD5

    6b9795de5fe6db6823bdf5c6b114c060

  • SHA1

    3651a53b7e7ffc8b4e949593311b2eccd5c31dd7

  • SHA256

    6781579e47cd747d51d065d073543b61384d4d4fe1bf7d7a6ecc44b33d2d9db5

  • SHA512

    acf4fc2cdce6260e41ba68834f4217c79a00393013fc6c0e9b270c70428297adfda2a4f216b4cbc8f30de961afc4d056a028471308c41821b0ee16eb23d15a1d

  • SSDEEP

    3145728:Kj1PJGh+np8SgWIv6bcpMmZmePEozUwl1i/QdrM:i1kI6XW2CsdcoQ41HM

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 14 IoCs

Files

  • com.xiaomi.hm.health_5.0.1.apk
    .apk android arch:arm64

    com.xiaomi.hm.health

    com.xiaomi.hm.health.activity.StartUpActivity


  • 0.mp3
  • 1.mp3
  • 10.mp3
  • 100.mp3
  • 11.mp3
  • 12.mp3
  • 12BB667E-32CC-4511-BB3E-07BE054A2896.6.png
    .png
  • 12BB667E-32CC-4511-BB3E-07BE054A2896.6.videofx
    .zip
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/cover.jpg
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx18v9.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx1v1.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx3v4.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx4v3.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx9v16.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/fx9v18.xml
    .xml
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/info.json
  • 12BB667E-32CC-4511-BB3E-07BE054A2896/sunnyDay.mslut
  • 12BB667E-32CC-4511-BB3E-07BE054A2896.lic
  • 13.mp3
  • 14.mp3
  • 15.mp3
  • 1574129084405.mp3
  • 1574129084405.webp
  • 1574129238105.mp3
  • 1574129238105.webp
  • 1574129356025.mp3
  • 1574129356025.webp
  • 16.mp3
  • 17.mp3
  • 18.mp3
  • 19.mp3
  • 2.mp3
  • 20.mp3
  • 21.mp3
  • 22.mp3
  • 23.mp3
  • 24.mp3
  • 25.mp3
  • 26.mp3
  • 27.mp3
  • 28.mp3
  • 29.mp3
  • 3.mp3
  • 30.mp3
  • 31.mp3
  • 32.mp3
  • 33.mp3
  • 3304-145-716eacc1bb8393a26dd3be0a13cc4874.lic
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698.5.png
    .png
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698.5.videofx
    .zip
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/cover.jpg
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx18v9.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx1v1.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx3v4.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx4v3.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx9v16.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/fx9v18.xml
    .xml
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/info.json
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698/pattern.png
    .png
  • 33F513E5-5CA2-4C23-A6D4-8466202EE698.lic
  • 34.mp3
  • 35.mp3
  • 36.mp3
  • 37.mp3
  • 38.mp3
  • 39.mp3
  • 3DFly.flb
  • 3DFly.loc
  • 3DFly.tmc
  • 3d_navi_sky_day.data
    .png
  • 3d_sky_day.data
    .png
  • 3d_sky_night.data
    .png
  • 3dlandscape.xml
  • 3dportrait.xml
  • 4.mp3
  • 40.mp3
  • 41.mp3
  • 42.mp3
  • 43.mp3
  • 44.mp3
  • 45.mp3
  • 46.mp3
  • 47.mp3
  • 48.mp3
  • 49.mp3
  • 5.mp3
  • 50.mp3
  • 51.mp3
  • 52.mp3
  • 53.mp3
  • 54.mp3
  • 55.mp3
  • 56.mp3
  • 57.mp3
  • 58.mp3
  • 59.mp3
  • 6.mp3
  • 60.mp3
  • 61.mp3
  • 62.mp3
  • 63.mp3
  • 64.mp3
  • 65.mp3
  • 66.mp3
  • 67.mp3
  • 68.mp3
  • 69.mp3
  • 7.mp3
  • 70.mp3
  • 71.mp3
  • 72.mp3
  • 73.mp3
  • 74.mp3
  • 75.mp3
  • 76.mp3
  • 77.mp3
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166.2.png
    .png
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166.2.videofx
    .zip
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/cover.jpg
    .jpg
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx18v9.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx1v1.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx3v4.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx4v3.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx9v16.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/fx9v18.xml
    .xml
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166/info.json
  • 77A658D9-C6FD-4B8C-975E-6F08E4C34166.lic
  • 78.mp3
  • 79.mp3
  • 8.mp3
  • 80.mp3
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250.2.png
    .png
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250.2.videofx
    .zip
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/cover.jpg
    .jpg
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx18v9.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx1v1.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx3v4.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx4v3.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx9v16.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/fx9v18.xml
    .xml
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/info.json
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250/jingdian.mslut
  • 807EB4BC-2FD0-46FA-B607-ABA3F6CE7250.lic
  • 81.mp3
  • 82.mp3
  • 83.mp3
  • 84.mp3
  • 85.mp3
  • 86.mp3
  • 87.mp3
  • 88.mp3
  • 89.mp3
  • 9.mp3
  • 90.mp3
  • 91.mp3
  • 92.mp3
  • 93.mp3
  • 94.mp3
  • 95.mp3
  • 96.mp3
  • 97.mp3
  • 98.mp3
  • 99.mp3
  • AZURE.png
    .png
  • AmazonEmberDisplay_Lt.ttf
  • AmazonEmberDisplay_Md.ttf
  • AmazonEmberDisplay_Rg.ttf
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9.1.png
    .png
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9.1.videofx
    .zip
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/cover.jpg
    .jpg
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx18v9.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx1v1.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx3v4.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx4v3.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx9v16.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/fx9v18.xml
    .xml
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/info.json
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9/luvletter.mslut
  • B73EA76D-9F9C-4C9B-AD62-009F950AB7B9.lic
  • BLUE.png
    .png
  • BebasKai-Regular.otf
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52.2.png
    .png
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52.2.videofx
    .zip
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/cover.png
    .png
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx18v9.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx1v1.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx3v4.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx4v3.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx9v16.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/fx9v18.xml
    .xml
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/info.json
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52/rixi.mslut
  • C8C90F0B-2120-4D1A-A538-F59BA39D8F52.lic
  • CYAN.png
    .png
  • E14FEE65-71A0-4717-9D66-3397B6C11223.5.animatedsticker
    .zip
  • E14FEE65-71A0-4717-9D66-3397B6C11223/cover.png
    .png
  • E14FEE65-71A0-4717-9D66-3397B6C11223/info.json
  • E14FEE65-71A0-4717-9D66-3397B6C11223/sticker.xml
    .xml
  • E14FEE65-71A0-4717-9D66-3397B6C11223.lic
  • GNaviConfig.xml
  • GREEN.png
    .png
  • HM03.fw
  • HM05.fw
  • HM07.fw
  • HM08.fw
  • HM0D.fw
  • HM_JsBridge.js
    .js
  • HuaShan.fw
  • Huaihe_OTA.bin
  • Inhale.mp3
  • MAGENTA.png
    .png
  • Mili.fw
  • Mili_1a.fw
  • Mili_amazfit.fw
  • Mili_amazfit_kx.fw
  • Mili_chongqing.fw
  • Mili_chongqing.res
  • Mili_hankou.fw
  • Mili_hankou.res
  • Mili_hr.fw
  • Mili_pro.ft
  • Mili_pro.ft.en
  • Mili_pro.fw
  • Mili_pro_53.fw
  • Mili_pro_i.fw
  • Mili_pro_tph.fw
  • Mili_pro_tph_as7000.fw
  • Mili_pro_tph_indian.fw
  • Mili_qinling.fw
  • Mili_rocky.fw
  • Mili_wuhan.ft
  • Mili_wuhan.ft.kj
  • Mili_wuhan.fw
  • Mili_wuhan.res
  • Mili_wuhan_tr.fw
  • ORANGE.png
    .png
  • Oswald-Regular.ttf
  • RED.png
    .png
  • ROSE.png
    .png
  • TZDB.dat
  • VIOLET.png
    .png
  • YELLOW.png
    .png
  • _01.mp3
  • _02.mp3
  • _03.mp3
  • _04.mp3
  • _05.mp3
  • _06.mp3
  • _07.mp3
  • _08.mp3
  • _09.mp3
  • _10.mp3
  • _11.mp3
  • _12.mp3
  • _13.mp3
  • _14.mp3
  • _15.mp3
  • _16.mp3
  • _17.mp3
  • _18.mp3
  • _19.mp3
  • agreement.json
  • already_cycled.mp3
  • already_run.mp3
  • already_walk.mp3
  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • amap_sdk_lineDashTexture_circle.png
    .png
  • amap_sdk_lineDashTexture_square.png
    .png
  • amap_sdk_lineTexture.png
    .png
  • ap.data
    .png
  • ap1.data
    .png
  • api_key.txt
  • arrow_line_inner.png
    .png
  • arrow_line_outer.png
    .png
  • arrow_line_shadow.png
    .png
  • bktile.data
    .png
  • bktile_n.data
    .png
  • building.data
    .png
  • bumping.ogg
  • bumping_tone.ogg
  • bumping_tone_great.ogg
  • bumping_tone_pitch.ogg
  • bumping_tone_well_done.ogg
  • com.tencent.open.config.json
  • come_on.mp3
  • common_200000.zip
    .zip
  • completed_training.mp3
  • config_1_16_1560339683.data
    .gz
  • config_2_16_1560339691.data
    .gz
  • crossing_day_bk.data
    .png
  • crossing_nigth_bk.data
    .png
  • dash.data
    .png
  • dash_cd.data
    .png
  • dash_tq.data
    .png
  • default-config.txt
  • dincond_medium.otf
  • discovery_201200.zip
    .zip
  • dot.mp3
  • eagle_eye_day.png
    .png
  • eagle_eye_night.png
    .png
  • empty_voice.mp3
  • experience.json
  • expiration.mp3
  • faster.mp3
  • findphone.mp3
  • firmwares.json
  • first_action.mp3
  • fog.png
    .png
  • go.mp3
  • gps_alm.bin
  • gps_lost.mp3
  • gps_regained.mp3
  • great.mp3
  • h5_qr_back.png
    .png
  • haze.png
    .png
  • hold_your_breath.mp3
  • hour.mp3
  • hr.mp3
  • hud.png
    .png
  • hundred.mp3
  • icons-for_custom_5_14.data
    .zip
  • icons_1_16_1561444603.data
    .gz
  • icons_25_16_1560344307.data
    .gz
  • icons_2_16_1560344131.data
    .gz
  • icons_3_16_1560517561.data
    .gz
  • icons_4_16_1560344142.data
    .gz
  • icons_50_16_1541648499.data
    .gz
  • icons_5_16_1561028345.data
    .gz
  • icons_6_16_1560344646.data
    .gz
  • icons_7_16_1560344652.data
    .gz
  • icons_8_16_1560344658.data
    .gz
  • icons_9_16_1560344664.data
    .gz
  • infowindow_bg.9.png
    .png
  • insist_on_five_seconds.mp3
  • kilometer.mp3
  • km_per_hour.mp3
  • last_action.mp3
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • licence.conf
  • lineround.data
    .png
  • location_map_gps_3d.png
    .png
  • location_map_gps_locked.png
    .png
  • location_pressed.png
    .png
  • location_selected.png
    .png
  • location_unselected.png
    .png
  • long
  • map_indoor_select.png
    .png
  • mapprofile_1_16_1560563265.data
    .gz
  • mapprofile_2_16_1560563265.data
    .gz
  • maps_dav_compass_needle_large.png
    .png
  • marker_default.png
    .png
  • marker_gps_no_sharing.png
    .png
  • mile.mp3
  • mile_per_hour.mp3
  • minute.mp3
  • modelSh
  • music1.mp3
  • music2.mp3
  • near_kilometer_spent.mp3
  • near_mile_spent.mp3
  • next_action.mp3
  • num_1.mp3
  • num_2.mp3
  • num_3.mp3
  • num_4.mp3
  • num_5.mp3
  • num_6.mp3
  • num_7.mp3
  • num_8.mp3
  • num_9.mp3
  • num_ten_10.mp3
  • num_ten_20.mp3
  • num_ten_30.mp3
  • num_ten_40.mp3
  • num_ten_50.mp3
  • num_ten_60.mp3
  • num_ten_70.mp3
  • num_ten_80.mp3
  • num_ten_90.mp3
  • number_hundred.mp3
  • offline_model.json.zip
    .zip
  • offlinemapv4.png
  • original.png
    .png
  • pace.mp3
  • pai_progress_blue.json
  • pai_progress_green.json
  • pai_progress_orange.json
  • pai_value_ripple_blue.json
  • pai_value_ripple_green.json
  • pai_value_ripple_orange.json
  • point.glsl
  • point_2.glsl
  • privacy.json
  • rain.png
    .png
  • res.zip
    .zip
  • roadarrow.data
    .png
  • run_pause.mp3
  • run_resume.mp3
  • run_start.mp3
  • run_stop.mp3
  • sdec
  • search_scenic_icon.data
    .png
  • seconds.mp3
  • short
  • slower.mp3
  • snow.png
    .png
  • speed.mp3
  • std
  • style-for_custom_0_16_1561381751.data
    .gz
  • style_0_16_1561381751.data
    .gz
  • style_100_16_1561026477.data
    .gz
  • style_17_16_1561023816.data
    .gz
  • style_1_16_1562032355.data
    .gz
  • style_3_16_1561987623.data
    .gz
  • style_4_16_1561711243.data
    .gz
  • style_50_16_1501671321.data
    .gz
  • style_5_16_1561711250.data
    .gz
  • style_6_16_1562032423.data
    .gz
  • styleiconslist.data
  • sun_0.png
    .png
  • sun_1.png
    .png
  • take_rest.mp3
  • take_rest_over.mp3
  • ten_thousand.mp3
  • texture.glsl
  • texture_layer.glsl
  • texture_normal.glsl
  • thousand.mp3
  • tick.mp3
  • time_spent.mp3
  • times.mp3
  • timezones.json
  • tmc_allinone.data
    .png
  • tmc_l_allinone.data
    .png
  • tmc_n_allinone.data
    .png
  • tpac.json
  • tracelinetexture.png
    .png
  • training_bg.mp3
  • training_more_than_half.mp3
  • two.mp3
  • us_states.json
  • waterline.data
    .png
  • weight.fw
  • weight_bfs.fw
  • weight_bfs_h.fw
  • weight_scale2.fw
  • whistle.mp3
  • workout_pause.mp3
  • workout_resume.mp3
  • zoomin_pressed.png
    .png
  • zoomin_selected.png
    .png
  • zoomin_unselected.png
    .png
  • zoomout_pressed.png
    .png
  • zoomout_selected.png
    .png
  • zoomout_unselected.png
    .png

Android Permissions

com.xiaomi.hm.health_5.0.1.apk

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.GET_TASKS

com.xiaomi.permission.AUTH_SERVICE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

com.xiaomi.market.sdk.UPDATE

miui.permission.READ_STEPS

com.xiaomi.channel.GAME_SERVICE_PERMISSION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.ACTIVITY_RECOGNITION

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

com.xiaomi.hm.health.permission.MIPUSH_RECEIVE

com.xiaomi.hm.health.permission.MAPS_RECEIVE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.SET_ALARM

com.android.alarm.permission.SET_ALARM

android.permission.DISABLE_KEYGUARD

com.xiaomi.hm.health.permission.READ_USER

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.REORDER_TASKS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE