163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c

Sharing

Copy URL Twitter E-mail

General

Target
163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c
Size 14.8MB
Sample231023-cblqtafe27
SHA256 163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c
MD5 15af9a80c1bd022cba280dff80ad2665
SHA1 a01f9e86ddaae45eea8ea56ddc480c2798368ea1
SHA512 a42d52b7562f36e4f0caf1a94c11ae736dd5fa163899f863890b1925aa32810a4ce6d70089dd59d71c19f19beed487c45d91b90a5c9ab9473748e034c994ef7d
SSDEEP 393216:WldQDeN98SfCfFh+z16p4LLYT0QcD8GHBRaM0yPY:WldQrSfCfFhIoSLLY88Ip04Y
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an application to recognize physical activity.	android.permission.ACTIVITY_RECOGNITION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c

.apk 14.8MB
.jgapp

16B
baseline.prof

1KB
baseline.profm

186B
libjiagu.so

.elf 668KB
libjiagu_a64.so

.elf 869KB

163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c

SHA256 163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c
MD5 15af9a80c1bd022cba280dff80ad2665
SHA1 a01f9e86ddaae45eea8ea56ddc480c2798368ea1
SHA512 a42d52b7562f36e4f0caf1a94c11ae736dd5fa163899f863890b1925aa32810a4ce6d70089dd59d71c19f19beed487c45d91b90a5c9ab9473748e034c994ef7d
SSDEEP 393216:WldQDeN98SfCfFh+z16p4LLYT0QcD8GHBRaM0yPY:WldQrSfCfFhIoSLLY88Ip04Y
MD5 SHA1 SHA512 SSDEEP

net.homesafe

com.safe.permission.PermissionDialogActivity

com.safe.activity.EntryActivity

android.intent.action.MAIN

com.safe.activity.AssistantActivity

com.safe.login.LoginActivity

com.safe.main.MainActivity

com.safe.about.AboutActivity

com.safe.billing.SubscriptionActivity

android.intent.action.VIEW

com.safe.remote.ConfigActivity

com.safe.map.ShowMapActivity

com.safe.map.LocationPlaybackActivity

com.safe.storage.RecordingFileListActivity

com.safe.storage.RecordingFolderListActivity

com.safe.call.CallActivity

com.safe.playback.PlaybackActivity

com.safe.activity.SwitcherActivity

com.safe.main.overlay.DemoVideoActivity

com.google.android.gms.ads.AdActivity

com.safe.sender.LoginCallbackActivity

android.intent.action.VIEW

com.safe.main.me.DetectionActivity

com.safe.main.me.AdvancedSettingsActivity

com.safe.main.me.ConnectivityActivity

com.safe.geofencing.GeoFencingActivity

com.safe.main.WebViewActivity

com.safe.main.TVCaptureActivity

com.google.android.libraries.places.widget.AutocompleteActivity

com.google.firebase.auth.internal.GenericIdpActivity

android.intent.action.VIEW

com.google.firebase.auth.internal.RecaptchaActivity

android.intent.action.VIEW

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.android.billingclient.api.ProxyBillingActivity

Android Permissions

163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.ACTIVITY_RECOGNITION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_COARSE_LOCATION

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.android.vending.BILLING

net.homesafe.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

File Explorer

163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c

com.safe.permission.PermissionDialogActivity

com.safe.activity.EntryActivity

com.safe.activity.AssistantActivity

com.safe.login.LoginActivity

com.safe.main.MainActivity

com.safe.about.AboutActivity

com.safe.billing.SubscriptionActivity

com.safe.remote.ConfigActivity

com.safe.map.ShowMapActivity

com.safe.map.LocationPlaybackActivity

com.safe.storage.RecordingFileListActivity

com.safe.storage.RecordingFolderListActivity

com.safe.call.CallActivity

com.safe.playback.PlaybackActivity

com.safe.activity.SwitcherActivity

com.safe.main.overlay.DemoVideoActivity

com.google.android.gms.ads.AdActivity

com.safe.sender.LoginCallbackActivity

com.safe.main.me.DetectionActivity

com.safe.main.me.AdvancedSettingsActivity

com.safe.main.me.ConnectivityActivity

com.safe.geofencing.GeoFencingActivity

com.safe.main.WebViewActivity

com.safe.main.TVCaptureActivity

com.google.android.libraries.places.widget.AutocompleteActivity

com.google.firebase.auth.internal.GenericIdpActivity

com.google.firebase.auth.internal.RecaptchaActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.android.billingclient.api.ProxyBillingActivity

com.safe.service.LongService

com.safe.service.GeoService

com.safe.map.locationhistory.LocationHistoryService

com.safe.voice.RecognitionServiceTrampoline

com.safe.voice.AssistLoggerService

com.safe.voice.AssistLoggerSessionService

com.safe.service.ListenerService

com.safe.service.GcmService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.safe.map.locationhistory.LocationHistoryGeofenceBroadcastReceiver

com.safe.map.locationhistory.ActivityTransitionReceiver

com.safe.geofencing.GeofenceBroadcastReceiver

com.safe.receiver.MainReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.safe.base.VProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

.jgapp

baseline.prof

baseline.profm

libjiagu.so

libjiagu_a64.so

Android Permissions

163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c