General

  • Target

    xin.apk

  • Size

    99.0MB

  • MD5

    500d5e776f94c1de3071ee7c960095b1

  • SHA1

    9e57f2e9229c6a72f35ac62e4fbf2415d9f3a963

  • SHA256

    7c87abd35af392ea4eb008ef935a114119c4a3c4cfed689844b93581a7054558

  • SHA512

    af562b1213b6d2319e7d9b395d2268c428409d3592c2e428e33e54eb3b2b17b64f995d73f5ce2e95f9c4cd94a8d822107ec49fd44c17ef2b7a51fcc635456844

  • SSDEEP

    1572864:vXzXgceeK5WUbMf+eVZBUU9G9ZbAABZi72xQoSka9HD2G2G6acd1JQEkHmvbbyKV:rk3n8+eVT9G9ZcAVQL9HyG2G6TkGT51b

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 15 IoCs

Files

  • xin.apk
    .apk android arch:arm64

    com.xingin.xhs

    com.xingin.xhs.index.v2.IndexActivityV2


  • BEBAS.ttf
  • BeautifyEdit.json
  • BeautifyEdit3.json
  • Chapter_Guide.mp4
  • CircleDashTexture.png
    .png
  • DIN-Black.otf
  • DIN-BlackItalic.otf
  • DIN-OT-Medium.ttf
  • DVDirectory.cfg
  • DVHotMap.cfg
  • DVHotcity.cfg
  • DVSDirectory.cfg
  • DVStreet.cfg
  • DVVersion_pkg.cfg
  • FZLTCHJW.TTF
  • FilterRes.json
  • Layer_4_loading-2.png
    .png
  • Layer_5_loading-2.png
    .png
  • Layer_7_loading-2.png
    .png
  • Loading.json
  • PLACEHOLDER
  • REDNumber-Medium.ttf
  • ReportConfig.json
  • SDK_Default_Icon_Car.png
    .png
  • SDK_Default_Icon_End.png
    .png
  • SDK_Default_Icon_Passenger.png
    .png
  • SDK_Default_Icon_Start.png
    .png
  • SDK_Default_Route_Texture_Bule_Arrow.png
    .png
  • SDK_Default_Route_Texture_Gray_Arrow.png
    .png
  • SDK_Default_Traffic_Texture_Congestion.png
    .png
  • SDK_Default_Traffic_Texture_SevereCongestion.png
    .png
  • SDK_Default_Traffic_Texture_Slow.png
    .png
  • SDK_Default_Traffic_Texture_Smooth.png
    .png
  • SDK_SYNC_Default_Icon_End.png
    .png
  • SDK_SYNC_Default_Icon_Start.png
    .png
  • SDK_SYNC_Default_Way_Point_End.png
    .png
  • SDK_SYNC_Default_Way_Point_No_Pass.png
    .png
  • SDK_SYNC_Default_Way_Point_Passed.png
    .png
  • SDK_SYNC_Default_Way_Point_Start.png
    .png
  • TextStroke.json
  • VideoStyleTitle.json
  • VideoText.json
  • ads_slide_up.json
  • ads_video_loading.json
  • album_musical_note.json
  • alpha_beautify_settings.json
  • alpha_choose_link_type.zip
    .zip
  • __MACOSX/alpha_choose_link_type/._dsl.json
  • alpha_choose_link_type/dsl.json
  • alpha_goods_card.zip
    .zip
  • __MACOSX/alpha_goods_card/._.DS_Store
  • __MACOSX/alpha_goods_card/._dsl.json
  • alpha_goods_card/.DS_Store
  • alpha_goods_card/dsl.json
  • avatar_dark.zip
    .zip
  • __MACOSX/avatar_dark/._.DS_Store
  • __MACOSX/avatar_dark/._profile_live_avatar_darkmode.json
  • __MACOSX/avatar_dark/profile/._.DS_Store
  • avatar_dark/.DS_Store
  • avatar_dark/profile/.DS_Store
  • avatar_dark/profile/live_darkmode.png
    .png
  • avatar_dark/profile_live_avatar_darkmode.json
  • avatar_light.zip
    .zip
  • __MACOSX/avatar_light/._.DS_Store
  • __MACOSX/avatar_light/._profile_live_avatar_lightmode.json
  • __MACOSX/avatar_light/profile/._live_lightmode.png
  • avatar_light/.DS_Store
  • avatar_light/profile/live_lightmode.png
    .png
  • avatar_light/profile_live_avatar_lightmode.json
  • avatar_praise.json
  • background.mp4
  • baseline.prof
  • baseline.profm
  • brand_zone_banner.zip
    .zip
  • brand_zone_banner/dsl.json
  • bx.json
  • capa_capture_prop_guider.png
    .png
  • capa_common_click_anim.json
  • capa_download_props_loading.json
  • capa_edit_template_item_click.json
  • capa_explore_scroll_anim.json
  • capa_gesture_pinch_lottie.json
  • capa_gesture_sort_lottie.json
  • capa_gesture_template_click.json
  • capa_gesture_template_drag.json
  • capa_goods_note_add_goods_guide.json
  • capa_goods_note_del_goods_anim.json
  • capa_goods_note_del_goods_anim_night.json
  • capa_goods_note_image_guide.json
  • capa_goods_note_item_guide_anim.json
  • capa_goods_note_video_guide.json
  • capa_lottie_capture_face.json
  • capa_lottie_capture_face_0.png
    .png
  • capa_lottie_capture_face_1.png
    .png
  • capa_lottie_capture_face_2.png
    .png
  • capa_lottie_capture_prop_guider.json
  • capa_music.json
  • capa_play_music_wave.json
  • capa_template_click_0.png
    .png
  • capa_template_click_1.png
    .png
  • capa_template_drag_1.png
    .png
  • capa_template_drag_2.png
    .png
  • capa_template_hand.png
    .png
  • capa_text_guide.json
  • city_info_en.txt
  • city_info_zh_cn.txt
  • city_info_zh_tw.txt
  • clear.zip
    .zip
  • clear/data.json
  • clear/images/img_0.png
    .png
  • clear/images/img_1.png
    .png
  • coin.zip
    .zip
  • coin/data.json
  • coin/images/img_0.png
    .png
  • com.tencent.open.config.json
  • com.xingin.xhs.cert.pem
  • countdown.zip
    .zip
  • __MACOSX/countdown/._.DS_Store
  • countdown/.DS_Store
  • countdown/count.json
  • countdown/images/img_0.png
    .png
  • countdown/images/img_1.png
    .png
  • countdown/images/img_2.png
    .png
  • coupon_card.zip
    .zip
  • coupon_entrance.zip
    .zip
  • crashlytics-build.properties
  • dark_articel_like_cancel.json
  • dark_articel_like_confirm.json
  • dark_comment_like.json
  • dark_comment_like_cancel.json
  • data.json
  • default_fake_feed.json
  • default_topic_female.json
  • default_topic_male.json
  • doubleTapRed.json
  • double_click_like.json
  • double_click_like_v2.json
  • double_row_card_user_live.json
  • downloading_progress.json
  • drift_bottle.json
  • drift_bottle_bg.json
  • easygo.json
  • emoji
  • emoji_bucuo.json
  • emoji_buhao.json
  • emoji_cailei.json
  • emoji_tuijian.json
  • emoji_yiban.json
  • emotion_loading.json
  • explore_feed_scroll_anim.json
  • explore_like_smallcancel.json
  • fans.zip
    .zip
  • fd2x1e4e2x3f1v2b1s.dex
    .dex
  • film_player_loading_lottie.json
  • finish.json
  • float_coupon.zip
    .zip
  • float_lottery.zip
    .zip
  • float_red_packet.zip
    .zip
  • float_window_fold.json
  • floating_click_tips.json
  • follofeed_hey_merge.json
  • follofeed_hey_upload.json
  • follow_volume_guide_show.json
  • fontsfree_net_sf_compact_rounded_semibold.ttf
  • gift_combo.zip
    .zip
  • gift_rain_dialog_bg.zip
    .zip
  • goods.zip
    .zip
  • goods_recommend.zip
    .zip
  • goods_v2.zip
    .zip
  • gray_loading.json
  • guide_praise.zip
    .zip
  • h264.mp4
  • h5_qr_back.png
    .png
  • hey_anim_guide_scale.json
  • hey_anim_guide_slide.json
  • hey_bottle_img_0.png
    .png
  • hey_bottle_img_1.png
    .png
  • hey_bottle_img_10.png
    .png
  • hey_bottle_img_2.png
    .png
  • hey_bottle_img_3.png
    .png
  • hey_bottle_img_4.png
    .png
  • hey_bottle_img_5.png
    .png
  • hey_bottle_img_6.png
    .png
  • hey_bottle_img_7.png
    .png
  • hey_bottle_img_8.png
    .png
  • hey_bottle_img_9.png
    .png
  • hey_guide_detail_slide_next.json
  • hey_guide_detail_slide_pre.json
  • hey_guide_feed_detail.json
  • hey_guide_feed_shoot.json
  • hint_new_hey.json
  • icon_scale.9.png
    .png
  • image_template_slide_guide.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_10.png
    .png
  • img_11.png
    .png
  • img_12.png
    .png
  • img_13.png
    .png
  • img_14.png
    .png
  • img_15.png
    .png
  • img_16.png
    .png
  • img_17.png
    .png
  • img_18.png
    .png
  • img_19.png
    .png
  • img_2.png
    .png
  • img_20.png
    .png
  • img_21.png
    .png
  • img_22.png
    .png
  • img_23.png
    .png
  • img_24.png
    .png
  • img_26.png
    .png
  • img_27.png
    .png
  • img_28.png
    .png
  • img_29.png
    .png
  • img_3.png
    .png
  • img_30.png
    .png
  • img_31.png
    .png
  • img_32.png
    .png
  • img_33.png
    .png
  • img_34.png
    .png
  • img_35.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • img_8.png
    .png
  • img_9.png
    .png
  • img_kaihua_aishen.png
    .png
  • img_kaihua_laba.png
    .png
  • img_kaihua_xin.png
    .png
  • img_kaihua_xing.png
    .png
  • img_kaihua_xinxin.png
    .png
  • img_kaihua_zan.png
    .png
  • img_kuaikuai_bg.png
    .png
  • img_profile_post_0.png
    .png
  • img_profile_post_1.png
    .png
  • img_yuyingfang_d_icon.png
    .png
  • img_yuyingfang_d_icon_bg.png
    .png
  • index.json
  • indoor.rs
  • indoor.sty
  • jpush_close.png
    .png
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • light_articel_like_cancel.json
  • light_articel_like_confirm.json
  • light_cap.zip
    .zip
  • light_comment_like.json
  • light_comment_like_cancel.json
  • light_face.zip
    .zip
  • light_fire.zip
    .zip
  • light_grass.zip
    .zip
  • light_guide.zip
    .zip
  • light_heart.zip
    .zip
  • light_like.zip
    .zip
  • light_rock.zip
    .zip
  • light_star.zip
    .zip
  • like_big.json
  • like_big_cancel.json
  • like_big_cancel_dark.json
  • like_big_dark.json
  • like_fills.json
  • like_fills_cancel.json
  • like_small.json
  • like_small_cancel.json
  • like_video.json
  • lineDashTexture.png
    .png
  • line_texture.png
    .png
  • live_a.json
  • live_darkmode.png
    .png
  • live_lightmode.png
    .png
  • live_like.json
  • loading_dark_mode.json
  • loading_light_mode.json
  • logo_h.png
    .png
  • logo_l.png
    .png
  • machine_body.png
    .png
  • main_bottombtn_down.9.png
    .png
  • main_bottombtn_up.9.png
    .png
  • main_icon_zoomin.png
    .png
  • main_icon_zoomin_dis.png
    .png
  • main_icon_zoomout.png
    .png
  • main_icon_zoomout_dis.png
    .png
  • main_topbtn_down.9.png
    .png
  • main_topbtn_up.9.png
    .png
  • map.rs
  • map.sty
  • master_loading.json
  • mediaplayer.zip
    .zip
  • model.zip
    .zip
  • more_square.zip
    .zip
  • music_wave_black.json
  • music_wave_white.json
  • nns_cover_background.json
  • nns_phonogram.json
  • note_detail_live_avatar_darkmode.json
  • note_detail_live_avatar_lightmode.json
  • notedetail_image_white_loading.json
  • order.zip
    .zip
  • page_score_five.json
  • page_score_four.json
  • page_score_one.json
  • page_score_three.json
  • page_score_two.json
  • phone_brand.json
  • pinyin.zip
    .zip
  • pk_center.zip
    .zip
  • pk_left_like_1000.zip
    .zip
  • pk_loading.zip
    .zip
  • pk_loading_avatar.zip
    .zip
  • pk_right_like_1000.zip
    .zip
  • pk_search_success.zip
    .zip
  • player_progress.zip
    .zip
  • profile_post_anim.json
  • progress.json
  • pull_down_anim.json
  • pulldown_equip.json
  • pulldown_loading.json
  • ranking.zip
    .zip
  • ranking_live_top.zip
    .zip
  • red-mp-cfg.json
  • red_packet_rain.zip
    .zip
  • reduct.rs
  • reduct.sty
  • room_big_praise.json
  • room_subscribe_bell.json
  • room_subscribe_bell_night.json
  • room_subscribe_guide.json
  • room_subscribe_guide_night.json
  • search_device.json
  • send_paper.json
  • send_paper_night.json
  • sentry-debug-meta.properties
  • settings.json
  • share_live.json
  • side_img_0.png
    .png
  • side_img_1.png
    .png
  • sideslip.json
  • sky_wheel_entrance_v2.zip
    .zip
  • slide_guide.png
    .png
  • speaking_ripple.json
  • special_mode_img_0.png
    .png
  • special_mode_img_1.png
    .png
  • special_mode_img_2.png
    .png
  • special_mode_img_3.png
    .png
  • special_mode_img_4.png
    .png
  • special_mode_img_5.png
    .png
  • special_mode_img_6.png
    .png
  • splash_ad_eight.zip
    .zip
  • splash_ad_six.zip
    .zip
  • splash_dynamic_logo.json
  • square.zip
    .zip
  • star_big.json
  • star_big_cancel.json
  • star_fills.json
  • star_fills_cancel.json
  • star_small.json
  • star_small_cancel.json
  • star_video.json
  • street.sty
  • style_loading.webp
  • supplierconfig.json
  • surprise_box.js
    .js
  • surprise_box.json
  • surprise_coupon.json
  • surprise_coupon_card.json
  • surprise_pack.json
  • switch_live.zip
    .zip
  • text.zip
    .zip
  • traffic.rs
  • traffic.sty
  • video_avatar_follow.json
  • video_avatar_live.json
  • video_loading.json
  • video_loading.zip
    .zip
  • video_split.json
  • video_tab_volume_tip.zip
    .zip
  • voice_blue.json
  • voice_myself_light_dark.json
  • voice_other_dark.json
  • voice_other_light.json
  • voice_record.json
  • voice_red.json
  • voice_white.json
  • wave.json
  • wave_18.json
  • wave_bgm.json
  • wave_bgm_v2.json
  • wear_zoom_in.png
    .png
  • wear_zoom_in_pressed.png
    .png
  • wear_zoom_out_pressed.png
    .png
  • wear_zoon_out.png
    .png
  • wish_gift_bubble.zip
    .zip
  • zan_cancel.json
  • zan_tap.json
  • zhuan_chang.json

Android Permissions

xin.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.BROADCAST_STICKY

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

com.google.android.gms.permission.AD_ID

android.permission.VIBRATE

com.xingin.xhs.permission.MIPUSH_RECEIVE

com.vivo.notification.permission.BADGE_ICON

com.meizu.flyme.push.permission.RECEIVE

com.xingin.xhs.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.xingin.xhs.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.xingin.xhs.permission.JPUSH_MESSAGE

android.permission.WRITE_SETTINGS

android.permission.EXPAND_STATUS_BAR

getui.permission.GetuiService.com.xingin.xhs

android.permission.CHANGE_NETWORK_STATE

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.MANAGE_MEDIA_PROJECTION

android.permission.WRITE_CALENDAR

android.permission.BLUETOOTH_CONNECT

android.permission.SCHEDULE_EXACT_ALARM

android.permission.READ_CALENDAR

com.huawei.meetime.CAAS_SHARE_SERVICE

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

com.huawei.android.launcher.permission.CHANGE_BADGE