General

  • Target

    iBiliPlayer-bilih5.apk

  • Size

    115.9MB

  • MD5

    f8eb5b937eefd33e16184b9790b54e35

  • SHA1

    f16aef29257602d8196e8d4e85954eee9c901953

  • SHA256

    27de168553c6805b41654a852eabc858dcbfd989d3afdc8ddb4075a26890cadf

  • SHA512

    e7762527c415e0d3c426f404700efad293e5450451773cb3609c4642a4b14c1afe76552f8a0cf2b6cfb0501e22d59cc881f3c7cdfca3921b3141ca8267f06acb

  • SSDEEP

    3145728:EOW8oaDQ/36smq18LkIHCcRSnYjDgB2ZKW40R3F:EOWC/aEpngYvgcZKalF

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 14 IoCs

Files

  • iBiliPlayer-bilih5.apk
    .apk android arch:arm64

    tv.danmaku.bili

    tv.danmaku.bili.MainActivityV2


  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97.3.videotransition
    .zip
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur18v9.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur1v1.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur3v4.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur4v3.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur9v16.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/blur9v18.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/cover.png
    .png
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/info.json
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/white_block.png
    .png
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask18v9.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask1v1.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask3v4.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask4v3.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask9v16.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97/wipemask9v18.xml
    .xml
  • 0F241EB7-BD8C-491F-BC46-8776FEDA4C97.lic
  • 26ADF2EC-9D9C-4F69-8CCD-7981715B7EB2.1.animatedsticker
    .zip
  • 26ADF2EC-9D9C-4F69-8CCD-7981715B7EB2/cover.png
    .png
  • 26ADF2EC-9D9C-4F69-8CCD-7981715B7EB2/info.json
  • 26ADF2EC-9D9C-4F69-8CCD-7981715B7EB2/sticker.xml
    .xml
  • 26ADF2EC-9D9C-4F69-8CCD-7981715B7EB2.lic
  • AlphaTexture.fsh
  • C9393534-8568-4528-BEF9-E6F9F6513E73.1.lic
  • C9393534-8568-4528-BEF9-E6F9F6513E73.1.videofx
    .zip
  • C9393534-8568-4528-BEF9-E6F9F6513E73/fx.xml
    .xml
  • C9393534-8568-4528-BEF9-E6F9F6513E73/info.json
  • C9393534-8568-4528-BEF9-E6F9F6513E73/xiaomeihao.png
    .png
  • D-DIN-Bold.otf
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD.compoundcaption
    .zip
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/0c5b5f0752699c5619de1ff2eb8c2a8d.png
    .png
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/25478.png
    .png
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion18v9.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion1v1.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion3v4.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion4v3.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion9v16.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap0tion9v18.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion18v9.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion1v1.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion3v4.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion4v3.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion9v16.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/cap1tion9v18.xml
    .xml
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD/info.json
  • D6CF564E-040A-460B-83BA-2CEF62E6F8CD.lic
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3.captionstyle
    .zip
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/cover.png
    .png
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/info.xml
    .xml
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/style.xml
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/style1v1.xml
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/style4v3.xml
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3/style9v16.xml
  • ECA8E84A-EAAB-4335-8CC7-46BA31FDA7D3.lic
  • F37EA59A-95FF-479A-A5E3-C447A7FFC1EB.3.animatedsticker
    .zip
  • F37EA59A-95FF-479A-A5E3-C447A7FFC1EB/cover.png
    .png
  • F37EA59A-95FF-479A-A5E3-C447A7FFC1EB/info.json
  • F37EA59A-95FF-479A-A5E3-C447A7FFC1EB/sticker.xml
    .xml
  • F37EA59A-95FF-479A-A5E3-C447A7FFC1EB.lic
  • Flat.fsh
  • OESTexture.fsh
  • Pattern.fsh
  • RadialGradient.fsh
  • RecordTexture.fsh
  • RecordVertex.vsh
  • Shadow.fsh
  • ShadowVertex.vsh
  • Texture.fsh
  • Vertex.vsh
  • ab.json
  • ad_more.png
    .js
  • ad_return.png
    .png
  • ad_sound.png
    .png
  • ad_sound_mute.png
    .png
  • agileplugin.json
  • app-load-report.js
    .js
  • appbase_1661149883752.zip
    .zip
  • 1661149883752.version
  • service.base.js
    .js
  • shell.html
    .html .js
  • version.sapp
  • vue.runtime.js
    .js
  • authorspace_fanswall.ttf
  • backgroundColor.xml
    .xml
  • bangumi_count_down.json
  • bangumi_current_watching_ep.svga
  • bangumi_detail_playing.json
  • bangumi_detail_playing_night.json
  • bangumi_follow_guide_light_lottie.json
  • bangumi_follow_guide_night_lottie.json
  • bangumi_full_screen_like_triple.json
    .js
  • bangumi_full_screen_like_triple_unlogin.json
    .js
  • bangumi_half_screen_like_triple.json
    .js
  • bangumi_half_screen_like_triple_unlogin.json
    .js
  • bangumi_player_follow_guide.json
  • bangumi_player_follow_guide_night.json
  • baseline.prof
  • baseline.profm
  • bili_app_headset_ip_pause.json
  • bili_app_headset_ip_play.json
  • bili_app_triple_custom_success.svga
  • bili_avatar_living_animation.json
  • bili_player_guide_tip_dark.svga
  • bili_player_guide_tip_fullscreen_landscape.svga
  • bili_player_guide_tip_fullscreen_vertical.svga
  • bili_player_guide_tip_normal.svga
  • bilingsp.bs
    .gz
  • bilingsp.js
    .js
  • br_loading.json
  • bundles.json
  • camera_scene_port.json
  • caption.json
  • chat_gpt_like_lottie.json
  • chat_gpt_like_lottie_night.json
  • cheese_lottie_playing_day.json
  • cheese_lottie_playing_large_day.json
  • cheese_lottie_playing_large_night.json
  • cheese_lottie_playing_night.json
  • china_area_list.json
  • click_interaction.json
  • column_share_image.js
    .js
  • column_share_img_loading.json
  • com.tencent.open.config.json
  • config.json
  • countdown.json
  • country_code.json
  • cron_package
    .zip
  • danmaku.ttf
  • dd.json
  • din-Medium.otf
  • double.json
  • double_night.json
  • dsa_priv.pem
  • dumixar.license
  • easygo.json
  • editor_tab_template_anim.json
  • emotes.json
  • enter_intelligence_clip_anim.json
  • enter_intelligence_clip_anim_new.json
    .js
  • faceidmodel.bin
  • fan_medal_level.ttf
  • fragment.glsl
  • gesture_control_setting_click_danmaku_to_thumbup_or_report.json
  • gesture_control_setting_double_click_by_double_finger.json
  • gesture_control_setting_long_click_show_triple_speed.json
  • gesture_control_setting_rotation_or_enlarge_by_double_finger.json
  • gift_open_lottie.json
  • gift_shake_lottie.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • h5_qr_back.png
    .png
  • hmsincas.bks
  • hmsrootcas.bks
  • home_tab_publish_day.svga
  • home_tab_publish_night.svga
  • hot_list.json
  • hot_list_block.json
  • hot_list_loading.json
  • hot_list_restricted_mode.json
  • https%3A%2F%2Fs1.hdslb.com%2Fbfs%2Fstatic%2Fmall-c%2Fstatic%2Fcss%2Ffrom.8ed1c19f258779ab3ec8de8619bc2d2d.css
  • https%3A%2F%2Fs1.hdslb.com%2Fbfs%2Fstatic%2Fmall-c%2Fstatic%2Fcss%2Finternational.d77164f8267a165b0f176d44fdeed2c2.css
  • https%3A%2F%2Fs1.hdslb.com%2Fbfs%2Fstatic%2Fmall-c%2Fstatic%2Fjs%2Finternational.43dc88be05af651b8f08.js
    .js
  • https%3A%2F%2Fs1.hdslb.com%2Fbfs%2Fstatic%2Fmall-c%2Fstatic%2Fjs%2Fmanifest.92ff44b49b1aea3c1a5d.js
    .js
  • https%3A%2F%2Fs1.hdslb.com%2Fbfs%2Fstatic%2Fmall-c%2Fstatic%2Fjs%2Fvendor.32f29b5a7291ba710781.js
    .js
  • ic_player_remote_link_check.json
  • ic_player_remote_switch_device.json
  • ic_projection_float.json
  • ic_tv_loading.json
  • iconfont.ttf
  • im_clear_complete.json
  • img_0.png
    .png
  • img_editor_clip_fake.png
    .png
  • inline_click_to_dislike.json
  • inline_click_to_dislike_night.json
  • inline_click_to_like.json
  • inline_click_to_like_night.json
  • inline_player_seek_bar_tv_drag.json
  • inline_player_seek_bar_tv_stop.json
  • inline_seek_guide_animation.json
  • inline_triple_like.json
    .js
  • int_load.json
  • int_water.json
  • intelligence_analysis_anim.json
  • intelligence_analysis_anim_new.json
  • intelligence_loading_0.png
    .png
  • intelligence_loading_1.png
    .png
  • intelligence_loading_10.png
    .png
  • intelligence_loading_11.png
    .png
  • intelligence_loading_12.png
    .png
  • intelligence_loading_13.png
    .png
  • intelligence_loading_14.png
    .png
  • intelligence_loading_15.png
    .png
  • intelligence_loading_16.png
    .png
  • intelligence_loading_17.png
    .png
  • intelligence_loading_18.png
    .png
  • intelligence_loading_19.png
    .png
  • intelligence_loading_2.png
    .png
  • intelligence_loading_20.png
    .png
  • intelligence_loading_21.png
    .png
  • intelligence_loading_22.png
    .png
  • intelligence_loading_23.png
    .png
  • intelligence_loading_24.png
    .png
  • intelligence_loading_25.png
    .png
  • intelligence_loading_26.png
    .png
  • intelligence_loading_27.png
    .png
  • intelligence_loading_28.png
    .png
  • intelligence_loading_29.png
    .png
  • intelligence_loading_3.png
    .png
  • intelligence_loading_4.png
    .png
  • intelligence_loading_5.png
    .png
  • intelligence_loading_6.png
    .png
  • intelligence_loading_7.png
    .png
  • intelligence_loading_8.png
    .png
  • intelligence_loading_9.png
    .png
  • libwbsafeedit
    .elf linux arm
  • live.json
  • live_feed_guide_ani.svga
  • live_ic_live.json
  • live_loading.json
  • live_multi_voice_animation.svga
  • live_record_player_seek_bar_tv_1.json
  • live_record_player_seek_bar_tv_2.json
  • live_state.json
  • liveanimation.json
  • login_loading.json
  • lottie_pay_loading.json
  • mall_config.json
  • metadata.json
  • mini_player_double_tap_hint.json
  • music_podcast_animation_playing.json
  • music_podcast_triple_animation_coin.svga
  • music_podcast_triple_animation_favorite.svga
  • music_podcast_triple_animation_like.svga
  • native-es5-inline.html
    .html .js
  • native-es5.html
    .html
  • native-es5.js
    .js
  • normal_danmaku.cron
    .zip
  • oswald-medium-webfont.ttf
  • ott-Regular.otf
  • pic_scene_port.json
  • player_danmaku_recommand.json
  • player_danmaku_recommand_new.json
  • player_extension_contract_card_light.json
  • player_extension_contract_card_wing.json
  • player_follow_guide.json
  • player_follow_guide2.json
  • player_follow_guide_night.json
  • player_full_screen_like_triple.json
    .js
  • player_interact_default_skin.png
    .png
  • player_interact_gradient.png
    .png
  • player_is_playing_day.json
  • player_live_avatar_anim.json
  • player_loading_tv.json
  • player_loading_tv_green.json
  • player_loading_tv_ogv_movie.json
  • player_playlist_anim_playing.json
  • player_seek_bar_tv_1.json
  • player_seek_bar_tv_2.json
  • player_seek_bar_tv_buffer_loading.json
  • player_triple_like_animation.svga
  • player_triple_like_animation_without_fires.svga
  • player_wave_light_pink.json
  • preload.json
  • pull_in.xml
    .xml
  • pull_out.xml
    .xml
  • pull_up_interaction.json
  • qr_scan_loading.json
  • record.json
  • record_all.json
  • region3.json
  • rsa_public_key.pem
  • share_config.json
  • share_img_loading.json
  • simple_season_lottie_wave.json
  • single.json
  • single_night.json
  • space_header_pull_down_tips.svga
  • start_intelligence_clip_anim.json
  • story_coin_lottie_v1.json
  • story_double_tap.json
  • story_enter_live_room.json
  • story_favorite_lottie_v1.json
  • story_guide_scroll.svga
  • story_horizontal_scroll.json
  • story_landscape_left_and_right_slide.json
  • story_landscape_long_press.json
  • story_landscape_up_and_down_slide_left.json
  • story_landscape_up_and_down_slide_right.json
  • story_like_combo.svga
  • story_like_lottie.json
  • story_live_no_circle.json
  • story_playing_icon.json
  • story_seek_bar_icon_1.json
  • story_seek_bar_icon_2.json
  • story_single_tap.json
  • story_transform_guide.json
  • story_triple_speed_bottom_guide.svga
  • story_triple_speed_top_guide.svga
  • super_chat_translating.gif
    .gif
  • supplierconfig.json
  • test.avif
  • tf_rules.json
  • theseus_detail_playing.json
  • theseus_detail_playing_night.json
  • theseus_follow_guide_light_lottie.json
  • theseus_follow_guide_night_lottie.json
  • triple_speed_display.json
  • triple_speed_display_guide.json
  • typeface.ttf
  • upper_bold.otf
  • upper_camera_audio_track_loading.json
  • upper_material_loading_animation.json
  • upper_medium.otf
  • upper_music_beat_bar_graph.json
  • upper_regular.otf
  • uppper_player_tv_loading.json
  • vers.json
  • vertex.glsl
  • video_uploading.json
  • vip_exchange_ani.svga
  • wallets_default.json
  • white_line_buffering.json
  • white_tv_loadding.json
  • xx-DIN-Regular.ttf
  • xx-bin-Regular.ttf

Android Permissions

iBiliPlayer-bilih5.apk

Permissions

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.HIGH_SAMPLING_RATE_SENSORS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.BLUETOOTH

android.permission.BLUETOOTH_CONNECT

android.permission.CAMERA

android.permission.ACCESS_ALL_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.WRITE_MEDIA_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH_ADMIN

android.permission.REORDER_TASKS

android.permission.RECORD_AUDIO

android.permission.SET_WALLPAPER

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_FINE_LOCATION

MediaStore.Images.Media.INTERNAL_CONTENT_URI

MediaStore.Images.Media.EXTERNAL_CONTENT_URI

com.huawei.meetime.CAAS_SHARE_SERVICE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_LOGS

tv.danmaku.bili.permission.MIPUSH_RECEIVE

tv.danmaku.bili.permission.BLKV

android.permission.RECEIVE_BOOT_COMPLETED

tv.danmaku.bili.permission.PROCESS_PUSH_MSG

tv.danmaku.bili.permission.PUSH_PROVIDER

com.asus.msa.SupplementaryDID.ACCESS