14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc

Sharing

Copy URL Twitter E-mail

General

Target

14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc
Size

29.8MB
MD5

7952b2be26b363c9512308ac66d62306
SHA1

abc48233d8c01acb2503b383c5fe677b09d31f0d
SHA256

14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc
SHA512

fddc63d76882d61422d4989ac9dd2799a605443b838374e022c9ef0d898c8d6b9398cccab4c5c625126e10ac2f84a5e0c06ff7f5af7c16c6eeee9d571bdeb83a
SSDEEP

786432:WLPqfpfuI543iNH9rjt7oKhXtOpl0Srd3hsoz:lxfx9NhFov0yd35

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 22 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR

Files

14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc
.apk android arch:arm

com.xiaomi.smarthome

com.xiaomi.smarthome.SmartHomeMainActivity

Activities

com.xiaomi.smarthome.scene.SmartHomeLauncherActivity

com.xiaomi.smarthome.scene.smarthomelauncher

com.xiaomi.smarthome.device.utils.DeviceLauncher2

com.xiaomi.smarthome.action.viewdevice
com.xiaomi.smarthome.action.openshop
android.intent.action.VIEW
android.intent.action.VIEW

com.xiaomi.smarthome.wificonfig.KuailianLauncher

com.xiaomi.smarthome.action.startkuailian

com.xiaomi.smarthome.miio.activity.ClientAllLockedActivity

com.xiaomi.smarthome.lockscreen

com.xiaomi.smarthome.framework.page.DeviceMoreActivity

com.xiaomi.smarthome.action.devicemore

com.xiaomi.smarthome.shop.activity.DeviceShopWeiboShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.xiaomi.smarthome.auth.AuthCheckActivity

com.xiaomi.smarthome.action.authactivity

com.xiaomi.smarthome.SmartHomeMainActivity

android.intent.action.MAIN

org.sipdroid.sipua.ui.PSTN

android.intent.action.SENDTO

org.sipdroid.sipua.ui.SIP

android.intent.action.SENDTO

com.xiaomi.jr.MiFinanceActivity

android.intent.action.MAIN

com.xiaomi.jr.MiFiSettingsActivity

android.intent.action.VIEW

com.xiaomi.jr.NotificationActivity

android.intent.action.VIEW

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_WELCOME
com.xiaomi.account.action.XIAOMI_ACCOUNT_LOGIN

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_QUICK_LOGIN

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_REG

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_AREA_CODE

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_UNACTIVATED

com.xiaomi.passport.ui.LicenseActivity

com.xiaomi.account.action.VIEW_LICENSE

com.xiaomi.passport.LocalFeatures.GetStsUrlActivity

com.xiaomi.account.action.XIAOMI_STS_URL

com.xiaomi.jr.verification.SystemGuideActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.VIBRATE
android.permission.NFC
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_FIND_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_COARWAKE_LOCKSE_LOCATION
android.permission.MANAGE_ACCOUNTS
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.INTERACT_ACROSS_USERS
com.xiaomi.channel.GAME_SERVICE_PERMISSION
android.permission.TRANSMIT_IR
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.CALL_PHONE
android.permission.FLASHLIGHT
android.permission.WRITE_SECURE_SETTINGS
miui.permission.ACCESS_BLE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.CONNECTIVITY_INTERNAL
com.xiaomi.vip.permission.SERVICE
android.permission.PEERS_MAC_ADDRESS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
com.xiaomi.market.sdk.UPDATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.xiaomi.smarthome.permission.MIPUSH_RECEIVE
android.permission.USE_FINGERPRINT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTING
com.android.launcher.permission.WRITE_SETTING
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.RECORD_AUDIO
android.permission.READ_CONTACTS
android.permission.DISABLE_KEYGUARD
com.xiaomi.permission.AUTH_SERVICE
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
com.xiaomi.smarthome.permission.ACCESS_DOWNLOAD_PROVIDER
com.xiaomi.smarthome.permission.ACCESS_DOWNLOAD_MANAGER
com.xiaomi.smarthome.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED
com.xiaomi.smarthome.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_CONTACTS
android.permission.BROADCAST_STICKY
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.xiaomi.permission.CLOUD_MANAGER
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_SMS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
com.xiaomi.passport.permission.PASSPORT_UI_CONTROLLER_SERVICE
android.permission.BATTERY_STATS
android.permission.ACCESS_COARSE_UPDATES

Receivers

com.xiaomi.smarthome.framework.push.PushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.xiaomi.smarthome.framework.openapi.OpenApiReceiver

com.xiaomi.smarthome.action.OPEN_API

com.xiaomi.smarthome.wificonfig.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
com.xiaomi.smarthome.receive_alarm

com.xiaomi.smarthome.miio.page.DownloadBroadcastReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.xiaomi.smarthome.wificonfig.WIFIScanHomelogReceiver

com.xiaomi.smarthome.wifiscanservice.SCAN_RESULTS
com.xiaomi.smarthome.wifiscanservice.STATE_CHANGE
com.xiaomi.smarthome.wifiscanservice.USER_PRESENT
com.xiaomi.smarthome.wifiscanservice.CONNECTIVITY_CHANGE

com.xiaomi.smarthome.notificationquickop.QuickNotiOpReceiver

com.xiaomi.smarthome.scene.execute_success
com.xiaomi.smarthome.scene.execute_failed

com.xiaomi.smarthome.framework.bluetooth.BluetoothReceiver

android.intent.action.MEDIA_BUTTON

com.xiaomi.smarthome.device.DeviceBroadcastReceiver

com.xiaomi.smarthome.RECEIVE_MESSAGE

com.xiaomi.smarthome.device.bluetooth.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.xiaomi.smarthome.framework.account.MiAccountChangeReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED

com.xiaomi.smarthome.notificationquickop.AuthExpiredReceiver

com.xiaomi.smarthome.notification.auth_expired

org.sipdroid.sipua.ui.Caller

android.intent.action.NEW_OUTGOING_CALL

org.sipdroid.sipua.ui.Receiver

android.intent.action.BOOT_COMPLETED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE
android.intent.action.PACKAGE_REPLACED

org.sipdroid.sipua.ui.PhoneStart

org.sipdroid.START_SIPDROID
org.sipdroid.STOP_SIPDROID

com.xiaomi.smarthome.notishortcut.inward.NotificationChangeReceiver

com.xiaomi.smarthome.notishortcut.notification_setting_open
com.xiaomi.smarthome.notishortcut.notification_setting_close
com.xiaomi.smarthome.notishortcut.notification_click
com.xiaomi.smarthome.notishortcut.action_on_logout
com.xiaomi.smarthome.notishortcut.action_on_login_success
com.xiaomi.smarthome.notishortcut.device_change

com.xiaomi.jr.common.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.xiaomi.smarthome.framework.openapi.OpenApiService

com.xiaomi.smarthome.action.OPEN_API

com.xiaomi.smarthome.miio.camera.QueryCameraThumbService

com.xiaomi.smarthome.miio.camera.QueryCameraThumbAction

com.xiaomi.smarthome.auth.AuthService

com.xiaomi.smarthome.action.AuthService

com.xiaomi.passport.MiPassportUIControllerService

com.xiaomi.account.action.UI_CONTROLLER_SERVICE

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.accounts.AccountAuthenticator

com.xiaomi.account.openid.OpenIdAuthService

android.intent.action.XIAOMI_ACCOUNT_AUTHORIZE
SmartHomeBugHelper.apk
.apk android

com.xiaomi.smarthomebughelper

com.xiaomi.smarthomebughelper.MainActivity

Activities
catalog-7-6.1-release.apk
.apk android

com.xiaomi.catalog
hack.apk
.apk android
main-24-91.2-release.apk
.apk android

com.mijiashop.main
pinwei-2-2.0-release.apk
.apk android

com.xiaomi.pinwei

Android Permissions

14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.VIBRATE

android.permission.NFC

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_FIND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARWAKE_LOCKSE_LOCATION

android.permission.MANAGE_ACCOUNTS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.INTERACT_ACROSS_USERS

com.xiaomi.channel.GAME_SERVICE_PERMISSION

android.permission.TRANSMIT_IR

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.WRITE_SECURE_SETTINGS

miui.permission.ACCESS_BLE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.CONNECTIVITY_INTERNAL

com.xiaomi.vip.permission.SERVICE

android.permission.PEERS_MAC_ADDRESS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

com.xiaomi.market.sdk.UPDATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.xiaomi.smarthome.permission.MIPUSH_RECEIVE

android.permission.USE_FINGERPRINT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTING

com.android.launcher.permission.WRITE_SETTING

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.RECORD_AUDIO

android.permission.READ_CONTACTS

android.permission.DISABLE_KEYGUARD

Sharing

General

Malware Config

Signatures

Files

com.xiaomi.smarthome

com.xiaomi.smarthome.SmartHomeMainActivity

Activities

com.xiaomi.smarthome.scene.SmartHomeLauncherActivity

com.xiaomi.smarthome.device.utils.DeviceLauncher2

com.xiaomi.smarthome.wificonfig.KuailianLauncher

com.xiaomi.smarthome.miio.activity.ClientAllLockedActivity

com.xiaomi.smarthome.framework.page.DeviceMoreActivity

com.xiaomi.smarthome.shop.activity.DeviceShopWeiboShareActivity

com.facebook.CustomTabActivity

com.xiaomi.smarthome.auth.AuthCheckActivity

com.xiaomi.smarthome.SmartHomeMainActivity

org.sipdroid.sipua.ui.PSTN

org.sipdroid.sipua.ui.SIP

com.xiaomi.jr.MiFinanceActivity

com.xiaomi.jr.MiFiSettingsActivity

com.xiaomi.jr.NotificationActivity

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.passport.ui.LicenseActivity

com.xiaomi.passport.LocalFeatures.GetStsUrlActivity

com.xiaomi.jr.verification.SystemGuideActivity

Permissions

Receivers

com.xiaomi.smarthome.framework.push.PushReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.smarthome.framework.openapi.OpenApiReceiver

com.xiaomi.smarthome.wificonfig.BootCompletedReceiver

com.xiaomi.smarthome.miio.page.DownloadBroadcastReceiver

com.xiaomi.smarthome.wificonfig.WIFIScanHomelogReceiver

com.xiaomi.smarthome.notificationquickop.QuickNotiOpReceiver

com.xiaomi.smarthome.framework.bluetooth.BluetoothReceiver

com.xiaomi.smarthome.device.DeviceBroadcastReceiver

com.xiaomi.smarthome.device.bluetooth.MediaButtonReceiver

com.xiaomi.smarthome.framework.account.MiAccountChangeReceiver

com.xiaomi.smarthome.notificationquickop.AuthExpiredReceiver

org.sipdroid.sipua.ui.Caller

org.sipdroid.sipua.ui.Receiver

org.sipdroid.sipua.ui.PhoneStart

com.xiaomi.smarthome.notishortcut.inward.NotificationChangeReceiver

com.xiaomi.jr.common.NetworkStatusReceiver

Services

com.xiaomi.smarthome.framework.openapi.OpenApiService

com.xiaomi.smarthome.miio.camera.QueryCameraThumbService

com.xiaomi.smarthome.auth.AuthService

com.xiaomi.passport.MiPassportUIControllerService

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.account.openid.OpenIdAuthService

com.xiaomi.smarthomebughelper

com.xiaomi.smarthomebughelper.MainActivity

Activities

com.xiaomi.catalog

com.mijiashop.main

com.xiaomi.pinwei

Android Permissions

14cfa8d42d7f8a59fb95d32f86e31366baa6feb370a77f97df73041c80b669fc