ay_1000[.]apk | Triage™

Resubmissions

22/02/2024, 17:48

240222-wdtnzsdc3y6

22/02/2024, 17:47

240222-wc5pvsdc2z6

Sharing

Copy URL Twitter E-mail

General

Target
ay_1000.apk
Size 31.4MB
Sample240222-wc5pvsdc2z
SHA256 8c4a2a5b5b55e5eb9fa279a316d678878958b7ee4ba69706d6d9c09e27cd7bed
MD5 f477959f3d3bb8d12e3450200a40cbd0
SHA1 cf8506f9f335e0779b568520dc991fb32284b3ba
SHA512 78f6d27bb9450e6f82c90cfb8aee75bcd250a5485734cf656ca2a43433e335cc8f7991dd019057cdfca77a1b5f8e362472905a24cfaa8fcb4e6a21e5411de6fc
SSDEEP 786432:8VkUWI5a/Z8JypTFDBWeLFIQsslktw/Dvt20lWO:pUWIGZCoTF1WeLvkuxH
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

ay_1000.apk

.apk 31.4MB

ay_1000.apk

SHA256 8c4a2a5b5b55e5eb9fa279a316d678878958b7ee4ba69706d6d9c09e27cd7bed
MD5 f477959f3d3bb8d12e3450200a40cbd0
SHA1 cf8506f9f335e0779b568520dc991fb32284b3ba
SHA512 78f6d27bb9450e6f82c90cfb8aee75bcd250a5485734cf656ca2a43433e335cc8f7991dd019057cdfca77a1b5f8e362472905a24cfaa8fcb4e6a21e5411de6fc
SSDEEP 786432:8VkUWI5a/Z8JypTFDBWeLFIQsslktw/Dvt20lWO:pUWIGZCoTF1WeLvkuxH
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.giraffe

com.speed.shadowsocks.ui.main.MainActivity

android.intent.action.MAIN android.service.quicksettings.action.QS_TILE_PREFERENCES android.intent.action.SEND

com.speed.shadowsocks.ui.SplashActivity

android.intent.action.MAIN

com.speed.shadowsocks.ui.main.TipAct1Activity

com.speed.shadowsocks.ui.option.TipPlatformsActivity

com.speed.shadowsocks.ui.login.LoginActivity

com.speed.shadowsocks.ui.login.GetBackPwdActivity

com.speed.shadowsocks.ui.login.ModifyPasswordActivity

com.speed.shadowsocks.ui.node.NodeListActivity

com.speed.shadowsocks.ui.option.UserInfoActivity

com.speed.shadowsocks.ui.option.PopupImageActivity

com.speed.shadowsocks.ui.option.FeedbackActivity

com.speed.shadowsocks.ui.main.DiscoverListActivity

com.speed.shadowsocks.ui.main.RegionListActivity

com.speed.shadowsocks.ui.option.NoticeActivity

com.speed.shadowsocks.ui.login.RegisterActivity

com.speed.shadowsocks.ui.option.UpdateVersionDialogActivity

com.speed.shadowsocks.ui.login.ProtocleActivity

com.speed.shadowsocks.ui.option.VersionDialogActivity

com.speed.shadowsocks.ui.option.OpenURLActivity

com.speed.shadowsocks.ui.option.BuyActivity

com.speed.shadowsocks.ui.base.MarkDownActivity

com.speed.shadowsocks.ui.option.diagnose.DiagnoseActivity

com.speed.shadowsocks.ui.option.WeChatPayActivity

com.speed.shadowsocks.ui.option.CardPayActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

com.stripe.android.paymentsheet.PaymentSheetActivity

com.stripe.android.paymentsheet.PaymentOptionsActivity

com.stripe.android.view.AddPaymentMethodActivity

com.stripe.android.view.PaymentMethodsActivity

com.stripe.android.view.PaymentFlowActivity

com.stripe.android.view.PaymentAuthWebViewActivity

com.stripe.android.view.PaymentRelayActivity

com.stripe.android.payments.StripeBrowserLauncherActivity

android.intent.action.VIEW

com.stripe.android.payments.core.authentication.threeds2.Stripe3ds2TransactionActivity

com.stripe.android.googlepaylauncher.StripeGooglePayActivity

com.stripe.android.googlepaylauncher.GooglePayLauncherActivity

com.stripe.android.googlepaylauncher.GooglePayPaymentMethodLauncherActivity

com.stripe.android.payments.paymentlauncher.PaymentLauncherConfirmationActivity

com.stripe.android.stripe3ds2.views.ChallengeActivity

com.xuexiang.xupdate.widget.UpdateDialogActivity

com.google.android.gms.common.api.GoogleApiActivity

Android Permissions

ay_1000.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MOUNT_FORMAT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.INTERACT_ACROSS_USERS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

com.bjchuhai.permission.MIPUSH_RECEIVE

android.permission.INSTALL_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ay_1000.apk

com.speed.shadowsocks.ui.main.MainActivity

com.speed.shadowsocks.ui.SplashActivity

com.speed.shadowsocks.ui.main.TipAct1Activity

com.speed.shadowsocks.ui.option.TipPlatformsActivity

com.speed.shadowsocks.ui.login.LoginActivity

com.speed.shadowsocks.ui.login.GetBackPwdActivity

com.speed.shadowsocks.ui.login.ModifyPasswordActivity

com.speed.shadowsocks.ui.node.NodeListActivity

com.speed.shadowsocks.ui.option.UserInfoActivity

com.speed.shadowsocks.ui.option.PopupImageActivity

com.speed.shadowsocks.ui.option.FeedbackActivity

com.speed.shadowsocks.ui.main.DiscoverListActivity

com.speed.shadowsocks.ui.main.RegionListActivity

com.speed.shadowsocks.ui.option.NoticeActivity

com.speed.shadowsocks.ui.login.RegisterActivity

com.speed.shadowsocks.ui.option.UpdateVersionDialogActivity

com.speed.shadowsocks.ui.login.ProtocleActivity

com.speed.shadowsocks.ui.option.VersionDialogActivity

com.speed.shadowsocks.ui.option.OpenURLActivity

com.speed.shadowsocks.ui.option.BuyActivity

com.speed.shadowsocks.ui.base.MarkDownActivity

com.speed.shadowsocks.ui.option.diagnose.DiagnoseActivity

com.speed.shadowsocks.ui.option.WeChatPayActivity

com.speed.shadowsocks.ui.option.CardPayActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

com.stripe.android.paymentsheet.PaymentSheetActivity

com.stripe.android.paymentsheet.PaymentOptionsActivity

com.stripe.android.view.AddPaymentMethodActivity

com.stripe.android.view.PaymentMethodsActivity

com.stripe.android.view.PaymentFlowActivity

com.stripe.android.view.PaymentAuthWebViewActivity

com.stripe.android.view.PaymentRelayActivity

com.stripe.android.payments.StripeBrowserLauncherActivity

com.stripe.android.payments.core.authentication.threeds2.Stripe3ds2TransactionActivity

com.stripe.android.googlepaylauncher.StripeGooglePayActivity

com.stripe.android.googlepaylauncher.GooglePayLauncherActivity

com.stripe.android.googlepaylauncher.GooglePayPaymentMethodLauncherActivity

com.stripe.android.payments.paymentlauncher.PaymentLauncherConfirmationActivity

com.stripe.android.stripe3ds2.views.ChallengeActivity

com.xuexiang.xupdate.widget.UpdateDialogActivity

com.google.android.gms.common.api.GoogleApiActivity

com.speed.shadowsocks.v2ray.service.V2RayVpnService

com.speed.shadowsocks.v2ray.service.V2RayVpnTestService

com.speed.shadowsocks.v2ray.service.QSTileService

com.speed.shadowsocks.service.LocalVPNService

com.speed.shadowsocks.widgets.update.UpdateService

com.xuexiang.xupdate.service.DownloadService

androidx.profileinstaller.ProfileInstallReceiver

androidx.core.content.FileProvider

me.dozen.dpreference.PreferenceProvider

com.xuexiang.xupdate.utils.UpdateFileProvider

com.flurry.android.agent.FlurryContentProvider

androidx.startup.InitializationProvider

Android Permissions

ay_1000.apk