ay_1000[.]apk | Triage

General

Target

ay_1000.apk
Size

31.4MB
MD5

f477959f3d3bb8d12e3450200a40cbd0
SHA1

cf8506f9f335e0779b568520dc991fb32284b3ba
SHA256

8c4a2a5b5b55e5eb9fa279a316d678878958b7ee4ba69706d6d9c09e27cd7bed
SHA512

78f6d27bb9450e6f82c90cfb8aee75bcd250a5485734cf656ca2a43433e335cc8f7991dd019057cdfca77a1b5f8e362472905a24cfaa8fcb4e6a21e5411de6fc
SSDEEP

786432:8VkUWI5a/Z8JypTFDBWeLFIQsslktw/Dvt20lWO:pUWIGZCoTF1WeLvkuxH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Files

ay_1000.apk
.apk android arch:arm

com.giraffe

com.speed.shadowsocks.ui.SplashActivity

Activities

com.speed.shadowsocks.ui.main.MainActivity

android.intent.action.MAIN
android.service.quicksettings.action.QS_TILE_PREFERENCES
android.intent.action.SEND

com.speed.shadowsocks.ui.SplashActivity

android.intent.action.MAIN

com.stripe.android.payments.StripeBrowserLauncherActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MOUNT_FORMAT_FILESYSTEMS
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.VIBRATE
android.permission.INTERACT_ACROSS_USERS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.CAMERA
com.android.vending.BILLING
android.permission.FOREGROUND_SERVICE
com.bjchuhai.permission.MIPUSH_RECEIVE
android.permission.INSTALL_PACKAGES

Receivers

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE

Services

com.speed.shadowsocks.v2ray.service.V2RayVpnService

android.net.VpnService

com.speed.shadowsocks.v2ray.service.V2RayVpnTestService

android.net.VpnService

com.speed.shadowsocks.v2ray.service.QSTileService

android.service.quicksettings.action.QS_TILE

com.speed.shadowsocks.service.LocalVPNService

android.net.VpnService

Android Permissions

ay_1000.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MOUNT_FORMAT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.INTERACT_ACROSS_USERS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

com.android.vending.BILLING

android.permission.FOREGROUND_SERVICE

com.bjchuhai.permission.MIPUSH_RECEIVE

android.permission.INSTALL_PACKAGES

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.giraffe

com.speed.shadowsocks.ui.SplashActivity

Activities

com.speed.shadowsocks.ui.main.MainActivity

com.speed.shadowsocks.ui.SplashActivity

com.stripe.android.payments.StripeBrowserLauncherActivity

Permissions

Receivers

androidx.profileinstaller.ProfileInstallReceiver

Services

com.speed.shadowsocks.v2ray.service.V2RayVpnService

com.speed.shadowsocks.v2ray.service.V2RayVpnTestService

com.speed.shadowsocks.v2ray.service.QSTileService

com.speed.shadowsocks.service.LocalVPNService

Android Permissions

ay_1000.apk