General

  • Target

    aliexpress-8-90-2.apk

  • Size

    112.7MB

  • MD5

    68076914e57364bfbb83d18d2a09530e

  • SHA1

    27802355919b60e26231f702a6258a1926f6c2d4

  • SHA256

    cdf6604e02a5c0c7624f222460ad676aa1af622e2f01212ba9ce34683bbc5c34

  • SHA512

    055383d4839d86325c779eabe4ad2625f192cc847d0401fcd969a0d006bf59f673fa4ce2a8b262aca3f7f5167b1446515a4510476825fb1365bbe344b7a383de

  • SSDEEP

    1572864:65bL2aVewlHkuPQeAJScdILtyAVaSYn1sUt2EwHtY4Rs66deXluPWaeBDICCthrx:WPfVemEumJNIwn1s82EatZWQVu7CC44

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 17 IoCs

Files

  • aliexpress-8-90-2.apk
    .apk android arch:arm64 arch:arm

    com.alibaba.aliexpresshd

    com.aliexpress.app.FirstActivity


Android Permissions

aliexpress-8-90-2.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_MEDIA_LOCATION

android.permission.READ_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CAMERA

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.RECORD_AUDIO

android.permission.REORDER_TASKS

android.permission.FOREGROUND_SERVICE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.READ_CONTACTS

com.android.providers.media.MediaProvider

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

com.hihonor.security.permission.ACCESS_THREAT_DETECTION

com.alibaba.aliexpresshd.permission.PROCESS_PUSH_MSG

com.alibaba.aliexpresshd.permission.PUSH_PROVIDER

com.google.android.c2dm.permission.RECEIVE

android.permission.POST_NOTIFICATIONS

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.alibaba.aliexpresshd.permission.MIPUSH_RECEIVE

com.taobao.taobao.permission.C2D_MESSAGE

android.permission.FLASHLIGHT

android.permission.USE_FINGERPRINT

android.permission.MANAGE_FINGERPRINT

cn.org.ifaa.permission.USE_IFAA_MANAGER