ap[.]apk | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

ap.apk
Size

11.9MB
MD5

7507ea4f1f90bd66b87effdc82076d4b
SHA1

086950d110fde1fd3ac0a7c25d83084b7adfcee0
SHA256

acb9cb7c8c8cc09bd3de1388e1e72b3ce6ddaa9fd8a26c86da42881d7cc568cd
SHA512

d4a3ed3abd4c4e839e0fb37d55a834408ab535f99aef70c41430b9d9660c045106319045beea940ec8882a0dd7e38be51cb9f1343511bf1820e07dc5638fd598
SSDEEP

196608:3idTbExZtkNa/esahvR++esrXfpC52SJIkvKFwuG7QBNydD8fQS72SVIjS6n5EmC:SpExsQeth5VesrXhCJIZwuGcBNydIfQc

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

Processes:

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by print services to bind with the system. Allows apps to provision and manage printers.	android.permission.BIND_PRINT_SERVICE
Required by control services to bind with the system. Allows apps to contribute controls to the System UI.	android.permission.BIND_CONTROLS

Requests dangerous framework permissions 12 IoCs

Processes:

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Files

ap.apk
.apk android arch:arm arch:arm64

com.apkpure.aegon

com.apkpure.aegon.main.activity.SplashActivity

Activities

com.apkpure.aegon.main.activity.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.tencent.qqlive.module.videoreport.scheme.SchemeRouterActivity

android.intent.action.VIEW

com.google.android.gms.tagmanager.TagManagerPreviewActivity

android.intent.action.VIEW

Permissions

com.google.android.gms.permission.AD_ID
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BIND_ACCESSIBILITY_SERVICE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_INTENT_SENDER_INTENT
android.permission.REORDER_TASKS
android.permission.FOREGROUND_SERVICE
oppo.permission.OPPO_COMPONENT_SAFE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.GET_PACKAGE_SIZE
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.apkpure.aegon.permission.PROCESS_PUSH_MSG
com.apkpure.aegon.permission.PUSH_PROVIDER
android.permission.BROADCAST_STICKY
com.huawei.android.launcher.permission.CHANGE_BADGE
com.vivo.notification.permission.BADGE_ICON
com.tencent.assistant.permission.A_PERMISSION
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SCHEDULE_EXACT_ALARM
android.permission.USE_FULL_SCREEN_INTENT
android.permission.EXPAND_STATUS_BAR
com.apkpure.aegon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.apkpure.aegon.application.RealApplicationLike$FTNetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.apkpure.aegon.app.event.SystemBootEvent$Receiver

android.intent.action.BOOT_COMPLETED

com.apkpure.aegon.app.event.SystemPackageEvent$Receiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.apkpure.aegon.person.event.NotificationEvent

notification_cancelled
notification_clicked

com.apkpure.aegon.event.receiver.PowerConnectionReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.apkpure.aegon.event.receiver.BatteryLevelReceiver

android.intent.action.BATTERY_LOW
android.intent.action.BATTERY_OKAY

com.google.android.gms.analytics.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.HwHostPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.apkpure.assistant.syscomponent3.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.tencent.rmonitor.natmem.NatMemReceiver

com.tencent.rmonitor.natmem.USAGE_DUMP
com.tencent.rmonitor.natmem.LEAK_DUMP

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.san.core.receiver.AppPkgReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.apkpure.aegon.services.AutoInstallService

android.accessibilityservice.AccessibilityService

com.apkpure.aegon.services.PushFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

com.apkpure.aegon.plugin.push.hw.HwHostDemoHmsMessageService

com.huawei.push.action.MESSAGING_EVENT

com.apkpure.assistant.syscomponent.MediaBrowserService

android.media.browse.MediaBrowserService

com.apkpure.assistant.syscomponent.MediaRouteProviderService2

android.media.MediaRoute2ProviderService

com.apkpure.assistant.syscomponent.MediaRouteProviderService

android.media.MediaRouteProviderService

com.apkpure.assistant.syscomponent2.OppoCycleService

com.cleanmaster.action.sdk.CleanService

com.apkpure.assistant.syscomponent3.MediaPlaybackService

android.intent.action.MEDIA_BUTTON

com.apkpure.assistant.syscomponent3.PrintService

android.printservice.PrintService

com.apkpure.assistant.syscomponent3.TTSService

android.intent.action.TTS_SERVICE

com.apkpure.assistant.syscomponent4.ControlsService

android.service.controls.ControlsProviderService

com.apkpure.assistant.syscomponent4.VanishingArtService

com.qualcomm.qti.haven.telemetry.service.TelemetryJService

com.apkpure.assistant.syscomponent4.McGradyPeService

com.huawei.android.powerkit.PowerKitService

com.apkpure.assistant.syscomponent4.RebootService

android.intent.action.RESOLVE_INSTANT_APP_PACKAGE
android.intent.action.REVIEW_ACCESSIBILITY_SERVICES

com.apkpure.assistant.syscomponent4.AppMarketService

com.samsung.android.app.watchmanager.INSTALL_APP

com.apkpure.assistant.syscomponent4.IUHostManagerService

com.samsung.android.hostmanager.service.IUHostManager

com.apkpure.assistant.syscomponent4.ReservedService

com.goolge.android.service.reserved

com.apkpure.assistant.syscomponent4.CloudSettingsService

miui.action.CLOUD_BACKUP_SETTINGS
miui.action.CLOUD_RESTORE_SETTINGS

com.apkpure.assistant.syscomponent4.GMSService

com.google.android.gms.gcm.ACTION_TASK_READY

com.apkpure.assistant.syscomponent4.ColorSafeService

com.coloros.safecenter.ColorAppServicesManagerClient

com.apkpure.assistant.syscomponent4.ColorGestureService

com.coloros.gesture.ColorAppServicesManagerClient

com.apkpure.assistant.syscomponent4.OpenUDIDService

org.OpenUDID.GETUDID

com.apkpure.assistant.syscomponent4.TgpaService

com.ihoc.mgpa.ACTION_DATAFORWARD

com.apkpure.assistant.syscomponent4.ProfileStartService

com.huawei.profile.service.ProfileService.START

com.apkpure.assistant.syscomponent4.KvStartService

com.huawei.nb.service.KvService.START

com.apkpure.assistant.syscomponent4.SearchStartService

com.huawei.nb.searchmanager.service.SearchService.START

com.apkpure.assistant.syscomponent4.DistributedDataStartService

com.huawei.distributed.data.service.DistributedDataService.START

com.apkpure.assistant.syscomponent4.CodebookSyncService

com.heytap.cloud.action.SYNC_MODULE
oppo.action.CODEBOOK_SYNC_SERVICE

com.apkpure.assistant.syscomponent4.ColorMmsService

com.android.mms.ColorAppServicesManagerClient

com.apkpure.assistant.syscomponent4.EidV2Service

com.rongcard.eid.EidService_V2

com.apkpure.assistant.syscomponent4.EidService

com.rongcard.eid.EidService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.san.xz.service.IXzService

com.san.sdk.ACTION_IXZ_CLOUD_ITEM
com.san.sdk.ACTION_IXZ_RESUME
com.san.sdk.ACTION_IXZ_DISALLOW
com.san.sdk.ACTION_IXZ_START_SILENCE

com.san.reserve.service.ReserveNotifyService

com.apkpure.aegon.RESERVE_NOTIFY_SERVICE

com.san.a.strategy.notification.AliveNotifyService

com.apkpure.aegon.ALIVE_NOTIFY_SERVICE

ap.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BIND_ACCESSIBILITY_SERVICE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_INTENT_SENDER_INTENT

android.permission.REORDER_TASKS

android.permission.FOREGROUND_SERVICE

oppo.permission.OPPO_COMPONENT_SAFE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.GET_PACKAGE_SIZE

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.apkpure.aegon.permission.PROCESS_PUSH_MSG

com.apkpure.aegon.permission.PUSH_PROVIDER

android.permission.BROADCAST_STICKY

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

com.tencent.assistant.permission.A_PERMISSION

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_FULL_SCREEN_INTENT

android.permission.EXPAND_STATUS_BAR

com.apkpure.aegon.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.apkpure.aegon

com.apkpure.aegon.main.activity.SplashActivity

Activities

com.apkpure.aegon.main.activity.SplashActivity

com.facebook.CustomTabActivity

com.tencent.qqlive.module.videoreport.scheme.SchemeRouterActivity

com.google.android.gms.tagmanager.TagManagerPreviewActivity

Permissions

Receivers

com.apkpure.aegon.application.RealApplicationLike$FTNetworkReceiver

com.apkpure.aegon.app.event.SystemBootEvent$Receiver

com.apkpure.aegon.app.event.SystemPackageEvent$Receiver

com.apkpure.aegon.person.event.NotificationEvent

com.apkpure.aegon.event.receiver.PowerConnectionReceiver

com.apkpure.aegon.event.receiver.BatteryLevelReceiver

com.google.android.gms.analytics.CampaignTrackingReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.HwHostPushReceiver

com.apkpure.assistant.syscomponent3.MediaButtonReceiver

com.tencent.rmonitor.natmem.NatMemReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.san.core.receiver.AppPkgReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.apkpure.aegon.services.AutoInstallService

com.apkpure.aegon.services.PushFirebaseMessagingService

com.huawei.hms.support.api.push.service.HmsMsgService

com.apkpure.aegon.plugin.push.hw.HwHostDemoHmsMessageService

com.apkpure.assistant.syscomponent.MediaBrowserService

com.apkpure.assistant.syscomponent.MediaRouteProviderService2

com.apkpure.assistant.syscomponent.MediaRouteProviderService

com.apkpure.assistant.syscomponent2.OppoCycleService

com.apkpure.assistant.syscomponent3.MediaPlaybackService

com.apkpure.assistant.syscomponent3.PrintService

com.apkpure.assistant.syscomponent3.TTSService

com.apkpure.assistant.syscomponent4.ControlsService

com.apkpure.assistant.syscomponent4.VanishingArtService

com.apkpure.assistant.syscomponent4.McGradyPeService

com.apkpure.assistant.syscomponent4.RebootService

com.apkpure.assistant.syscomponent4.AppMarketService

com.apkpure.assistant.syscomponent4.IUHostManagerService

com.apkpure.assistant.syscomponent4.ReservedService

com.apkpure.assistant.syscomponent4.CloudSettingsService

com.apkpure.assistant.syscomponent4.GMSService

com.apkpure.assistant.syscomponent4.ColorSafeService

com.apkpure.assistant.syscomponent4.ColorGestureService

com.apkpure.assistant.syscomponent4.OpenUDIDService

com.apkpure.assistant.syscomponent4.TgpaService

com.apkpure.assistant.syscomponent4.ProfileStartService

com.apkpure.assistant.syscomponent4.KvStartService

com.apkpure.assistant.syscomponent4.SearchStartService

com.apkpure.assistant.syscomponent4.DistributedDataStartService

com.apkpure.assistant.syscomponent4.CodebookSyncService

com.apkpure.assistant.syscomponent4.ColorMmsService

com.apkpure.assistant.syscomponent4.EidV2Service

com.apkpure.assistant.syscomponent4.EidService

com.google.firebase.messaging.FirebaseMessagingService

com.san.xz.service.IXzService

com.san.reserve.service.ReserveNotifyService

com.san.a.strategy.notification.AliveNotifyService

Android Permissions

ap.apk