喜闻[.]apk | Triage™

General

Target
喜闻.apk
Size 10.9MB
Sample240608-qpclysch35
SHA256 c09a691bbaaf0bcabce974f0471e538eb0789af56361f218b5d53b5f3f8f9cfb
MD5 47a05e6f5e0560ea0385f1776a956494
SHA1 15d6ae0483d7f0788ab19abd85ef9d7ae5309b80
SHA512 d436d89e0932af408828ab0872d9a0d57e2d463a210e50780bdda4d1945e9078d443d2bc0c56ca6c77092976bb2504f7f95055214e6c63abea78f9b926abdaa1
SSDEEP 196608:Pdzx6wDC0W46BkdriofBzgoof1bgSof9ngQofbvgVX:Pv6wexkdeuBLu1Ru97uby
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

File Explorer

喜闻.apk

.apk 10.9MB

喜闻.apk

SHA256 c09a691bbaaf0bcabce974f0471e538eb0789af56361f218b5d53b5f3f8f9cfb
MD5 47a05e6f5e0560ea0385f1776a956494
SHA1 15d6ae0483d7f0788ab19abd85ef9d7ae5309b80
SHA512 d436d89e0932af408828ab0872d9a0d57e2d463a210e50780bdda4d1945e9078d443d2bc0c56ca6c77092976bb2504f7f95055214e6c63abea78f9b926abdaa1
SSDEEP 196608:Pdzx6wDC0W46BkdriofBzgoof1bgSof9ngQofbvgVX:Pv6wexkdeuBLu1Ru97uby
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86

plus.H5A5D9F54

Android Permissions

喜闻.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.asus.msa.SupplementaryDID.ACCESS

喜闻.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

io.dcloud.sdk.base.service.DownloadService

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Sharing

General

Malware Config

Signatures

File Explorer

喜闻.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

io.dcloud.sdk.base.service.DownloadService

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Android Permissions

喜闻.apk