Shopee PH_ Shop this 6[.]6-7[.]7_3[.]27[.]09_APKPure[.]apk

General

Target

Shopee PH_ Shop this 6.6-7.7_3.27.09_APKPure.apk
Size

229.1MB
MD5

c0982b9a45d3249372a069f35c530d48
SHA1

211e6c454f7adf9f0b7547f4b35ec30cf3b544e9
SHA256

7031ff31e01ff7edce3f830ef6bd2e83606b4c1898264d4e16261c663042bc2c
SHA512

38144db25fe4fc3a4d9986e40f9eed52016366ffa0f14e1bdc99f484fca721d2399e0e93d9720703d8a997039d6553e56cd05ef79923884c5aaac385d3e5648c
SSDEEP

6291456:om+xTdJkhc+TpYke9WREzFN5GHN+RppFX08ym7sHP5KOV95q6G+0Ma:oZdJkbpYkeoS5+MrX08QHXvGt

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR

Files

Shopee PH_ Shop this 6.6-7.7_3.27.09_APKPure.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.shopee.ph

com.shopee.app.ui.home.HomeActivity_

Activities

com.shopee.app.ui.proxy.GooglePaymentProxyActivity

com.google.android.payments.standard.AUTHENTICATE_V1

com.shopee.app.ui.home.HomeActivity_

android.intent.action.MAIN

com.shopee.app.ui.proxy.ProxyActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.shopee.app.react.NonConfigChangeReactTransparentActivity_

livestreaming.product.panel

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.google.android.gms.tagmanager.TagManagerPreviewActivity

android.intent.action.VIEW

com.shopee.live.livestreaming.feature.forbidden.LiveStreamingForbiddenZoneActivity

com.shopee.livestreaming.forbiddenzone
com.shopee.livestreaming.forbiddenzone

Permissions

android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SCHEDULE_EXACT_ALARM
com.google.android.c2dm.permission.RECEIVE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.READ_CONTACTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.NFC
android.permission.FOREGROUND_SERVICE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.GET_PACKAGE_SIZE
android.permission.BLUETOOTH_CONNECT
android.permission.POST_NOTIFICATIONS
android.permission.USE_FINGERPRINT
android.permission.USE_BIOMETRIC
android.permission.INSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
android.permission.QUERY_ALL_PACKAGES
com.google.android.providers.gsf.permission.READ_GSERVICES
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.WRITE_CALENDAR
android.permission.READ_CALENDAR
android.permission.SYSTEM_OVERLAY_WINDOW

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.shopee.app.util.ShopeeInstallReceiver

com.android.vending.INSTALL_REFERRER

com.shopee.app.ui.auth.phone.SmsOtpReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.dieam.reactnativepushnotification.modules.RNPushNotificationBootEventReceiver

android.intent.action.BOOT_COMPLETED

com.shopee.app.dre.instantmodule.drenotification.DREPushNotificationBootEventReceiver

android.intent.action.BOOT_COMPLETED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

Services

com.shopee.app.pushnotification.fcm.ShopeeFcmPushService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.shopee.app.safemode.presentation.service.SafeModeService

$applicationId.safemode.SAFESERVICE

com.shopee.app.react.sync.BundleSyncService

com.firebase.jobdispatcher.ACTION_EXECUTE

com.shopee.app.react.sync.NewBundleSyncService

com.shopee.react.sync.NewBundleSyncService

com.shopee.video_player.cache.SSZDownloadService

com.google.android.exoplayer.downloadService.action.RESTART

androidx.work.impl.background.gcm.WorkManagerGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

com.shopee.live.livestreaming.feature.floatwindow.service.FloatVideoService

com.shopee.livestreaming.livefloatservice
com.shopee.livestreaming.livefloatservice

com.shopee.liveimsdk.custom.CustomIMSingleService

com.shopee.liveimsdk.CUSTOM_IM_SINGLE_SERVICE
com.shopee.liveimsdk.CUSTOM_IM_SINGLE_SERVICE

com.shopee.sz.luckyvideo.common.utils.download.VideoDownloadService

com.google.android.exoplayer.downloadService.action.RESTART
com.google.android.exoplayer.downloadService.action.RESTART

Android Permissions

Shopee PH_ Shop this 6.6-7.7_3.27.09_APKPure.apk

Permissions

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SCHEDULE_EXACT_ALARM

com.google.android.c2dm.permission.RECEIVE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.GET_PACKAGE_SIZE

android.permission.BLUETOOTH_CONNECT

android.permission.POST_NOTIFICATIONS

android.permission.USE_FINGERPRINT

android.permission.USE_BIOMETRIC

android.permission.INSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.QUERY_ALL_PACKAGES

com.google.android.providers.gsf.permission.READ_GSERVICES

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

Resubmissions

Sharing

General

Malware Config

Signatures

Files

com.shopee.ph

com.shopee.app.ui.home.HomeActivity_

Activities

com.shopee.app.ui.proxy.GooglePaymentProxyActivity

com.shopee.app.ui.home.HomeActivity_

com.shopee.app.ui.proxy.ProxyActivity

com.shopee.app.react.NonConfigChangeReactTransparentActivity_

com.facebook.CustomTabActivity

com.google.android.gms.tagmanager.TagManagerPreviewActivity

com.shopee.live.livestreaming.feature.forbidden.LiveStreamingForbiddenZoneActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.appsflyer.MultipleInstallBroadcastReceiver

com.shopee.app.util.ShopeeInstallReceiver

com.shopee.app.ui.auth.phone.SmsOtpReceiver

com.dieam.reactnativepushnotification.modules.RNPushNotificationBootEventReceiver

com.shopee.app.dre.instantmodule.drenotification.DREPushNotificationBootEventReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.shopee.app.pushnotification.fcm.ShopeeFcmPushService

com.google.firebase.messaging.FirebaseMessagingService

com.shopee.app.safemode.presentation.service.SafeModeService

com.shopee.app.react.sync.BundleSyncService

com.shopee.app.react.sync.NewBundleSyncService

com.shopee.video_player.cache.SSZDownloadService

androidx.work.impl.background.gcm.WorkManagerGcmService

com.shopee.live.livestreaming.feature.floatwindow.service.FloatVideoService

com.shopee.liveimsdk.custom.CustomIMSingleService

com.shopee.sz.luckyvideo.common.utils.download.VideoDownloadService

Android Permissions

Shopee PH_ Shop this 6.6-7.7_3.27.09_APKPure.apk