com[.]microsoft[.]office[.]officehubhl_16[.]0[.]11126[.]20206-41661709_minAPI23(armeabi-v7a)(nodpi)_apkmirror[.]com[.]apk

General

Target

com.microsoft.office.officehubhl_16.0.11126.20206-41661709_minAPI23(armeabi-v7a)(nodpi)_apkmirror.com.apk
Size

95.6MB
MD5

e318131372b7cc8061c5164ac8243303
SHA1

beaf8d25341cbdcea105ddb6c695ac8d41856039
SHA256

02102e7ae64d6b731ac3d8ac1a1628dae7e3f09dd627b86dc2eb91db201358c9
SHA512

bf53adc41f51264d05041f1a44e766196ede6223451ecc5ea0243dd9f66a1f73d4d0ed6bb9a41366bd1e81c6161146de72a5f3907861bb9a661f73680ea6e1a2
SSDEEP

1572864:AB1gj1gUMIs8I4kstGhCLoERYeelT59qVni5WOJoiKGw7:AB4WIBI4TtGMy59nmifi

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

com.microsoft.office.officehubhl_16.0.11126.20206-41661709_minAPI23(armeabi-v7a)(nodpi)_apkmirror.com.apk
.apk android arch:arm

com.microsoft.office.officehubhl

com.microsoft.office.officesuite.OfficeSuiteWordActivity

Activities

com.microsoft.office.officesuite.OfficeSuiteWordActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.microsoft.office.officesuite.OfficeSuitePPTActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.microsoft.office.officesuite.OfficeSuiteExcelActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.dropbox.client2.android.AuthActivity

android.intent.action.VIEW

com.microsoft.android.crosssell.activities.PowerpointCrossSellHandlerActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW

com.microsoft.android.crosssell.activities.ExcelCrossSellHandlerActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW

com.microsoft.android.crosssell.activities.WordCrossSellHandlerActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
com.dropbox.android.intent.action.DBXC_EDIT
com.dropbox.android.intent.action.DBXC_VIEW
android.intent.action.VIEW

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.android.vending.CHECK_LICENSE
android.permission.WAKE_LOCK
android.permission.READ_USER_DICTIONARY
android.permission.WRITE_USER_DICTIONARY
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.GET_PACKAGE_SIZE
com.sec.android.iap.permission.BILLING
android.permission.VIBRATE
android.permission.READ_PHONE_STATE

Receivers

com.microsoft.office.officehub.util.OHubBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.microsoft.office.asyncdatapointreporting.InstallBroadcastReceiver

android.intent.action.PACKAGE_REMOVED

com.microsoft.office.officesuite.PPTResetReceiver

com.microsoft.office.officesuite.action.RESET

com.microsoft.office.officesuite.ExcelResetReceiver

com.microsoft.office.officesuite.action.RESET

com.microsoft.office.officesuite.WordResetReceiver

com.microsoft.office.officesuite.action.RESET

com.microsoft.office.officesuite.BackstageResetReceiver

com.microsoft.office.officesuite.action.RESET

com.microsoft.office.officesuite.OfficeSuiteBroadcastReceiver

com.microsoft.office.officesuite.action.WARM_UP_PROCESS_EXCEL
com.microsoft.office.officesuite.action.WARM_UP_PROCESS_PPT
com.microsoft.office.officesuite.action.WARM_UP_PROCESS_WORD

com.microsoft.office.appwarmup.service.AppWarmUpBroadcastReceiver

com.microsoft.office.appwarmup.action.WARMUP

com.microsoft.android.crosssell.CrossSellReceiver

com.microsoft.android.crosssell.action.REFRESH_CROSS_SELL
com.microsoft.android.crosssell.action.STOP_CROSS_SELL

com.microsoft.android.crosssell.PackageStateReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_FULLY_REMOVED

com.microsoft.android.crosssell.SelfReplacementReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.microsoft.office.BackgroundTaskHost.SystemBroadcastReceiver

android.intent.action.MY_PACKAGE_REPLACED
com.microsoft.office.Notification.ACTION_APP_FIRST_LAUNCH
android.intent.action.BOOT_COMPLETED
com.microsoft.office.Notification.ACTION_AUTOMATION_RUN
com.microsoft.office.Notification.DELAYED_PACKAGE_UPGRADE
com.microsoft.office.action.OFF_PEAK_HOURS_DAILY

com.microsoft.intune.mam.client.service.MAMBackgroundReceiver

android.intent.action.DOWNLOAD_COMPLETE

Services

com.microsoft.office.msohttp.keystore.OfficeAuthenticationService

android.accounts.AccountAuthenticator

com.microsoft.office.officesuite.ExcelWarmUpService

com.microsoft.office.officesuite.action.WARM_UP_PROCESS_EXCEL

com.microsoft.office.officesuite.PPTWarmUpService

com.microsoft.office.officesuite.action.WARM_UP_PROCESS_PPT

com.microsoft.office.officesuite.WordWarmUpService

com.microsoft.office.officesuite.action.WARM_UP_PROCESS_WORD

com.microsoft.android.crosssell.CrossSellAgentMarker

com.microsoft.android.crosssell.action.AGENT_CHECK

com.microsoft.tokenshare.TokenSharingService

com.microsoft.tokenshare.TokenSharingService

Android Permissions

com.microsoft.office.officehubhl_16.0.11126.20206-41661709_minAPI23(armeabi-v7a)(nodpi)_apkmirror.com.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.android.vending.CHECK_LICENSE

android.permission.WAKE_LOCK

android.permission.READ_USER_DICTIONARY

android.permission.WRITE_USER_DICTIONARY

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.GET_PACKAGE_SIZE

com.sec.android.iap.permission.BILLING

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files