iFlyTube[.]apk | Triage™

General

Target
iFlyTube.apk
Size 68.8MB
Sample241109-e934vszrel
SHA256 e90a678db9e09a87d6949fdb16791e9448f5a064e759c3f2d5ab0246ba03434e
MD5 446b135ad2bd0c811623ea92d8877977
SHA1 a58dadbfe5ffa5ad37afc3e984d762a6c646e9de
SHA512 d8e9b31b145c219f5b349f998fa696298ead2d31e65f05b250023b558a669bde250f00b19f9093bff12301cafb17260d535112951f109c63c7275854c3b83b5e
SSDEEP 1572864:xbO6TazxQ3XGxRLvWUxotsBBH79FLLBPS+5Xk/IDOslr3kbtb1:FORLvAsf9JNN5XkaO03kr
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

iFlyTube.apk

.apk 68.8MB

iFlyTube.apk

SHA256 e90a678db9e09a87d6949fdb16791e9448f5a064e759c3f2d5ab0246ba03434e
MD5 446b135ad2bd0c811623ea92d8877977
SHA1 a58dadbfe5ffa5ad37afc3e984d762a6c646e9de
SHA512 d8e9b31b145c219f5b349f998fa696298ead2d31e65f05b250023b558a669bde250f00b19f9093bff12301cafb17260d535112951f109c63c7275854c3b83b5e
SSDEEP 1572864:xbO6TazxQ3XGxRLvWUxotsBBH79FLLBPS+5Xk/IDOslr3kbtb1:FORLvAsf9JNN5XkaO03kr
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

com.videomate.iflytube

com.videomate.iflytube.RealMainActivity

android.intent.action.MAIN

com.videomate.iflytube.SplashActivity

com.videomate.iflytube.receiver.ShareActivity

android.intent.action.SEND android.intent.action.VIEW

com.videomate.iflytube.receiver.ShareFileActivity

com.videomate.iflytube.ui.more.settings.SettingsActivity

iflytube.settings.SettingsActivity

com.videomate.iflytube.ui.more.terminal.TerminalActivity

iflytube.TerminalActivity

com.videomate.iflytube.ui.more.WebViewActivity

iflytube.WebViewActivity

com.videomate.iflytube.receiver.ResumeActivity

iflytube.ResumeActivity

com.videomate.iflytube.ui.more.settings.FolderSettingsActivity

com.videomate.iflytube.ui.more.settings.DownloadSettingsActivity

com.videomate.iflytube.ui.video.VideoDetailActivity

com.videomate.iflytube.ui.video.VideoMixDetailActivity

com.videomate.iflytube.ui.video.VideoShortsActivity

com.videomate.iflytube.ui.video.LocalVideoDetailActivity

com.videomate.iflytube.ui.more.settings.CurrentVersionActivity

com.videomate.iflytube.ui.video.MoreFormatActivity

com.videomate.iflytube.ui.CommonWebViewActivity

com.videomate.iflytube.ui.more.settings.DownloadActivity

com.newki.luckvideo.ChooseFileActivity

com.blankj.utilcode.util.UtilsTransActivity4MainProcess

com.blankj.utilcode.util.UtilsTransActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

com.videomate.iflytube.receiver.CancelDownloadNotificationReceiver

com.videomate.iflytube.receiver.CancelWorkReceiver

com.videomate.iflytube.receiver.PauseDownloadNotificationReceiver

com.videomate.iflytube.receiver.AlarmStartReceiver

com.videomate.iflytube.receiver.AlarmStopReceiver

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

iFlyTube.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE

android.permission.ACTION_OPEN_DOCUMENT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_MEDIA_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.gms.permission.AD_ID

android.permission.WAKE_LOCK

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

android.permission.ACCESS_ADSERVICES_AD_ID

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

com.videomate.iflytube.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

Sharing

General

Malware Config

Signatures

File Explorer

iFlyTube.apk

com.videomate.iflytube.RealMainActivity

com.videomate.iflytube.SplashActivity

com.videomate.iflytube.receiver.ShareActivity

com.videomate.iflytube.receiver.ShareFileActivity

com.videomate.iflytube.ui.more.settings.SettingsActivity

com.videomate.iflytube.ui.more.terminal.TerminalActivity

com.videomate.iflytube.ui.more.WebViewActivity

com.videomate.iflytube.receiver.ResumeActivity

com.videomate.iflytube.ui.more.settings.FolderSettingsActivity

com.videomate.iflytube.ui.more.settings.DownloadSettingsActivity

com.videomate.iflytube.ui.video.VideoDetailActivity

com.videomate.iflytube.ui.video.VideoMixDetailActivity

com.videomate.iflytube.ui.video.VideoShortsActivity

com.videomate.iflytube.ui.video.LocalVideoDetailActivity

com.videomate.iflytube.ui.more.settings.CurrentVersionActivity

com.videomate.iflytube.ui.video.MoreFormatActivity

com.videomate.iflytube.ui.CommonWebViewActivity

com.videomate.iflytube.ui.more.settings.DownloadActivity

com.newki.luckvideo.ChooseFileActivity

com.blankj.utilcode.util.UtilsTransActivity4MainProcess

com.blankj.utilcode.util.UtilsTransActivity

com.google.android.gms.common.api.GoogleApiActivity

androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivity

androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivity

androidx.appcompat.app.AppLocalesMetadataHolderService

com.blankj.utilcode.util.MessengerUtils$ServerService

com.google.android.gms.cast.framework.ReconnectionService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.sessions.SessionLifecycleService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.videomate.iflytube.receiver.CancelDownloadNotificationReceiver

com.videomate.iflytube.receiver.CancelWorkReceiver

com.videomate.iflytube.receiver.PauseDownloadNotificationReceiver

com.videomate.iflytube.receiver.AlarmStartReceiver

com.videomate.iflytube.receiver.AlarmStopReceiver

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

androidx.core.content.FileProvider

com.newki.luckvideo.provider.ChooseFileProvider

com.newki.luckvideo.provider.ChooseFileDocumentProvider

com.blankj.utilcode.util.UtilsFileProvider

com.google.firebase.provider.FirebaseInitProvider

androidx.startup.InitializationProvider

com.squareup.picasso.PicassoProvider

Android Permissions

iFlyTube.apk