qlh-im-pro-v1[.]1[.]0-32[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
qlh-im-pro-v1.1.0-32.apk
Size 18.4MB
Sample260601-alpt4sat3s
SHA256 caa1b31d124a9b8431add23f70cb8cec1c86b94b8a0af2601535bf311424634c
MD5 3aa27b49f5cb21d8e357f5ed5fcd9a50
SHA1 31e7605c5d1740b5595c93dbd6c3ef524233132f
SHA512 30b5dd364fcff19dbe5e5a79ce8885e7be4179feaa6f9d7ab6a308abe15157fcea42a12a8a24fa7dd7da4661de9427efc8b749c0a8873da12fd5600fe4863cbd
SSDEEP 393216:IHJnyrM2zRvqnvKRyptXHuvnutgGPCV+FHeYvENKRiwy5VfxOhQpbV4MAP:wJnyr1+KRyptX1/FHuNbwy5V5QQpbMP
TLSH
T14B172397F728882FD8B726B74C7E423257624D4642C2AB473988772C6E772980F4DBD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
qlh-im-pro-v1.1.0-32.apk

File Explorer

qlh-im-pro-v1.1.0-32.apk

.apk 18.4MB

qlh-im-pro-v1.1.0-32.apk

SHA256 caa1b31d124a9b8431add23f70cb8cec1c86b94b8a0af2601535bf311424634c
MD5 3aa27b49f5cb21d8e357f5ed5fcd9a50
SHA1 31e7605c5d1740b5595c93dbd6c3ef524233132f
SHA512 30b5dd364fcff19dbe5e5a79ce8885e7be4179feaa6f9d7ab6a308abe15157fcea42a12a8a24fa7dd7da4661de9427efc8b749c0a8873da12fd5600fe4863cbd
SSDEEP 393216:IHJnyrM2zRvqnvKRyptXHuvnutgGPCV+FHeYvENKRiwy5VfxOhQpbV4MAP:wJnyr1+KRyptX1/FHuNbwy5V5QQpbMP
TLSH
T14B172397F728882FD8B726B74C7E423257624D4642C2AB473988772C6E772980F4DBD4
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b8e5e138ba3019ac3afbe5a6e8c2d1a94f948ad9edb2515fe9195decc9bac52e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=L,OU=CT,O=CG,L=HZ,ST=ZJ,C=CN

com.fcat.qlhui

android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.RECORD_AUDIO android.permission.WAKE_LOCK android.permission.MODIFY_AUDIO_SETTINGS android.permission.VIBRATE android.permission.CAMERA android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.PROCESS_OUTGOING_CALLS android.permission.BLUETOOTH_CONNECT android.permission.FOREGROUND_SERVICE_MICROPHONE android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.POST_NOTIFICATIONS android.permission.REQUEST_INSTALL_PACKAGES com.huawei.android.launcher.permission.CHANGE_BADGE com.meizu.flyme.push.permission.RECEIVE com.fcat.qlhui.push.permission.MESSAGE com.meizu.c2dm.permission.RECEIVE com.fcat.qlhui.permission.C2D_MESSAGE com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM com.google.android.c2dm.permission.RECEIVE android.permission.RECEIVE_BOOT_COMPLETED com.fcat.qlhui.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.CAPTURE_VIDEO_OUTPUT com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO com.fcat.qlhui.permission.MIPUSH_RECEIVE com.fcat.qlhui.permission.PROCESS_PUSH_MSG com.fcat.qlhui.permission.PUSH_PROVIDER android.permission.FLASHLIGHT

com.product.chat.im.ui.main.SplashActivity

android.intent.action.MAIN

com.product.chat.im.ui.common.PrivacyAgreementAct

com.product.chat.im.ui.common.FeedbackAct

com.product.chat.im.ui.common.FeedbackTypeSelectAct

com.product.chat.im.ui.setting.SettingActivity

com.product.chat.im.ui.setting.SelectThemeAct

com.product.chat.sticker.StickerManageAct

com.product.chat.im.ui.setting.TeenagerModeActivity

com.product.chat.im.ui.setting.SelectLanguageAct

com.product.chat.im.ui.main.MainActivity

com.fcat.qlhui.main android.intent.action.SENDTO android.intent.action.SEND

com.product.chat.im.ui.setting.ChangePasswordActivity

com.product.chat.im.ui.setting.ResetPasswordActivity

com.product.chat.im.ui.setting.ResetMobileActivity

com.product.chat.im.ui.setting.AccountActivity

com.product.chat.im.ui.setting.IdentityVerifyActivity

com.product.chat.im.ui.setting.DeleteAccountActivity

com.product.chat.company.SelectIMServerAct

com.product.chat.login.LoginAct

com.product.chat.company.CompanyInfoAct

com.product.chat.im.ui.main.EditUserInfoActivity

com.product.chat.im.ui.setting.PCOrWebLoginAct

com.fcat.qlhui.pc.login

com.chat.im.kit.pc.PCSessionActivity

com.im.biz.ui.common.AboutActivity

com.chat.im.kit.conversation.ConversationActivity

com.chat.im.kit.user.SetAliasActivity

com.chat.im.kit.user.ChangeMyNameActivity

com.chat.im.kit.mm.TakePhotoActivity

com.chat.im.kit.group.SetGroupNameActivity

com.chat.im.kit.group.SetGroupRemarkActivity

com.chat.im.kit.group.SetGroupAnnouncementActivity

com.chat.im.kit.conversation.forward.RefMsgAct

com.chat.im.kit.mm.MMPreviewActivity

com.chat.im.kit.voip.SingleCallActivity

com.chat.im.kit.kit.voip.single

com.chat.im.kit.conversation.CreateConversationActivity

com.chat.im.kit.group.AddGroupMemberActivity

com.chat.im.kit.chatroom.ChatRoomListActivity

com.chat.im.kit.group.RemoveGroupMemberActivity

com.chat.im.kit.conversation.mention.MentionGroupMemberActivity

com.chat.im.kit.group.GroupListActivity

com.chat.im.kit.contact.newfriend.FriendRequestListActivity

com.chat.im.kit.contact.newfriend.SearchUserActivity

com.chat.im.kit.settings.IMPrivacySettingAct

com.chat.im.kit.settings.blacklist.SearchBlacklistActivity

com.chat.im.kit.group.SearchGroupActivity

com.chat.im.kit.contact.newfriend.InviteFriendActivity

com.chat.im.kit.user.UserInfoActivity

com.chat.im.kit.user.ChatRoomUserInfoAct

com.chat.im.kit.chatroom.SetChatRoomNameAct

com.chat.im.kit.chatroom.SetChatRoomDescAct

com.chat.im.kit.settings.PrivacySettingActivity

com.chat.im.kit.settings.blacklist.BlacklistListActivity

com.chat.im.kit.settings.MessageNotifySettingActivity

com.chat.im.kit.conversation.ConversationInfoActivity

com.chat.im.kit.contact.SearchContactActivity

com.chat.im.kit.search.SearchPortalActivity

com.chat.im.kit.conversation.forward.ForwardActivity

com.chat.im.kit.conversation.pick.PickOrCreateConversationTargetActivity

com.chat.im.kit.conversation.pick.PickConversationActivity

com.chat.im.kit.conversation.receipt.GroupMessageReceiptActivity

com.chat.im.kit.AppWebViewAct

com.chat.im.kit.webview

com.chat.im.kit.ThirdPartyWebAct

com.chat.im.kit.search.SearchMessageActivity

com.chat.im.kit.group.PickGroupMemberActivity

com.chat.im.kit.qrcode.QRCodeActivity

com.chat.im.kit.group.GroupInfoActivity

com.chat.im.kit.qrcode.ScanQRCodeActivity

com.chat.im.kit.group.manage.GroupManageActivity

com.chat.im.kit.group.manage.GroupManagerListActivity

com.chat.im.kit.group.manage.AddGroupManagerActivity

com.chat.im.kit.group.manage.GroupMuteOrAllowActivity

com.chat.im.kit.group.GroupMemberListActivity

com.chat.im.kit.contact.pick.PickContactActivity

com.chat.im.kit.voip.MultiCallActivity

com.chat.im.kit.kit.voip.multi

com.chat.im.kit.voip.VoipDummyActivity

com.chat.im.kit.conversation.file.FileRecordActivity

com.chat.im.kit.conversation.file.FileRecordListActivity

com.chat.im.kit.group.manage.MuteGroupMemberActivity

com.chat.im.kit.contact.ContactListActivity

com.chat.im.kit.conversation.message.CompositeMessageContentActivity

com.chat.im.kit.favorite.FavoriteListActivity

com.chat.im.kit.group.GroupMemberMessageHistoryActivity

com.chat.im.kit.widget.AlertDialogActivity

com.chat.im.kit.conversation.detail.EditFriendInfoAct

com.chat.im.kit.conversation.file.receive.ReceiveFileActivity

com.vivo.push.sdk.LinkProxyClientActivity

com.luck.picture.lib.basic.PictureSelectorSupporterActivity

com.luck.picture.lib.basic.PictureSelectorTransparentActivity

com.chat.im.base.permission.ShadowPermissionActivity

com.yalantis.ucrop.UCropActivity

com.yalantis.ucrop.UCropMultipleActivity

com.draggable.library.extension.ImagesViewerActivity

com.luck.lib.camerax.PictureCameraActivity

com.google.android.gms.common.api.GoogleApiActivity

com.xiaomi.mipush.sdk.NotificationClickedActivity

com.huawei.hms.support.api.push.TransActivity

com.huawei.hms.activity.BridgeActivity

com.huawei.hms.activity.EnableServiceActivity

com.chat.im.kit.voip.VoipCallService

com.fatcat.chat.push.huawei.HonorPushService

com.hihonor.push.action.MESSAGING_EVENT

com.fatcat.chat.push.huawei.HwPushService

com.huawei.push.action.MESSAGING_EVENT

com.xiaomi.push.service.XMJobService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

com.vivo.push.sdk.service.CommandClientService

com.heytap.mcssdk.PushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.heytap.mcssdk.AppPushService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE

com.fatcat.chat.push.firebase.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.fatcat.chat.client.ClientService

com.luck.picture.lib.service.ForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.camera.core.impl.MetadataHolderService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.meizu.cloud.pushsdk.NotificationService

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG com.huawei.push.msg.PASSBY_MSG

com.huawei.agconnect.core.ServiceDiscovery

com.fatcat.chat.push.xiaomi.MiMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.fatcat.chat.push.meizu.MeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.fatcat.chat.push.vivo.PushMessageReceiverImpl

com.vivo.pushclient.action.RECEIVE

com.tencent.mars.BaseEvent$ConnectionReceiver

com.fatcat.chat.remote.RecoverReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE

Android Permissions

qlh-im-pro-v1.1.0-32.apk

Permissions

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.CAMERA

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.PROCESS_OUTGOING_CALLS

android.permission.BLUETOOTH_CONNECT

android.permission.FOREGROUND_SERVICE_MICROPHONE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_INSTALL_PACKAGES

com.huawei.android.launcher.permission.CHANGE_BADGE

com.meizu.flyme.push.permission.RECEIVE

com.fcat.qlhui.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.fcat.qlhui.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_EXACT_ALARM

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.fcat.qlhui.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAPTURE_VIDEO_OUTPUT

com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO

com.fcat.qlhui.permission.MIPUSH_RECEIVE

com.fcat.qlhui.permission.PROCESS_PUSH_MSG

com.fcat.qlhui.permission.PUSH_PROVIDER

android.permission.FLASHLIGHT