com[.]xiaomi[.]discover_26[.]05[.]19[.]872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror[.]com[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
com.xiaomi.discover_26.05.19.872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
Size 20.7MB
Sample260602-cmwp6abv31
SHA256 f321141359e0a486a09a6ce410f1c714594121ef9068a85f12350beba1707750
MD5 e990be956ba2e67f50c949f6d9b85fb7
SHA1 33aedf15b74fde60cb7efc332863e02fe80475ea
SHA512 53bffb0765d4be760b91564f1719666876d113d9dd5737c3eaf2000c57b203c5fbe102067c735cf71700420478387e2325e8ca29cc6856d54b2e49c98525032a
SSDEEP 393216:iIn/iHAmhwsboRYcd8Itp3RvAwB2T6EnSd1ApdhEKt841eZDna:V/rhWktdLpBvz2NnPdhDf1eZDa
TLSH
T13827F187F31C9A3AC8B25035455E2633A6192C69DE42A787F80C771D79B3BE44F19BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
com.xiaomi.discover_26.05.19.872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

File Explorer

com.xiaomi.discover_26.05.19.872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

.apk 20.7MB

com.xiaomi.discover_26.05.19.872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

SHA256 f321141359e0a486a09a6ce410f1c714594121ef9068a85f12350beba1707750
MD5 e990be956ba2e67f50c949f6d9b85fb7
SHA1 33aedf15b74fde60cb7efc332863e02fe80475ea
SHA512 53bffb0765d4be760b91564f1719666876d113d9dd5737c3eaf2000c57b203c5fbe102067c735cf71700420478387e2325e8ca29cc6856d54b2e49c98525032a
SSDEEP 393216:iIn/iHAmhwsboRYcd8Itp3RvAwB2T6EnSd1ApdhEKt841eZDna:V/rhWktdLpBvz2NnPdhDf1eZDa
TLSH
T13827F187F31C9A3AC8B25035455E2633A6192C69DE42A787F80C771D79B3BE44F19BC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

ahh

File Signature issue

Digest

76c106e72cb40c72c1e0bb4e65329a578954935a85eb9fad4681766351cf91fb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=MIUI,OU=MIUI,O=Xiaomi,L=Beijing,ST=Beijing,C=CN,1.2.840.113549.1.9.1=#0c0f6d697569407869616f6d692e636f6d

com.xiaomi.discover

android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WAKE_LOCK android.permission.ACCESS_DOWNLOAD_MANAGER android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED android.permission.INSTALL_PACKAGES android.permission.DELETE_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.USE_CREDENTIALS android.permission.ACCESS_WIFI_STATE android.permission.PACKAGE_USAGE_STATS android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_PACKAGE_SIZE android.permission.BROADCAST_STICKY android.permission.GET_TASKS android.permission.REAL_GET_TASKS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.miui.permission.SHELL com.xiaomi.permission.CLOUD_MANAGER miui.permission.USE_INTERNAL_GENERAL_API android.permission.VIBRATE android.permission.REBOOT android.permission.WRITE_SETTINGS android.permission.INTERACT_ACROSS_USERS android.permission.LOCAL_MAC_ADDRESS android.permission.INTERACT_ACROSS_USERS_FULL com.anroid.settings.permission.PRIVACY_AUTHORIZATION_DIALOG android.permission.WRITE_SECURE_SETTINGS android.permission.ACCESS_INSTANT_APPS android.permission.FOREGROUND_SERVICE com.miui.securitycenter.permission.PERM_USE_INFO android.permission.QUERY_ALL_PACKAGES com.google.android.gms.permission.AD_ID android.permission.POST_NOTIFICATIONS android.permission.GET_ACCOUNTS android.permission.GET_ACCOUNTS_PRIVILEGED android.permission.AUTHENTICATE_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.REQUEST_INSTALL_PACKAGES android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.SCHEDULE_EXACT_ALARM android.permission.RUN_USER_INITIATED_JOBS android.permission.ENFORCE_UPDATE_OWNERSHIP android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT android.permission.READ_MEDIA_IMAGES android.permission.READ_EXTERNAL_STORAGE android.permission.CHANGE_NETWORK_STATE android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.KILL_BACKGROUND_PROCESSES com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.ACCESS_ADSERVICES_ATTRIBUTION android.permission.ACCESS_ADSERVICES_AD_ID com.xiaomi.discover.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.xiaomi.market.ui.minicard.optimize.MiniCardActivity

android.intent.action.VIEW

com.xiaomi.market.ui.minicard.DetailMiniCardActivity

com.xiaomi.market.ui.DownloadListActivity

com.xiaomi.market.ui.AppScreenshotsActivity

com.xiaomi.market.ui.JoinActivity

android.intent.action.MAIN android.intent.action.VIEW

com.xiaomi.market.ui.UpdateAppsActivityInner

android.intent.action.MAIN

com.xiaomi.market.ui.SignatureCheckActivity

com.xiaomi.market.ui.SettingsActivity

miui.intent.action.APP_SETTINGS android.intent.action.SEARCH

com.xiaomi.market.ui.UpdateHistoryActivity

com.xiaomi.market.ui.UserAgreementActivity

com.xiaomi.market.ui.UserAgreementActivityInner

com.xiaomi.market.ui.DialogActivity

com.xiaomi.market.ui.MeteredUpdateConfirmActivity

com.xiaomi.market.action.METERED_UPDATE_CONFIRM

com.xiaomi.market.ui.DebugActivity

com.xiaomi.market.ui.CheckUpdateDebugActivity

com.xiaomi.market.ui.ExternalInstallListActivity

com.xiaomi.market.ui.UpdateAndActiveAbility

android.intent.action.VIEW

com.xiaomi.market.ui.TranslucentActivityOuter

com.xiaomi.market.ui.TranslucentActivityInner

com.xiaomi.global.payment.ui.PaymentActivity

com.xiaomi.global.payment.PAYMENT_DISCOVER

com.xiaomi.global.payment.ui.PayMethodManagerActivity

com.xiaomi.global.payment.MI_PAYMETHOD_DISCOVER

com.xiaomi.global.payment.ui.OrdersListActivity

com.xiaomi.global.payment.MI_ORDERSLIST_DISCOVER

com.xiaomi.global.payment.ui.PaymentSettingActivity

com.xiaomi.global.payment.MI_PAYMENT_SETTING_DISCOVER

com.xiaomi.global.payment.ui.SubscriptionListActivity

com.xiaomi.global.payment.MI_SUBSCRIPTION_LIST_DISCOVER

com.xiaomi.global.payment.ui.SubscriptionDetailActivity

com.xiaomi.global.payment.MI_SUBSCRIPTION_DETAIL_DISCOVER

com.xiaomi.global.payment.ui.FeedBackActivity

com.xiaomi.global.payment.MI_FEEDBACK_DISCOVER

com.xiaomi.global.payment.ui.CouponRetainActivity

com.xiaomi.global.payment.ui.BindCardActivity

com.xiaomi.global.payment.ui.WebViewActivity

com.xiaomi.global.payment.ui.CouponSelectActivity

com.xiaomi.global.payment.ui.CertifiedActivity

com.xiaomi.global.payment.ui.PayQRCodeActivity

com.xiaomi.global.payment.ui.CollectTaxInfoActivity

com.xiaomi.global.payment.ui.SubUserChooseInfoActivity

com.xiaomi.global.payment.ui.PayEasyCollectActivity

com.xiaomi.global.payment.ui.PayEasyInfoActivity

com.xiaomi.mipicks.baseui.BaseActivity

com.google.android.gms.common.api.GoogleApiActivity

com.miui.referrer.GetAppsReferrerInfoService

com.miui.referrer.BIND_GET_INSTALL_REFERRER_SERVICE

com.xiaomi.market.ui.floatminicard.FloatMiniService

com.xiaomi.market.data.CheckUpdateService

com.xiaomi.market.data.AppArrangeService

com.xiaomi.market.service.AppDownloadInstallService com.xiaomi.market.DOWNLOAD_CANCEL com.xiaomi.market.DOWNLOAD_PAUSE com.xiaomi.market.DOWNLOAD_RESUME

com.xiaomi.market.data.AppDownloadService

com.xiaomi.market.service.AppDownloadService

com.xiaomi.market.service.ExpansionSupportService

com.xiaomi.market.data.MarketService

com.xiaomi.market.service.SelfUpdateService

com.xiaomi.market.service.CloudConfigSyncService

com.xiaomi.market.service.AppActiveStatService

android.intent.action.PACKAGE_FIRST_LAUNCH

com.xiaomi.market.service.DownloadCompleteService

com.xiaomi.market.service.AutoUpdateScheduler

com.xiaomi.market.service.ManualUpdateScheduler

com.xiaomi.market.testsupport.DebugService

com.xiaomi.market.debug android.intent.action.VIEW

com.xiaomi.market.data.KeepAliveService

com.xiaomi.market.installsupport.MarketInstallerService

com.xiaomi.market.action.INSTALL

com.xiaomi.market.service.UpdateAndActiveSingleService

com.xiaomi.downloader.service.DownloadService

com.xiaomi.market.downloadinstall.retry.RetryService

com.xiaomi.market.data.MarketDownloadService

com.xiaomi.market.service.MarketDownloadService

com.xiaomi.market.marketsdk.MarketSdkCheckUpdateService

com.xiaomi.global.payment.service.MiGlobalPayService

com.xiaomi.global.payment.BIND_SERVICE

com.xiaomi.mipicks.openstore.core.process.OpenProcessService

com.xiaomi.mipicks.action.OPEN_STORE_SERVICE

com.xiaomi.mipicks.openstore.core.process.OpenProcessProxyService

androidx.work.multiprocess.RemoteWorkManagerService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.firebase.sessions.SessionLifecycleService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.xiaomi.market.service.ExpansionSupportReceiver

com.xiaomi.market.GET_EXPANSION

com.xiaomi.market.data.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.xiaomi.market.data.StartupReceiver

android.intent.action.BOOT_COMPLETED

com.xiaomi.market.data.ConnectivityChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.market.data.MyPackageMonitor

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_FIRST_LAUNCH

com.xiaomi.market.receiver.AppActiveReceiver

miui.intent.action.PACKAGE_FIRST_LAUNCH

com.xiaomi.market.data.DiscoverUpdateManager

com.xiaomi.market.action.SETTINGS_CHANGE com.xiaomi.market.action.UPDATE_STARTED com.xiaomi.market.action.UPDATE_COMPLETED_ALL

com.xiaomi.market.receiver.ProvisionCompleteReceiver

android.provision.action.PROVISION_COMPLETE

com.xiaomi.market.receiver.BugReportDumpReceiver

com.miui.core.intent.ACTION_DUMP_CACHED_LOG

com.xiaomi.market.receiver.DownloadInstallResultReceiver

com.xiaomi.market.DOWNLOAD_INSTALL_RESULT

com.xiaomi.market.receiver.PendingNotificationReceiver

com.xiaomi.market.action.CLICK_INSTALLED_NOTIFICATION

com.xiaomi.market.downloadinstall.install.SessionInstallReceiver

com.xiaomi.market.action.INSTALL_FINISHED com.xiaomi.market.action.APK_INSTALL_DIRECTLY

com.market.sdk.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

com.xiaomi.discover_26.05.19.872-2000872_minAPI24(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk

Permissions

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_CREDENTIALS

android.permission.ACCESS_WIFI_STATE

android.permission.PACKAGE_USAGE_STATS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_PACKAGE_SIZE

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.miui.permission.SHELL

com.xiaomi.permission.CLOUD_MANAGER

miui.permission.USE_INTERNAL_GENERAL_API

android.permission.VIBRATE

android.permission.REBOOT

android.permission.WRITE_SETTINGS

android.permission.INTERACT_ACROSS_USERS

android.permission.LOCAL_MAC_ADDRESS

android.permission.INTERACT_ACROSS_USERS_FULL

com.anroid.settings.permission.PRIVACY_AUTHORIZATION_DIALOG

android.permission.WRITE_SECURE_SETTINGS

android.permission.ACCESS_INSTANT_APPS

android.permission.FOREGROUND_SERVICE

com.miui.securitycenter.permission.PERM_USE_INFO

android.permission.QUERY_ALL_PACKAGES

com.google.android.gms.permission.AD_ID

android.permission.POST_NOTIFICATIONS

android.permission.GET_ACCOUNTS

android.permission.GET_ACCOUNTS_PRIVILEGED

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.SCHEDULE_EXACT_ALARM

android.permission.RUN_USER_INITIATED_JOBS

android.permission.ENFORCE_UPDATE_OWNERSHIP

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.READ_MEDIA_IMAGES

android.permission.READ_EXTERNAL_STORAGE