jolosdk_kdxjl_jolo20220221144148347[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
jolosdk_kdxjl_jolo20220221144148347.apk
Size 33.6MB
Sample260625-pllvsab12p
SHA256 04e117a77632e44df2b98ad8fd5ceb6039203e12c09f40067e629b6df680ab29
MD5 b15acc22059d2bfa639f7cdf4ec07d6d
SHA1 0a6cb574316c800e698b770ecfdf84d8e0f648fd
SHA512 10fd7e010f23eb3b71b2fe389c1b39a1cbeb27ddc25e089315895fcfdcd27d340d98b6c7d800291b1e2ceebcf12d03a640f79fe4be086083a0f6fe1f552370cf
SSDEEP 786432:EB2zkN2JQ2SVphoNqWhEBQX208nTWCIelxwb8H5C4XIpLkKdh1uj:e2zkeQ2SVpiNMQX29TWywIHI4XxWh1S
TLSH
T1F1773383FB48F81EC5B3D23A4B71616A10485C49A763D657695CF12C2FB78C48A8BFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
jolosdk_kdxjl_jolo20220221144148347.apk

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
jolosdk_kdxjl_jolo20220221144148347.apk

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jolosdk_kdxjl_jolo20220221144148347.apk

File Explorer

jolosdk_kdxjl_jolo20220221144148347.apk

.apk 33.6MB

jolosdk_kdxjl_jolo20220221144148347.apk

SHA256 04e117a77632e44df2b98ad8fd5ceb6039203e12c09f40067e629b6df680ab29
MD5 b15acc22059d2bfa639f7cdf4ec07d6d
SHA1 0a6cb574316c800e698b770ecfdf84d8e0f648fd
SHA512 10fd7e010f23eb3b71b2fe389c1b39a1cbeb27ddc25e089315895fcfdcd27d340d98b6c7d800291b1e2ceebcf12d03a640f79fe4be086083a0f6fe1f552370cf
SSDEEP 786432:EB2zkN2JQ2SVphoNqWhEBQX208nTWCIelxwb8H5C4XIpLkKdh1uj:e2zkeQ2SVpiNMQX29TWywIHI4XxWh1S
TLSH
T1F1773383FB48F81EC5B3D23A4B71616A10485C49A763D657695CF12C2FB78C48A8BFC9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

2dee4126d3514eaa2f05c13b39d6fbf62930c481

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Moby,OU=Moby,O=Moby,L=WuHan,ST=Hubei,C=CN

Chains

Jan 1, 0001

com.pgnnbbjl.htc

android.permission.ACCESS_NETWORK_STATE android.permission.WAKE_LOCK android.permission.INTERNET android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.CAMERA android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_SETTINGS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_NOTIFICATION_POLICY com.asus.msa.SupplementaryDID.ACCESS freemme.permission.msa android.permission.GET_TASKS android.permission.ACCESS_FINE_LOCATION android.permission.READ_PHONE_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_SMS android.permission.WRITE_SETTINGS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE android.webkit.permission.PLUGIN android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.NFC org.simalliance.openmobileapi.SMARTCARD android.permission.REQUEST_INSTALL_PACKAGES android.permission.FOREGROUND_SERVICE

demo.MainActivity

demo.xkl.VideoActivity

com.q1.sdk.webview.WebActivity

com.wan17.agent.sdk.AsdkActivity

com.wan17.agent.sdk.ChargeActivity

com.wan17.agent.othersdk.YXWebActivity

com.wan17.agent.privacy.DetailsActivity

com.wan17.agent.privacy.PrivacyActivity

android.intent.action.MAIN

com.zs.loading.WelcomeActivity

android.intent.action.MAIN

com.jolo.account.activity.LoginActivity

com.jolosdk.home.activity.WapLinkActivity

com.jolo.account.activity.RegisterOptionActivity

com.jolo.account.activity.NormalRegisterActivity

com.jolo.account.activity.RegisterPhoneActivity

com.jolo.account.activity.BindPhoneActivity

com.jolo.account.activity.ProtocolActivity

com.jolo.account.activity.ModifyPwdActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.jolo.jolopay.JoloQRcodeActivity

com.jolosdk.home.activity.BusinessRecordActivity

com.jolosdk.home.activity.MyOrderDetailActivity

com.jolosdk.home.activity.MyOrderActivity

com.jolosdk.home.activity.MessageActivity

com.jolosdk.home.activity.PersonalCentraMainActivity

com.jolosdk.home.activity.GBaoExplainActivity

com.jolo.jolopay.JoloPayActivity

com.jolo.jolopay.JoloRechargeActivity

com.jolosdk.home.activity.TicketCenterActivity

com.jolosdk.home.activity.MyTicketActivity

com.jolosdk.home.activity.TicketActivity

com.jolosdk.home.activity.TicketDetailActivity

com.jolosdk.home.activity.GainTicketActivity

com.jolosdk.home.activity.TicketExplainActivity

com.jolosdk.home.activity.TicketBuyActivity

com.jolosdk.home.activity.TicketBuyDialogActivity

com.jolosdk.home.activity.TicketPayListDialogActivity

com.jolosdk.home.activity.TicketPayWarnDialogActivity

com.jolo.account.activity.LogoutActivity

com.jolosdk.home.activity.BeforeLoginActivity

com.jolosdk.home.activity.NormalQuestionActivity

com.jolosdk.home.activity.MessageDetailActivity

com.jolosdk.home.ui.widget.picpicker.PicpickerActivity

com.jolosdk.home.activity.GiftDetailActivity

com.jolosdk.home.activity.AdvBannerActivity

com.jolo.jolopay.WXH5PayActivity

com.jolo.account.activity.UserAuthActivity

Android Permissions

jolosdk_kdxjl_jolo20220221144148347.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NOTIFICATION_POLICY

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.webkit.permission.PLUGIN

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

File Explorer

jolosdk_kdxjl_jolo20220221144148347.apk

File Signature issue

demo.MainActivity

demo.xkl.VideoActivity

com.q1.sdk.webview.WebActivity

com.wan17.agent.sdk.AsdkActivity

com.wan17.agent.sdk.ChargeActivity

com.wan17.agent.othersdk.YXWebActivity

com.wan17.agent.privacy.DetailsActivity

com.wan17.agent.privacy.PrivacyActivity

com.zs.loading.WelcomeActivity

com.jolo.account.activity.LoginActivity

com.jolosdk.home.activity.WapLinkActivity

com.jolo.account.activity.RegisterOptionActivity

com.jolo.account.activity.NormalRegisterActivity

com.jolo.account.activity.RegisterPhoneActivity

com.jolo.account.activity.BindPhoneActivity

com.jolo.account.activity.ProtocolActivity

com.jolo.account.activity.ModifyPwdActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.jolo.jolopay.JoloQRcodeActivity

com.jolosdk.home.activity.BusinessRecordActivity

com.jolosdk.home.activity.MyOrderDetailActivity

com.jolosdk.home.activity.MyOrderActivity

com.jolosdk.home.activity.MessageActivity

com.jolosdk.home.activity.PersonalCentraMainActivity

com.jolosdk.home.activity.GBaoExplainActivity

com.jolo.jolopay.JoloPayActivity

com.jolo.jolopay.JoloRechargeActivity

com.jolosdk.home.activity.TicketCenterActivity

com.jolosdk.home.activity.MyTicketActivity

com.jolosdk.home.activity.TicketActivity

com.jolosdk.home.activity.TicketDetailActivity

com.jolosdk.home.activity.GainTicketActivity

com.jolosdk.home.activity.TicketExplainActivity

com.jolosdk.home.activity.TicketBuyActivity

com.jolosdk.home.activity.TicketBuyDialogActivity

com.jolosdk.home.activity.TicketPayListDialogActivity

com.jolosdk.home.activity.TicketPayWarnDialogActivity

com.jolo.account.activity.LogoutActivity

com.jolosdk.home.activity.BeforeLoginActivity

com.jolosdk.home.activity.NormalQuestionActivity

com.jolosdk.home.activity.MessageDetailActivity

com.jolosdk.home.ui.widget.picpicker.PicpickerActivity

com.jolosdk.home.activity.GiftDetailActivity

com.jolosdk.home.activity.AdvBannerActivity

com.jolo.jolopay.WXH5PayActivity

com.jolo.account.activity.UserAuthActivity

com.itsnows.upgrade.service.UpgradeService

com.wan17.agent.aidl.MyRemoteService

com.wan17.agent.checkorder.IntentServiceDemo

com.jolosdk.home.ui.widget.floatball.FloatBallService

com.jolosdk.home.update.DownloadService

com.itsnows.upgrade.receiver.PackagesReceiver

com.itsnows.upgrade.provider.UpgradeFileProvider

android.support.v4.content.FileProvider

Android Permissions

jolosdk_kdxjl_jolo20220221144148347.apk