gs[.]apk | Triage™

General

Target
gs.apk
Size 18.4MB
Sample260707-wweb1sbx3x
SHA256 55c7b299f0b3d38150d8493727f168ffef933bca7965c3c7be9fd7a288af3020
MD5 6eb9a19dcabc7fe8b35cecabaa3e8884
SHA1 b52782d36b644f0d78f6aaa3f05df58e776400ec
SHA512 b4c9ff59341fb90b0190d4b0fbde2c749c269ea6f34d852eef579063e8022f0b053a00a160245910104d6e85da5b774c06aca644514c0555a8a3d7322bf48e88
SSDEEP 393216:126yPmBHf9fH1ZwDNxhTCuIdauRZ/H5/tznptfO78icjHN:M6jf9fH+hyaOZPznpRg8icjt
TLSH
T1A7173356F79DD666E5B3C6368B2906A7B5560C980383E3630B89B13C0CFBEC05685FC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
gs.apk

File Explorer

gs.apk

.apk 18.4MB

gs.apk

SHA256 55c7b299f0b3d38150d8493727f168ffef933bca7965c3c7be9fd7a288af3020
MD5 6eb9a19dcabc7fe8b35cecabaa3e8884
SHA1 b52782d36b644f0d78f6aaa3f05df58e776400ec
SHA512 b4c9ff59341fb90b0190d4b0fbde2c749c269ea6f34d852eef579063e8022f0b053a00a160245910104d6e85da5b774c06aca644514c0555a8a3d7322bf48e88
SSDEEP 393216:126yPmBHf9fH1ZwDNxhTCuIdauRZ/H5/tznptfO78icjHN:M6jf9fH+hyaOZPznpRg8icjt
TLSH
T1A7173356F79DD666E5B3C6368B2906A7B5560C980383E3630B89B13C0CFBEC05685FC9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b440f856d592fea9ec968095eeb19d3e545ccdf8ab76e5e529a58a8a22e06ee6

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=v510HRSljgNOm3Lcwdzbdyoaef9n512WD5exrpRbIBXTwhPhKBJILSA2jHSG%2Bl4MvVc26TKQpv2cp9xLkYziqQ%3D%3D,OU=Android,O=Android,L=,ST=,C=CN

uni.app.UNI18D3B9F

Android Permissions

gs.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

com.asus.msa.SupplementaryDID.ACCESS

uni.app.UNI18D3B9F.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

gs.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

gs.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Android Permissions

gs.apk