app[.]apk | Triage™

General

Target
app.apk
Size 27.6MB
Sample260807-k5jsbaeh97
SHA256 e658226363de0f01e113591527490da1b9ced835275ec2c0e24142d8ea057af0
MD5 daf4e0d9ba04d1063f3720c67c1cfdd6
SHA1 9cfc47c71a692aef7651ede6c7732191a962c248
SHA512 357cf0e13e6d5f8d838e6bc7f1bf3e77c7e6712cda0a20fcb2d867a7929fe25e99059ab454e24d64f116b4e18c0450fa2dc960db3ba9e29545d18fdac89d3983
SSDEEP 786432:PV7kFis2mLL4G2wkRDzCF9tw6c5eLZJznpRg8icjSNV1AJ:P2ss2m34jP29tmeFJ7g8PSRM
TLSH
T1B75733B3DB1ADA66E5B3C23787A34B1765511CA54342D7732A8DF12C09FBAC04A49FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
app.apk

File Explorer

app.apk

.apk 27.6MB

app.apk

SHA256 e658226363de0f01e113591527490da1b9ced835275ec2c0e24142d8ea057af0
MD5 daf4e0d9ba04d1063f3720c67c1cfdd6
SHA1 9cfc47c71a692aef7651ede6c7732191a962c248
SHA512 357cf0e13e6d5f8d838e6bc7f1bf3e77c7e6712cda0a20fcb2d867a7929fe25e99059ab454e24d64f116b4e18c0450fa2dc960db3ba9e29545d18fdac89d3983
SSDEEP 786432:PV7kFis2mLL4G2wkRDzCF9tw6c5eLZJznpRg8icjSNV1AJ:P2ss2m34jP29tmeFJ7g8PSRM
TLSH
T1B75733B3DB1ADA66E5B3C23787A34B1765511CA54342D7732A8DF12C09FBAC04A49FC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

8837020d2c496aea7f2f8d677e9f468550074ab70130402ad453daeeb3741665

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=1,OU=1,O=1,L=1,ST=1,C=1

uni.app.UNI85B919E

Android Permissions

app.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

uni.app.UNI85B919E.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.GET_ACCOUNTS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

app.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

uts.sdk.modules.DCloudUniMedia.SystemPickerActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

app.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

uts.sdk.modules.DCloudUniMedia.SystemPickerActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Android Permissions

app.apk