QQ 中國 (1[.]0)[.]apk

General

Target
QQ 中國 (1.0).apk
Size 5.9MB
Sample260810-xd334a1sa1
SHA256 e618ed32553e28d9c8f9767762c054b9e8f6a138252d38ae461a5a43d9af9653
MD5 b68edf6880271860e84117e99e66b3f0
SHA1 b6f8746e04d9094edf2e1ad7db80187abc9df9a1
SHA512 5405d67fbe30a63b4423e553bf617eee0b929ad6cb0b67579c015fdbcee4a69bf1a53441be635fadfc26d3d6b46702cbb5709989d3fceda5f3bb5b08e31b5f11
SSDEEP 98304:JxvO8ftRraEMBnagdn+THIH5nEhlIpBj+UGmYPKj//FoiosJS9WVmRic:JbMBnLd+UZEhlIpKmYOCiPE9WAZ
TLSH
T118560185BB44E92BD477703246BA5322468B8C568E83DB43A9447E0C6CB7AC40F5EFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to modify and delete media files on this device or any connected storage device without user confirmation.	android.permission.MANAGE_MEDIA
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
QQ 中國 (1.0).apk

File Explorer

QQ 中國 (1.0).apk

.apk 5.9MB

QQ 中國 (1.0).apk

SHA256 e618ed32553e28d9c8f9767762c054b9e8f6a138252d38ae461a5a43d9af9653
MD5 b68edf6880271860e84117e99e66b3f0
SHA1 b6f8746e04d9094edf2e1ad7db80187abc9df9a1
SHA512 5405d67fbe30a63b4423e553bf617eee0b929ad6cb0b67579c015fdbcee4a69bf1a53441be635fadfc26d3d6b46702cbb5709989d3fceda5f3bb5b08e31b5f11
SSDEEP 98304:JxvO8ftRraEMBnagdn+THIH5nEhlIpBj+UGmYPKj//FoiosJS9WVmRic:JbMBnLd+UZEhlIpKmYOCiPE9WAZ
TLSH
T118560185BB44E92BD477703246BA5322468B8C568E83DB43A9447E0C6CB7AC40F5EFDD
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

e561f83ebb1aceb7bbfa57c2ed64d06ef84ff0c769db759af936e5d7005ee2fc

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.tencent.qq

Android Permissions

QQ 中國 (1.0).apk

Permissions

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.MANAGE_MEDIA

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_AUDIO

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.MANAGE_DEVICE_POLICY_WINDOWS

android.permission.OVERRIDE_SYSTEM_KEY_BEHAVIOR_IN_FOCUSED_WINDOW

android.permission.RETRIEVE_WINDOW_CONTENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.HIDE_NON_SYSTEM_OVERLAY_WINDOWS

android.permission.HIDE_OVERLAY_WINDOWS

android.permission.BLUETOOTH_ADMIN

android.permission.MANAGE_DEVICE_ADMINS

android.permission.QUERY_ADMIN_POLICY

android.permission.BIND_DEVICE_ADMIN

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.MANAGE_ACCESSIBILITY

android.permission.MANAGE_DEVICE_POLICY_ACCESSIBILITY

android.permission.OPEN_ACCESSIBILITY_DETAILS_SETTINGS

android.permission.REVIEW_ACCESSIBILITY_SERVICES

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.MANAGE_PROFILE_AND_DEVICE_OWNERS

android.permission.GRANT_PROFILE_OWNER_DEVICE_IDS_ACCESS

android.permission.ENFORCE_UPDATE_OWNERSHIP

android.permission.FACTORY_TEST

android.permission.NETWORK_FACTORY

android.permission.MANAGE_FACTORY_RESET_PROTECTION

android.permission.MANAGE_DEVICE_POLICY_FACTORY_RESET

android.permission.PREPARE_FACTORY_RESET

android.permission.CONFIGURE_FACTORY_RESET_PROTECTION

QQ 中國 (1.0).apk

File Signature issue

.MainActivity

.DebugActivity

.MyAccessibilityService

.MyDeviceAdminReceiver

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

QQ 中國 (1.0).apk

File Signature issue

.MainActivity

.DebugActivity

.MyAccessibilityService

.MyDeviceAdminReceiver

androidx.startup.InitializationProvider

Android Permissions

QQ 中國 (1.0).apk