2021051317112829984[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
2021051317112829984.apk
Size 274.8MB
Sample260922-xdq4jaytds
SHA256 a67f6b54618420e475ef89958aa5f8f13a1c0a931b38de24092c71bf0b42386f
MD5 14ee2de9b281d317f50a1bc5ef1a4b2b
SHA1 770b0c562b261e74aa3f9aa956f6559e8b1231a3
SHA512 293eccc29d8042188cfdf0899d101a86f1fd318770f961899faedca39e1b923e2912ebc759f1943491a18c2af20e427f30e25937be7b02655c5467ad82af8f59
SSDEEP 6291456:9HDnXigQ5yR2iE+/DydASwrHheaCn6flB/kgvmXSvnICtDQ+YSGY/X7w2U6E5bKv:9jXigQKDydAjL26RH/ICtcdSGfXJ5bKv
TLSH
T10CD83386FB718D26C837D073092E1A6014970D468652EB17BE6D735C5FB3AC4AE49FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2021051317112829984.apk

File Explorer

2021051317112829984.apk

.apk 274.8MB

2021051317112829984.apk

SHA256 a67f6b54618420e475ef89958aa5f8f13a1c0a931b38de24092c71bf0b42386f
MD5 14ee2de9b281d317f50a1bc5ef1a4b2b
SHA1 770b0c562b261e74aa3f9aa956f6559e8b1231a3
SHA512 293eccc29d8042188cfdf0899d101a86f1fd318770f961899faedca39e1b923e2912ebc759f1943491a18c2af20e427f30e25937be7b02655c5467ad82af8f59
SSDEEP 6291456:9HDnXigQ5yR2iE+/DydASwrHheaCn6flB/kgvmXSvnICtDQ+YSGY/X7w2U6E5bKv:9jXigQKDydAjL26RH/ICtcdSGfXJ5bKv
TLSH
T10CD83386FB718D26C837D073092E1A6014970D468652EB17BE6D735C5FB3AC4AE49FC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

b68a62e3f07bdb42797240cef5e0c7d79c84c072ee9a741e4ad2eafb795736e7

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Virtual Master,L=Changsha,ST=Huname

com.vmos.app

android.permission.ACCESS_BACKGROUND_LOCATION android.permission.CAMERA android.permission.PACKAGE_USAGE_STATS android.permission.EXPAND_STATUS_BAR android.permission.STOP_APP_SWITCHES android.permission.CHANGE_CONFIGURATION android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.REORDER_TASKS android.permission.SYSTEM_OVERLAY_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.INSTALL_PACKAGES android.permission.INJECT_EVENTS android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.WAKE_LOCK android.permission.RECORD_AUDIO android.permission.GET_TASKS android.permission.REQUEST_DELETE_PACKAGES android.permission.ACCESS_GPS android.permission.ACCESS_ASSISTED_GPS android.permission.ACCESS_LOCATION android.permission.READ_PHONE_NUMBERS android.permission.FOREGROUND_SERVICE android.permission.VIBRATE android.permission.WAKE_LOCK android.permission.RECORD_AUDIO android.permission.CAPTURE_AUDIO_OUTPUT android.permission.CAPTURE_VIDEO_OUTPUT android.permission.CAPTURE_SECURE_VIDEO_OUTPUT android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.BLUETOOTH android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.WRITE_SETTINGS android.permission.WRITE_SECURE_SETTINGS android.permission.RECEIVE_BOOT_COMPLETED android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.BLUETOOTH_ADMIN android.permission.MODIFY_PHONE_STATE android.permission.READ_CALENDAR android.permission.KILL_BACKGROUND_PROCESSES com.asus.msa.SupplementaryDID.ACCESS android.permission.QUERY_ALL_PACKAGES

com.qq.e.ads.ADActivity

com.qq.e.ads.PortraitADActivity

com.vmos.app.NewSurActivity

android.intent.action.MAIN

com.vmos.app.LauncherActivity

com.vmos.app.ContentActivity

com.vmos.app.RendererActivity

com.vmos.activity.DownloadProActivity

com.vmos.app.protocol.WebViewActivity

com.vmos.app.fileshare.ReceiveFileActivity

android.intent.action.SEND

com.vmos.activity.ShowFloatTipsActivity

com.yanzhenjie.permission.bridge.BridgeActivity

com.xuexiang.xutil.system.PermissionUtils$PermissionActivity

com.ss.android.downloadlib.addownload.compliance.AppPrivacyPolicyActivity

com.ss.android.downloadlib.addownload.compliance.AppDetailInfoActivity

com.ss.android.downloadlib.activity.TTDelegateActivity

com.ss.android.downloadlib.activity.JumpKllkActivity

com.bytedance.sdk.openadsdk.activity.base.TTWebPageActivity

com.bytedance.sdk.openadsdk.activity.base.TTMiddlePageActivity

com.bytedance.sdk.openadsdk.activity.base.TTPlayableWebPageActivity

com.bytedance.sdk.openadsdk.activity.base.TTVideoWebPageActivity

com.bytedance.sdk.openadsdk.activity.base.TTVideoScrollWebPageActivity

com.bytedance.sdk.openadsdk.dislike.TTDislikeWebViewActivity

com.bytedance.sdk.openadsdk.activity.base.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.base.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.base.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.base.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.base.TTFullScreenExpressVideoActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.socialbase.appdownloader.view.JumpUnknownSourceActivity

com.qq.e.ads.LandscapeADActivity

com.qq.e.ads.RewardvideoPortraitADActivity

com.qq.e.ads.RewardvideoLandscapeADActivity

com.qq.e.comm.DownloadService

com.vmos.app.RFService

com.vmos.app.keeplive.PlayerMusicService

com.vmos.app.keeplive.DaemonService

com.vmos.app.keeplive.CancelNoticeService

com.vmos.app.killSelfService

com.vmos.app.zygote_service.MyServiceInit

com.vmos.app.zygote_service.MyService

com.vmos.app.zygote_service.MyService1

com.vmos.app.zygote_service.MyService2

com.vmos.app.zygote_service.MyService3

com.vmos.app.zygote_service.MyService4

com.vmos.app.zygote_service.MyService5

com.vmos.app.zygote_service.MyService6

com.vmos.app.zygote_service.MyService7

com.vmos.app.zygote_service.MyService8

com.vmos.app.zygote_service.MyService9

com.vmos.app.zygote_service.MyService10

com.vmos.app.zygote_service.MyService11

com.vmos.app.zygote_service.MyService12

com.vmos.app.zygote_service.MyService13

com.vmos.app.zygote_service.MyService14

com.vmos.app.zygote_service.MyService15

com.vmos.app.zygote_service.MyService16

com.vmos.app.zygote_service.MyService17

com.vmos.app.zygote_service.MyService18

com.vmos.app.zygote_service.MyService19

com.vmos.app.zygote_service.MyService20

com.vmos.app.zygote_service.MyService21

com.vmos.app.zygote_service.MyService22

com.vmos.app.zygote_service.MyService23

com.vmos.app.zygote_service.MyService24

com.vmos.app.zygote_service.MyService25

com.vmos.app.zygote_service.MyService26

com.vmos.app.zygote_service.MyService27

com.vmos.app.zygote_service.MyService28

com.vmos.app.zygote_service.MyService29

com.vmos.app.zygote_service.MyService30

com.vmos.app.zygote_service.MyService31

com.vmos.app.zygote_service.MyService32

com.vmos.app.zygote_service.MyService33

com.vmos.app.zygote_service.MyService34

com.vmos.app.zygote_service.MyService35

com.vmos.app.zygote_service.MyService36

com.vmos.app.zygote_service.MyService37

com.vmos.app.zygote_service.MyService38

com.vmos.app.zygote_service.MyService39

com.vmos.app.zygote_service.MyService40

com.vmos.app.windowmanager.WindowService

com.vmos.app.utils.vmlog.VMLogService

com.hpplay.sdk.source.mirror.ScreenCastService

com.hpplay.sdk.source.mirrorcast.ScreenCastService.ACTION

com.xuexiang.xupdate.service.DownloadService

com.ss.android.socialbase.downloader.notification.DownloadNotificationService

com.ss.android.socialbase.downloader.downloader.DownloadService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.ss.android.socialbase.downloader.impls.DownloadHandleService

com.ss.android.socialbase.downloader.downloader.SqlDownloadCacheService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.ss.android.socialbase.appdownloader.DownloadHandlerService

com.ss.android.socialbase.appdownloader.RetryJobSchedulerService

com.bytedance.tea.crash.upload.CrashUploadService

com.liulishuo.filedownloader.services.FileDownloadService$SharedMainProcessService

com.liulishuo.filedownloader.services.FileDownloadService$SeparateProcessService

Android Permissions

2021051317112829984.apk

Permissions

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.CAMERA

android.permission.PACKAGE_USAGE_STATS

android.permission.EXPAND_STATUS_BAR

android.permission.STOP_APP_SWITCHES

android.permission.CHANGE_CONFIGURATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INSTALL_PACKAGES

android.permission.INJECT_EVENTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_GPS

android.permission.ACCESS_ASSISTED_GPS

android.permission.ACCESS_LOCATION

android.permission.READ_PHONE_NUMBERS

android.permission.FOREGROUND_SERVICE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.CAPTURE_AUDIO_OUTPUT

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.CAPTURE_SECURE_VIDEO_OUTPUT

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.BLUETOOTH

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS