skype[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
skype.apk
Size 5.6MB
Sample260928-phpr9stbma
SHA256 dcdc3662f866aaa3f37a431e29701d8f588cd462c69230b1aabbaf04de73ef32
MD5 fbfa665f66829ede0766ac2bcca99129
SHA1 68f6147db6eb4c7ad463409f65686cf78cdf58b4
SHA512 08b0103a994ee0730a0ebe590ba3ad1e4a629518e1c9c7cb29aee7d1274c8c05d3351eb3301c1cf3cd61fdb10edb8ff3d1044b4bbc4a966eb1f708c850336462
SSDEEP 98304:1HbcbWLTWhgCrU2tpzn4LZSjLN9LJebSdf/DGt3C4nY1U4siGdfa0PXs92:tbcbOqhZYgOZKLWty4nYDGdftvm2
TLSH
T1944633EC0E8536DAA834B7BCFB78F30903849D94063A947651835B95D593BF0BA37836
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Codesign digest Mismatch 2 IoCs

File was altered after it was signed.

resource
unpack001/a
unpack002/HandWallPlugin-1.0.apk

Insecure Codesign Algorithm 6 IoCs

File was codesigned using an insecure algorithm.

resource
skype.apk
unpack001/a
unpack002/CommonPlugin-1.0.apk
unpack002/FrameworkPlugin-1.0.apk
unpack002/HandWallPlugin-1.0.apk
unpack002/andashi_service.jar

Untrusted Codesign Signers 6 IoCs

Codesigned file was signed by an untrusted entity.

resource
skype.apk
unpack001/a
unpack002/CommonPlugin-1.0.apk
unpack002/FrameworkPlugin-1.0.apk
unpack002/HandWallPlugin-1.0.apk
unpack002/andashi_service.jar

File Explorer

skype.apk

.apk 5.6MB
a

.apk 5.9MB
CommonPlugin-1.0.apk

.apk 392KB
FrameworkPlugin-1.0.apk

.apk 13KB
HandWallPlugin-1.0.apk

.apk 178KB
andashi_service.jar

.apk 5KB

skype.apk

SHA256 dcdc3662f866aaa3f37a431e29701d8f588cd462c69230b1aabbaf04de73ef32
MD5 fbfa665f66829ede0766ac2bcca99129
SHA1 68f6147db6eb4c7ad463409f65686cf78cdf58b4
SHA512 08b0103a994ee0730a0ebe590ba3ad1e4a629518e1c9c7cb29aee7d1274c8c05d3351eb3301c1cf3cd61fdb10edb8ff3d1044b4bbc4a966eb1f708c850336462
SSDEEP 98304:1HbcbWLTWhgCrU2tpzn4LZSjLN9LJebSdf/DGt3C4nY1U4siGdfa0PXs92:tbcbOqhZYgOZKLWty4nYDGdftvm2
TLSH
T1944633EC0E8536DAA834B7BCFB78F30903849D94063A947651835B95D593BF0BA37836
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

cb04979390ca83f8e0c946c27b3bc34d710eb36e

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

Chains

Jan 1, 0001

com.q.t

a

SHA256 0b4f4740459b122510992375765e2983b2b89b85d462f4f5aa63dd82f82f54e2
MD5 1f38e8cc12dc5fc6cd285cb1de694aea
SHA1 df1d16d91c7f7c8f59059921d7e904b332d6c779
SHA512 6362600e4fcce9edf9c9baa3c61793741fc8f99aa4434266eb1e7bfe6e4485b6090e307c82d9e912ee54dfb4d48c0637f26ea76f10265c17351615e985e36efc
SSDEEP 98304:nGD+3tKbUbDB4RzpnpgSVmDL5VsYji+rxpLH+Z9z3SuI6XGe4on7ZxoiwQuyu3BV:G2tKbUXB4R1pL8DzjiGLirC6XGmNmFJJ
TLSH
T177561292B709F826D137E43BD6625356B7188D884141F7272A15B27C0EFBEC09B29FC9
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm arch:mips arch:x86

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

0749cffe5b009ae636bf8c51ebe871d2396c3856

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=android-debug

Chains

Jan 1, 0001

com.fun.appstore

com.main.apps.activity.MainActivity

android.intent.action.MAIN android.intent.action.VIEW

com.main.apps.browser.BrowserActivity

com.main.apps.activity.MarketActivity

com.main.apps.push.PushActivity

com.main.apps.push

com.main.apps.activity.AppGridActivity

com.main.apps.FunAppList

com.main.apps.widget.HotGamesFolderActivity

android.intent.action.MAIN

com.main.apps.widget.BaiduShortcut

android.intent.action.MAIN

com.main.apps.widget.NavigationShortcut

android.intent.action.MAIN

com.main.apps.dialog.GiftDialog

com.main.apps.dialog.DownloadPreDialog

com.main.apps.widget.AppsCommonFolderActivity

android.intent.action.MAIN

com.main.apps.activity.CommonListActivity

com.main.apps.activity.RecommendActivity

com.main.apps.activity.SearchActivity

com.main.apps.activity.ManagerActivity

com.main.apps.activity.AppDetailActivity

com.main.apps.dialog.TableDialog

com.main.apps.activity.FeedbackActivity

com.main.apps.activity.CommentActivity

com.main.apps.fileexplorer.FileExplorer

com.main.apps.activity.MarketAboutActivity

com.main.apps.activity.SettingActivity

com.main.apps.dialog.UpdateAlertDialog

com.main.apps.dialog.SignaDelDialog

com.main.apps.dialog.AddFolderDialog

com.main.apps.widget.FloatWidgetActivity

com.main.apps.activity.WebActivity

com.main.apps.activity.PushWebActivity

com.main.apps.activity.ImagePreview

com.main.apps.activity.ScreenAdActivity

com.main.apps.activity.PhoneClearManager

com.main.apps.activity.PhoneSpeedUpActivity

com.huawei.deviceCloud.microKernel.push.RichPushActivity

com.huawei.android.push.intent.RICHPUSH

com.alimama.mobile.sdk.shell.AlimamaDetail

com.alimama.mobile.sdk.shell.AlimamaWall

com.main.apps.activity.AppRecycleActivity

com.main.apps.activity.AutoManagerActivity

android.intent.action.MAIN

com.main.apps.net.ConnectionMonitor

com.main.apps.receiver.SystemReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.PRE_BOOT_COMPLETED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.ACTION_SHUTDOWN android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.SCREEN_OFF com.mediatek.intent.action.SETTINGS_PACKAGE_DATA_CLEARED android.gzcpc.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT android.intent.action.CLOSE_SYSTEM_DIALOGS android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE com.main.apps.checkSoftUpdateAuto com.main.apps.checkAutoUpdate com.main.apps.updateFolderList com.main.apps.clearTrash com.main.apps.miaoapps

com.main.apps.widget.MycheeringWidget

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.main.apps.widget.action.START_MYCHEERING com.main.apps.widget.action.refresh.Mycheering

com.main.apps.widget.ToolsAppListWidget

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.main.apps.widget.refreshToolsAppWidget

com.main.apps.widget.FunAppListWidget

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.main.apps.widget.refreshFunAppWidget

com.main.apps.widget.HotAppsWidget

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.main.apps.widget.refreshHotAppWidget

com.main.apps.widget.HotGamesWidget

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.main.apps.widget.refreshHotGamesWidget

com.main.apps.widget.FastCleanWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.ACTION_APPWIDGET_DISABLED com.mo8.sdkdemo.action.appwidget.clean.start

com.main.apps.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.intent.action.PUSH_STATE com.huawei.android.push.plugin.RESPONSE com.huawei.intent.action.PUSH

com.huawei.deviceCloud.microKernel.push.EventReceiver

android.net.conn.CONNECTIVITY_CHANGE com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL com.huawei.android.push.intent.REGISTER com.huawei.intent.action.PUSH com.huawei.intent.action.PUSH_ON com.huawei.android.push.PLUGIN android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.ally.sdk.BroadCastReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED

com.mo8.andashi.receiver.PackageChangedReceiver

android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_CHANGED

com.mo8.autoboot.receiver.PackageChangedReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_CHANGED

com.mo8.autoboot.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.mo8.autoboot.receiver.DisableReceiver

com.mo8.autoboot.action_disable_packages

CommonPlugin-1.0.apk

SHA256 154baad68ece78eec31c8b3a3ca806b13420134378f4607943f3e2fe562deddb
MD5 fa0685902135fb10a2334d25195d5b00
SHA1 444dd952b2001be538fc9771da67f1d378b64b52
SHA512 eeae54acabbfb60f1be1e9a9ba41835c6b73b4741c4d5ba9debace7ae9317e2b47451e5eb464e086d8350290ead73849c46b251e081477d7e25a08ba11ae8d11
SSDEEP 12288:d0IzkKDzV01+akXm9hkIkgYbBTT5a8Xiz:LFD+3kX0kgYbBTT5aRz
TLSH
T1C08401866B5D9CE3CA3F8AB275A1934C740078B141F3F62BEE6095584DEBAC04F08B95
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a6d219be2ac9542bc0afe6850cd7a6ce28f533bc

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=wt,OU=c

Chains

Jan 1, 0001

com.taobao.munion.plugin.cm

FrameworkPlugin-1.0.apk

SHA256 657bf3a1a8895055aab1181c643df0b0f8911cfd96fb40c3729a3e8271989abd
MD5 64f00af652a268da300ce9e995081449
SHA1 3d824824cda7c140753383b3cbac67e6ec33c99c
SHA512 69a2ed504ccac73c274f3d961cc84246e21fa49bf0f966432b5b25fde782842a3d5253c25cfdcde436b425dabcc355a8bbd575ad161842b1959231888246f0fa
SSDEEP 192:Ymd/eH0C84Z3UeZgNJpmWwLQa0hpc+yevnIts0EursP3KfJgIIdeLh9HkoYIoBLM:YmEU37pHEWw6pZySnIt6uoP3KBId+HGM
TLSH
T1F952B03F1B6619A1D83E9C72CAA6BF0CAA17C969843C67B354487D7C6CC4040EF1667B
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

43abcaf42774d0d892d424570b123996124fc76a

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=wt,OU=c

Chains

Jan 1, 0001

com.example.bizplugin

HandWallPlugin-1.0.apk

SHA256 2668fc736a14ee740480bb3405771d8902a73488f2107d38e18941b4753f8e4e
MD5 f8b5e6f678a17c267fd733306d4fd5a8
SHA1 55b0f75061354d77672778febea18dc1a9ebc5bf
SHA512 96bec4ec0a77dabfa36f6dc6d138a944c7904117cf015338941005889a74edf112523bb52b921968ebe93e4399704911988d8815fde749c2ddba8e1ade152b1d
SSDEEP 3072:FgKa0/eOp8v6PZqf/AUcaEr/bM4zil1Ho1roDhdI5IMp7aNE8XvxMy6I:yKa6eOn6/fcJr/zzC1H2oQa+aNMy6I
TLSH
T10904AE426648A8B3D13FA033B67173DCA62424F185B3E62FE9A5A1640DF76C09F19FC5
MD5 SHA1 SHA512 SSDEEP TLSH

android

Codesign digest Mismatch

File was altered after it was signed.
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9a8c314f9f6c3e8d29178fa6963fa3bc72b78ce9

Digest Algorithm

sha1

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=wt,OU=c

Chains

Jan 1, 0001

com.alimama.mobile.sdk.handle

andashi_service.jar

SHA256 0fdd66997648d432a017b99e129faa7e50c9568902849cc8e26a1ff081ffb998
MD5 698ab7530be951c006c2cee52a074d0e
SHA1 99d7e61a6d52d4114a7ed484ec71f17bbf0bf172
SHA512 5ee3ab9c544c437c4b57b0d805d1c65bb6de85d59a74780da421772fe6f3f07c6a9b3dff626f5abbab331b96d9b362575654685872e682a0ad487dd04504a717
SSDEEP 96:91TKogsufcYmnSYFH1JaLtccAiSu7uEzWwxoZtfgj2OJycL9cO1cxkK/r4cvweaM:9dKCnWjSu7uWqIxJ7raxj/yer
TLSH
T1E9C17E1F1A0AF69CC05F407DB026B587D86C6058195FAB0B00E17B89771AA381687CE9
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6a78095d984def14b08364946dff98dafa522c93

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Android Debug,O=Android,C=US

Chains

Jan 1, 0001

com.mo8.andashi.service

Android Permissions

skype.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

Sharing

General

Malware Config

Signatures

File Explorer

skype.apk

File Signature issue

com.q.t.QService

a

File Signature issue

com.main.apps.activity.MainActivity

com.main.apps.browser.BrowserActivity

com.main.apps.activity.MarketActivity

com.main.apps.push.PushActivity

com.main.apps.activity.AppGridActivity

com.main.apps.widget.HotGamesFolderActivity

com.main.apps.widget.BaiduShortcut

com.main.apps.widget.NavigationShortcut

com.main.apps.dialog.GiftDialog

com.main.apps.dialog.DownloadPreDialog

com.main.apps.widget.AppsCommonFolderActivity

com.main.apps.activity.CommonListActivity

com.main.apps.activity.RecommendActivity

com.main.apps.activity.SearchActivity

com.main.apps.activity.ManagerActivity

com.main.apps.activity.AppDetailActivity

com.main.apps.dialog.TableDialog

com.main.apps.activity.FeedbackActivity

com.main.apps.activity.CommentActivity

com.main.apps.fileexplorer.FileExplorer

com.main.apps.activity.MarketAboutActivity

com.main.apps.activity.SettingActivity

com.main.apps.dialog.UpdateAlertDialog

com.main.apps.dialog.SignaDelDialog

com.main.apps.dialog.AddFolderDialog

com.main.apps.widget.FloatWidgetActivity

com.main.apps.activity.WebActivity

com.main.apps.activity.PushWebActivity

com.main.apps.activity.ImagePreview

com.main.apps.activity.ScreenAdActivity

com.main.apps.activity.PhoneClearManager

com.main.apps.activity.PhoneSpeedUpActivity

com.huawei.deviceCloud.microKernel.push.RichPushActivity

com.alimama.mobile.sdk.shell.AlimamaDetail

com.alimama.mobile.sdk.shell.AlimamaWall

com.main.apps.activity.AppRecycleActivity

com.main.apps.activity.AutoManagerActivity

com.main.apps.service.CommonService

com.main.apps.download.DownloadService

com.main.apps.service.FastCleanService

com.huawei.deviceCloud.microKernel.push.PushMKService

com.alimama.mobile.sdk.shell.DownloadingService

com.baidu.location.f

com.ally.sdk.DaemonService

com.mo8.autoboot.service.DisableService

com.main.apps.net.ConnectionMonitor

com.main.apps.receiver.SystemReceiver

com.main.apps.widget.MycheeringWidget

com.main.apps.widget.ToolsAppListWidget

com.main.apps.widget.FunAppListWidget

com.main.apps.widget.HotAppsWidget

com.main.apps.widget.HotGamesWidget

com.main.apps.widget.FastCleanWidgetProvider

com.main.apps.push.PushReceiver

com.huawei.deviceCloud.microKernel.push.EventReceiver

com.ally.sdk.BroadCastReceiver

com.mo8.andashi.receiver.PackageChangedReceiver

com.mo8.autoboot.receiver.PackageChangedReceiver

com.mo8.autoboot.receiver.BootReceiver

com.mo8.autoboot.receiver.DisableReceiver

com.main.apps.database.DbProvider

CommonPlugin-1.0.apk

File Signature issue

com.taobao.newxp.view.UMDetail

com.taobao.munion.base.download.DownloadProvider

FrameworkPlugin-1.0.apk

File Signature issue

HandWallPlugin-1.0.apk

File Signature issue

com.taobao.test.MainActivity