cz[.]apk | Triage™

General

Target
cz.apk
Size 19.9MB
Sample261009-pltkmaev6l
SHA256 860d98f980b3f1eb7f7641f2ff2f0e39530dec1a32cc33f00cae26d38e93fdcb
MD5 48f5a91590bb22b93e4ab8129913a0c4
SHA1 d6ba8179a719760bb525d40e53801010ed42c13e
SHA512 e9b60b6d11fbb6495db7c66804e697e839b46e4d35aeec6a53a22a9d722779efccb2e3d4434325cde23055aba2088b7e7b6b5e4531794edb4c754a8102bafba5
SSDEEP 393216:9A4pMNvEyQDL97YLWXKgU0WuRZnH539znptfO78icjHl/ZH/pBRnDRK:9hMN87v97YHMWWZPznpRg8icjFBh1K
TLSH
T160273363E70AEB5BF8B7C53287644A6751541C5842A3E7661BCCB12809FBDC0D68AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
cz.apk

File Explorer

cz.apk

.apk 19.9MB

cz.apk

SHA256 860d98f980b3f1eb7f7641f2ff2f0e39530dec1a32cc33f00cae26d38e93fdcb
MD5 48f5a91590bb22b93e4ab8129913a0c4
SHA1 d6ba8179a719760bb525d40e53801010ed42c13e
SHA512 e9b60b6d11fbb6495db7c66804e697e839b46e4d35aeec6a53a22a9d722779efccb2e3d4434325cde23055aba2088b7e7b6b5e4531794edb4c754a8102bafba5
SSDEEP 393216:9A4pMNvEyQDL97YLWXKgU0WuRZnH539znptfO78icjHl/ZH/pBRnDRK:9hMN87v97YHMWWZPznpRg8icjFBh1K
TLSH
T160273363E70AEB5BF8B7C53287644A6751541C5842A3E7661BCCB12809FBDC0D68AFCC
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

387a17c9578ddb6e8bd01a5da09422f98b52cf804bdf400d40277734b4dcb4f5

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=nrlazk2QmtVNMWQf4G9RZjraJbE2l2jAHUSUOkb8BSERhLobgNqCJqQi%2Bw67CK24uYwYu%2F66bZu3bwOn587x0A%3D%3D,OU=Android,O=Android,L=,ST=,C=CN

cn.mkwx88.fuzhu

Android Permissions

cz.apk

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

cn.mkwx88.fuzhu.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.POST_NOTIFICATIONS

cz.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Sharing

General

Malware Config

Signatures

File Explorer

cz.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

com.taobao.weex.WXGlobalEventReceiver

androidx.profileinstaller.ProfileInstallReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

androidx.startup.InitializationProvider

Android Permissions

cz.apk