aix-wallet[.]apk | Triage™

General

Target
aix-wallet.apk
Size 29.9MB
Sample261013-plcbcacz8w
SHA256 9960a736dd8b1fd2623e10a31297ab4e108218ca9ac86ea878ebe72fa80ec9ba
MD5 a98963020a5fe3e194ec58666ed4b206
SHA1 77d4d8f80f50e28fa8c777084b079309f79c59a0
SHA512 2800bef19b9a5c932c3a5bf2090232e55f4a46cd2aabaf36b91d3bb56159ab4fa4a208211ef8510e15d973568b9ea641727638c2f2fa5b19cd4781559ea0f4ab
SSDEEP 786432:VCl7Q3SvrIwjHrhvrIwhbI8vrIwavrIwnvrIwYaA:GMCvnZvnhbBvnavnnvnY/
TLSH
T183673311F71ED169C89BD63F53E1531BA90F0C99074FE3B7164AFA284A777C406A0ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
aix-wallet.apk

File Explorer

aix-wallet.apk

.apk 29.9MB

aix-wallet.apk

SHA256 9960a736dd8b1fd2623e10a31297ab4e108218ca9ac86ea878ebe72fa80ec9ba
MD5 a98963020a5fe3e194ec58666ed4b206
SHA1 77d4d8f80f50e28fa8c777084b079309f79c59a0
SHA512 2800bef19b9a5c932c3a5bf2090232e55f4a46cd2aabaf36b91d3bb56159ab4fa4a208211ef8510e15d973568b9ea641727638c2f2fa5b19cd4781559ea0f4ab
SSDEEP 786432:VCl7Q3SvrIwjHrhvrIwhbI8vrIwavrIwnvrIwYaA:GMCvnZvnhbBvnavnnvnY/
TLSH
T183673311F71ED169C89BD63F53E1531BA90F0C99074FE3B7164AFA284A777C406A0ACA
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

6ac76cca378d629419af67d63b157093df98169f5cd965ab315e5cd01bb53e7e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=58Q%2B8mGUIycmFlMgkrDoLiwa80LPAS%2Fvjta8258hKVdkxMA%2FKg1ouee9q6fz5SnQD2UEUeHLvmzcK4aOaF4u7g%3D%3D,OU=Android,O=Android,L=,ST=,C=CN

plus.H5F19357F

Android Permissions

aix-wallet.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

com.asus.msa.SupplementaryDID.ACCESS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WRITE_CONTACTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.GET_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_SETTINGS

aix-wallet.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Sharing

General

Malware Config

Signatures

File Explorer

aix-wallet.apk

File Signature issue

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.sdk.activity.WebViewActivity

io.dcloud.sdk.base.service.DownloadService

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.sdk.base.service.provider.DCloudAdFileProvider

Android Permissions

aix-wallet.apk