100-28[.]apk | Triage™

General

Target
100-28.apk
Size 121.5MB
Sample261102-hr14bsed58
SHA256 92989a281bc3370e69aa312526f4602966125f123da0e0257371f4632d292c67
MD5 22a52c148a3ef4bf7ab755331c2e9fcb
SHA1 3733f93fb5f3d7fec9a156181e0cd8d59128ced2
SHA512 17bb78acb7ffbd095fcf4a1d688c115ddc97fe038cad5e44a38150bcbd3d222b81dfb6f28a5e1242ccc00e6e7a6c79cffde5063c72fca4a57851653ddfbf7731
SSDEEP 1572864:iukP2yYgqFc/vhe3rBMQuZawdITFjTFid2DNpw:iupiYgY7mQuZBdITFto2DNu
TLSH
T10158F10AF10CC927C8C9B1BCBE6E06D276156E2982E4C1567525B218FFFB2E049777E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
100-28.apk

File Explorer

100-28.apk

.apk 121.5MB

100-28.apk

SHA256 92989a281bc3370e69aa312526f4602966125f123da0e0257371f4632d292c67
MD5 22a52c148a3ef4bf7ab755331c2e9fcb
SHA1 3733f93fb5f3d7fec9a156181e0cd8d59128ced2
SHA512 17bb78acb7ffbd095fcf4a1d688c115ddc97fe038cad5e44a38150bcbd3d222b81dfb6f28a5e1242ccc00e6e7a6c79cffde5063c72fca4a57851653ddfbf7731
SSDEEP 1572864:iukP2yYgqFc/vhe3rBMQuZawdITFjTFid2DNpw:iupiYgY7mQuZBdITFto2DNu
TLSH
T10158F10AF10CC927C8C9B1BCBE6E06D276156E2982E4C1567525B218FFFB2E049777E1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

488d07553cac89c884bfc158d13e1d41ae194cbe822e7b08f5ee2c1df0a78dcb

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=DuiDuiHu,OU=IT,O=DuiDuiHu,C=CN

com.gjapp.data

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.umeng.message.component.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.component.UmengMessageReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.umeng.message.action

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.START_SERVICE com.taobao.accs.intent.action.ELECTION

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.taobao.accs.internal.AccsJobService

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.huawei.HuaweiRcvService

com.huawei.push.action.MESSAGING_EVENT

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG com.huawei.push.msg.PASSBY_MSG

com.xiaomi.mipush.sdk.MessageHandleService

com.xiaomi.push.service.XMPushService

com.xiaomi.push.service.XMJobService

com.xiaomi.mipush.sdk.PushMessageHandler

com.vivo.push.sdk.service.CommandClientService

com.heytap.msp.push.service.CompatibleDataMessageCallbackService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.heytap.msp.push.service.DataMessageCallbackService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE com.heytap.msp.push.RECEIVE_MCS_MESSAGE

com.meizu.cloud.pushsdk.NotificationService

org.android.agoo.honor.HonorMsgService

com.hihonor.push.action.MESSAGING_EVENT

com.huawei.agconnect.core.ServiceDiscovery

org.android.agoo.mezu.MeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.umeng.message.component.UmengNotificationReceiver

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND com.taobao.accs.intent.action.START_FROM_AGOO

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

org.android.agoo.vivo.PushMessageReceiverImpl

com.vivo.pushclient.action.RECEIVE

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.meizu.flyme.push.intent.PUSH_SYSTEM

Android Permissions

100-28.apk

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

com.android.vending.BILLING

com.gjapp.data.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_NETWORK_STATE

com.google.android.gms.permission.AD_ID

android.permission.WAKE_LOCK

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.POST_NOTIFICATIONS

com.gjapp.data.permission.PROCESS_PUSH_MSG

com.gjapp.data.permission.PUSH_PROVIDER

com.gjapp.data.permission.MIPUSH_RECEIVE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

com.meizu.flyme.push.permission.RECEIVE

com.gjapp.data.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.gjapp.data.permission.C2D_MESSAGE

com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO

Sharing

General

Malware Config

Signatures

File Explorer

100-28.apk

File Signature issue

com.gjapp.data.MainActivity

com.yalantis.ucrop.UCropActivity

com.xamdesign.safe_device.MockLocation.MainActivity

com.umeng.message.UmengOfflineMessageActivity

io.flutter.plugins.urllauncher.WebViewActivity

com.linecorp.linesdk.openchat.ui.CreateOpenChatActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationActivity

com.linecorp.linesdk.auth.internal.LineAuthenticationCallbackActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.common.api.GoogleApiActivity

com.tencent.rtmp.video.TXScreenCapture$TXScreenCaptureAssistantActivity

com.umeng.message.component.UmengNotificationClickActivity

com.umeng.message.notify.UPushMessageNotifyActivity

com.huawei.hms.support.api.push.TransActivity

com.xiaomi.mipush.sdk.NotificationClickedActivity

com.huawei.hms.activity.BridgeActivity

com.huawei.hms.activity.EnableServiceActivity

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.umeng.message.component.UmengIntentService

com.umeng.message.component.UmengMessageReceiverService

com.umeng.message.component.UmengMessageHandlerService

com.taobao.accs.ChannelService

com.taobao.accs.ChannelService$KernelService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.internal.AccsJobService

org.android.agoo.accs.AgooService

org.android.agoo.huawei.HuaweiRcvService

com.huawei.hms.support.api.push.service.HmsMsgService

com.xiaomi.mipush.sdk.MessageHandleService

com.xiaomi.push.service.XMPushService

com.xiaomi.push.service.XMJobService

com.xiaomi.mipush.sdk.PushMessageHandler

com.vivo.push.sdk.service.CommandClientService

com.heytap.msp.push.service.CompatibleDataMessageCallbackService

com.heytap.msp.push.service.DataMessageCallbackService

com.meizu.cloud.pushsdk.NotificationService

org.android.agoo.honor.HonorMsgService

com.huawei.agconnect.core.ServiceDiscovery

org.android.agoo.mezu.MeizuPushReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.umeng.message.component.UmengNotificationReceiver

com.taobao.accs.ServiceReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.xiaomi.push.service.receivers.PingReceiver

org.android.agoo.vivo.PushMessageReceiverImpl

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.zaihui.installplugin.InstallFileProvider

com.crazecoder.openfile.FileProvider

androidx.startup.InitializationProvider

com.squareup.picasso.PicassoProvider

com.umeng.message.component.UmengMessageProvider

com.huawei.hms.support.api.push.PushProvider

com.huawei.hms.aaid.InitProvider

com.huawei.agconnect.core.provider.AGConnectInitializeProvider

Android Permissions

100-28.apk