Genshin Private Server v7[.]1 (1)[.]apk

Reason

error processing APK: zip: not a valid zip file

General

Target
Genshin Private Server v7.1 (1).apk
Size 696.9MB
Sample261107-2pcgqsst7l
SHA256 4d0cc15611036d52cd9dfbfe597dd59c5533af043018371d35131c97a61e1829
MD5 91fe03723863d1544b70edc6e2f6eca3
SHA1 5088abf8917d7fc69ddcb667fb91ef3b581d760d
SHA512 23f5d38a71b73147a3197ae3c5d46e9e36a95bc2918ba973510f68d3aa341c370c51752d2335e799b95852933b511d9fb1d43ef8789fe43f1937083ade646ce9
SSDEEP 12582912:rzPFani41WhHT0GTRTuj+4LIIBSUv3Gov4b:vPciaWhH95uj+LIBTeov4b
TLSH
T1DB79D0046275961ECD95053974D31DEE21F19C4ADE81FB833E0DB62EAFB3A59CB0E290
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
Genshin Private Server v7.1 (1).apk
unpack001/xuoos.animegamesproxy.apk

File Explorer

Genshin Private Server v7.1 (1).apk

.apk 696.9MB
origin.apk

505.7MB
xuoos.animegamesproxy.apk

.apk 7.0MB

Genshin Private Server v7.1 (1).apk

SHA256 4d0cc15611036d52cd9dfbfe597dd59c5533af043018371d35131c97a61e1829
MD5 91fe03723863d1544b70edc6e2f6eca3
SHA1 5088abf8917d7fc69ddcb667fb91ef3b581d760d
SHA512 23f5d38a71b73147a3197ae3c5d46e9e36a95bc2918ba973510f68d3aa341c370c51752d2335e799b95852933b511d9fb1d43ef8789fe43f1937083ade646ce9
SSDEEP 12582912:rzPFani41WhHT0GTRTuj+4LIIBSUv3Gov4b:vPciaWhH95uj+LIBTeov4b
TLSH
T1DB79D0046275961ECD95053974D31DEE21F19C4ADE81FB833E0DB62EAFB3A59CB0E290
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

70794219f1d2561d40a76898001792d9ef1b4013a05bf7baf01621e2173c3729

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=xiawanli,OU=aa,O=aa,L=aa,ST=aa,C=CN

com.yuuki.gios

com.miHoYo.GetMobileInfo.MainActivity

android.intent.action.MAIN

com.mihoyo.sdk.hoyolink.protocol.HoYoLinkProtocolActivity

android.intent.action.VIEW android.intent.action.VIEW

com.miHoYo.sdk.webview.framework.activity.WebActivity

com.mihoyo.sora.share.facebook.FacebookShareActivity

com.combosdk.module.platform.zxing.android.CaptureActivity

com.mihoyo.combo.ad.consent.privacy.ConsentPrivacyActivity

com.mihoyo.combo.ad.consent.manage.ConsentManagePreferencesActivity

com.mihoyoos.sdk.platform.SdkActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW android.intent.action.VIEW

com.mihoyoos.sdk.platform.SchemeActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.mihoyoos.sdk.platform.module.pay.webcheckout.ui.WebCheckoutWebActivity

com.mihoyoos.sdk.platform.module.pay.webcheckout.ui.WebCheckoutOverlayActivity

com.combosdk.module.ua.ProtocolActivity

com.combosdk.module.ua.OverseaProtocolActivity

com.combosdk.module.ua.WebActivity

com.combosdk.support.basewebview.WebViewFileChooserActivity

com.mihoyo.combo.ConfirmActivity

com.mihoyo.combo.ScanConfirmActivity

com.mihoyo.combo.DeviceLimitActivity

com.mihoyo.combo.AlertActivity

com.mihoyo.combo.AlertSelectActivity

androidx.credentials.playservices.HiddenActivity

com.mihoyo.platform.utilities.permissions.inner.PermissionActivity

com.mihoyo.hoyolab.share.core.callback.HoYoLabShareCallbackActivity

android.intent.action.VIEW

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.facebook.CustomTabMainActivity

com.twitter.sdk.android.tweetui.PlayerActivity

com.twitter.sdk.android.tweetui.GalleryActivity

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.twitter.sdk.android.tweetcomposer.ComposerActivity

com.twitter.sdk.android.core.identity.OAuthActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

xuoos.animegamesproxy.apk

SHA256 7d275ba78ecbf1e0a3eac924407ae948e70e9bce93ea2d0df4a3719e4549d040
MD5 f057e74163e38e381ee98cbd2396eb3f
SHA1 2d5e27794b2b59c1f3187ce2230e1577632845b8
SHA512 4388dd3bf87359c2cbda81ea381302d6e79b7199935bdd14a2d38d84cfccc687678e586a26c562518ae43661e8c9730d96a1804c74634fc2523a07b957d23e46
SSDEEP 98304:i08JoRGufNr1S1LrDsj8wGQasm9HQdUudcFahM1IcTZVNhHCmKsIhW:nRj7wQdUudcFailKBW
TLSH
T14276C045BF8C582AD9F6B03CCA4B0362B02F6C581B01C2576421B22DEEB77E55F66BD1
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

956fe482f90b651b4205a52a23652a30e2865a0ca33a8cac58284a4d5c1b6605

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Xuoos,C=CN

xuoos.animegamesproxy

Android Permissions

Genshin Private Server v7.1 (1).apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.BLUETOOTH

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.SCHEDULE_EXACT_ALARM

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.google.android.gms.permission.AD_ID

com.yuuki.gios_com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_AUDIO

com.google.android.c2dm.permission.RECEIVE

android.permission.ACCESS_ADSERVICES_AD_ID

com.android.vending.BILLING

com.yuuki.gios.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

Errors

General

Malware Config

Signatures

File Explorer

Genshin Private Server v7.1 (1).apk

File Signature issue

com.miHoYo.GetMobileInfo.MainActivity

com.mihoyo.sdk.hoyolink.protocol.HoYoLinkProtocolActivity

com.miHoYo.sdk.webview.framework.activity.WebActivity

com.mihoyo.sora.share.facebook.FacebookShareActivity

com.combosdk.module.platform.zxing.android.CaptureActivity

com.mihoyo.combo.ad.consent.privacy.ConsentPrivacyActivity

com.mihoyo.combo.ad.consent.manage.ConsentManagePreferencesActivity

com.mihoyoos.sdk.platform.SdkActivity

com.facebook.FacebookActivity

com.facebook.CustomTabActivity

com.mihoyoos.sdk.platform.SchemeActivity

com.mihoyoos.sdk.platform.module.pay.webcheckout.ui.WebCheckoutWebActivity

com.mihoyoos.sdk.platform.module.pay.webcheckout.ui.WebCheckoutOverlayActivity

com.combosdk.module.ua.ProtocolActivity

com.combosdk.module.ua.OverseaProtocolActivity

com.combosdk.module.ua.WebActivity

com.combosdk.support.basewebview.WebViewFileChooserActivity

com.mihoyo.combo.ConfirmActivity

com.mihoyo.combo.ScanConfirmActivity

com.mihoyo.combo.DeviceLimitActivity

com.mihoyo.combo.AlertActivity

com.mihoyo.combo.AlertSelectActivity

androidx.credentials.playservices.HiddenActivity

com.mihoyo.platform.utilities.permissions.inner.PermissionActivity

com.mihoyo.hoyolab.share.core.callback.HoYoLabShareCallbackActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.facebook.CustomTabMainActivity

com.twitter.sdk.android.tweetui.PlayerActivity

com.twitter.sdk.android.tweetui.GalleryActivity

com.google.android.gms.games.internal.v2.resolution.GamesResolutionActivity

com.google.android.gms.games.internal.v2.appshortcuts.PlayGamesAppShortcutsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.twitter.sdk.android.tweetcomposer.ComposerActivity

com.twitter.sdk.android.core.identity.OAuthActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.miHoYo.GameStateService.GameStateService

com.combosdk.module.push.impl.MiHoYoFirebaseMessagingService

com.combosdk.module.push.impl.localpush.internal.ReceiverAlarmService

com.combosdk.module.download.LiveService

com.combosdk.module.download.ReceiveClickService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.sessions.SessionLifecycleService

androidx.room.MultiInstanceInvalidationService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.twitter.sdk.android.tweetcomposer.TweetUploadService

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.combosdk.module.push.impl.localpush.internal.NotificationReceiver

com.mihoyo.hoyolab.share.core.callback.HoYoLabShareCallbackReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.combosdk.module.share.sora.ShareProvider

com.facebook.FacebookContentProvider

com.mihoyo.platform.sdk.devicefp.os.internal.OSParamsProvider

com.combosdk.support.basewebview.WebViewFileProvider

com.google.android.gms.games.provider.PlayGamesInitProvider

com.google.firebase.provider.FirebaseInitProvider

com.facebook.internal.FacebookInitProvider

androidx.startup.InitializationProvider

origin.apk

xuoos.animegamesproxy.apk

File Signature issue

androidx.profileinstaller.ProfileInstallReceiver