XiTing-6[.]1[.]0[.]apk

General

Target
XiTing-6.1.0.apk
Size 1.3MB
Sample261107-mx9d4sef56
SHA256 225e290b21e862f97b3c1bbd41cc75723f7696e7929cbbcd9bbe7dd123a1151d
MD5 cb80539463ce71e4a46576cce185407c
SHA1 5696cf24f0be9d9c34c3241430fde4803b9baaf3
SHA512 7b78d1ab4f3e68d335fe0f04c5a4a106a7eec1ba9c9386de8219c78172e46b228e41ed0eb895576565d0d27b4668f483539fc2b3ca23b14cd0745532fe20f145
SSDEEP 24576:XXEjp4fqetvWWJf4+oOM+X8yvYlSI8HBiz0uman2fGaGW0YB:XUtYVJf4C/nW58xlGWB
TLSH
T15555BE16F6866657C872C1768D02DAA12669FC6DAF0343136449BB3D38BB3E4CF163E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
XiTing-6.1.0.apk

File Explorer

XiTing-6.1.0.apk

.apk 1.3MB

XiTing-6.1.0.apk

SHA256 225e290b21e862f97b3c1bbd41cc75723f7696e7929cbbcd9bbe7dd123a1151d
MD5 cb80539463ce71e4a46576cce185407c
SHA1 5696cf24f0be9d9c34c3241430fde4803b9baaf3
SHA512 7b78d1ab4f3e68d335fe0f04c5a4a106a7eec1ba9c9386de8219c78172e46b228e41ed0eb895576565d0d27b4668f483539fc2b3ca23b14cd0745532fe20f145
SSDEEP 24576:XXEjp4fqetvWWJf4+oOM+X8yvYlSI8HBiz0uman2fGaGW0YB:XUtYVJf4C/nW58xlGWB
TLSH
T15555BE16F6866657C872C1768D02DAA12669FC6DAF0343136449BB3D38BB3E4CF163E4
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

affde673c325821e806dd642de6610975571ba4d871d0c2cbf1ca2ed0e248881

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=XiTing Release,OU=XiTing,O=ch1209498273,C=CN

com.lujinyu.xiting

Android Permissions

XiTing-6.1.0.apk

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

XiTing-6.1.0.apk

File Signature issue

com.lujinyu.xiting.listening.ListeningActivity

com.lujinyu.xiting.MainActivity

com.lujinyu.xiting.AboutActivity

com.lujinyu.xiting.OverlayService

com.lujinyu.xiting.CaptionService

com.lujinyu.xiting.SuggestJobService

com.lujinyu.xiting.NotificationListener

com.lujinyu.xiting.XiTingTile

com.lujinyu.xiting.XiTingWidget

com.lujinyu.xiting.XiTingWidgetCompact

com.lujinyu.xiting.XiTingWidgetLarge

com.lujinyu.xiting.BootReceiver

Sharing

General

Malware Config

Signatures

File Explorer

XiTing-6.1.0.apk

File Signature issue

com.lujinyu.xiting.listening.ListeningActivity

com.lujinyu.xiting.MainActivity

com.lujinyu.xiting.AboutActivity

com.lujinyu.xiting.OverlayService

com.lujinyu.xiting.CaptionService

com.lujinyu.xiting.SuggestJobService

com.lujinyu.xiting.NotificationListener

com.lujinyu.xiting.XiTingTile

com.lujinyu.xiting.XiTingWidget

com.lujinyu.xiting.XiTingWidgetCompact

com.lujinyu.xiting.XiTingWidgetLarge

com.lujinyu.xiting.BootReceiver

Android Permissions

XiTing-6.1.0.apk