General

  • Target

    8070d06e59875be3c4319e4fc77fa8e51e6de50f8b21d06e190a3f887b361d0e

  • Size

    3.3MB

  • MD5

    3bbf3dee422c17e89b8af5f8c71001b7

  • SHA1

    573e9c24c511b522aca58645fd041a44f1e015f1

  • SHA256

    8070d06e59875be3c4319e4fc77fa8e51e6de50f8b21d06e190a3f887b361d0e

  • SHA512

    f60ed86428f7bea6bc762b6ce01b8d393ce10fd5a34d187f2999db067fa72be8ad6b5e6a431a374dd1500c01f0cb1e2a5dbee398ef2e40674d758288fa049dd9

  • SSDEEP

    98304:v+GckJntKw9GqPGj1flVia+JNEF+KbVUqxBzDTS1Z:WGR3KwDPGJyaWRUU+h6

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • 8070d06e59875be3c4319e4fc77fa8e51e6de50f8b21d06e190a3f887b361d0e
    .zip
  • META-INF/com/google/android/update-binary
    .sh linux
  • META-INF/com/google/android/updater-script
  • README.md
  • common/post-fs-data.sh
    .sh linux
  • common/service.sh
    .sh linux
  • common/system.prop
  • install.sh
  • mb.apk
    .apk android arch:arm64

    com.mubei.android

    com.mubei.android.activity.MainActivity


  • mb/mb.sh
    .sh linux
  • mb/mb9.sh
    .sh linux
  • mb/墓碑关闭.sh
    .sh linux
  • mb/墓碑启动.sh
    .sh linux
  • mb/墓碑黑名单.conf
  • mb/检测.sh
  • module.prop