Overview

overview

10

Static

static

10

lionairthai.apk

android-9-x86

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    lionairthai.apk

  • Size

    11.4MB

  • MD5

    b2429371b530d634b2b86c331515904f

  • SHA1

    ea5359c8408cdb4ebb7480704fe06a8e3bfa37c3

  • SHA256

    ec1e2ff5c72c233f2b5ad538d44059a06b81b5e5da5e2c82897be1ca4539d490

  • SHA512

    79d7d18e070f6c7c8d3a41d87c52c5c863c2833e58a70dfcd560b425850ee98b5308b03787f7455f72af031ddbb186c156da279e4bd934e67894b5ed37c8d75f

  • SSDEEP

    196608:IMdMDvYD4i6HkR3xSnGF+9Hn34Obet6zf1mOGrJX5/aYnRe2DyZMNRx:IMdMzYD4ixhSnGgn3Uwf1mTrtnRyURx

Score
10/10
gigabud

Malware Config

Extracted

Family

gigabud

C2

http://cmnb9.cc/x/command?token=

http://8.219.85.91:8888/push-streaming?id=1234

Signatures

  • Gigabud family
    gigabud
  • Requests dangerous framework permissions 8 IoCs

Files

  • lionairthai.apk
    .apk android arch:arm

    com.yiwuzhibo

    com.yiwuzhibo.activity.SplashActivity


Android Permissions

lionairthai.apk

Permissions

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_INSTALLED_APPS

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY