Overview

overview

7

Static

static

7

Bitfinex-2.apk

android-9-x86

1

libjiagu.so

debian-9-armhf

libjiagu_a64.so

ubuntu-18.04-amd64

libjiagu_a64.so

debian-9-armhf

libjiagu_a64.so

debian-9-mips

libjiagu_a64.so

debian-9-mipsel

user_protocal.html

windows7-x64

1

user_protocal.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bitfinex-2.apk

  • Size

    24.1MB

  • MD5

    de49af2de83b3a4d3776711e5a24ec39

  • SHA1

    2a8facfd8c0ca55c65e86ff9b6a6d1865266a0ad

  • SHA256

    e27f4fc8995be6ef158d8cf4d3a26b5b57fd713772581c222588b6abcc157644

  • SHA512

    8806ff5ba223b22bcd87a7276fb51ead29e5a04162fc24c23f9051513bec253ed3c72b2dd6d45926415f1fa43942ac6761bfaf6ec06b8a50efa22003c3260cbc

  • SSDEEP

    786432:9C+y+WsjNsFM+KDt/6izppt06izptBskzp:C+jCrKpSYl9YeOp

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • Bitfinex-2.apk
    .apk android arch:arm64 arch:arm

    com.qh.bitfinex

    com.qh.bitfinex.login.FlashActivity


  • .appkey
  • libjiagu.so
    .elf linux arm
  • libjiagu_a64.so
    .elf linux aarch64
  • province.json
  • user_protocal.html
    .html

Android Permissions

Bitfinex-2.apk

Permissions

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.FLASHLIGHT