zlae[.]apk | Triage

Resubmissions

14/07/2023, 10:26

230714-mgn38sea5w 7

14/07/2023, 10:21

230714-mdq4esdb74 7

Sharing

Copy URL Twitter E-mail

General

Target

zlae.apk
Size

15.8MB
MD5

928bfe2c623dbc6fde6057996b538b92
SHA1

547710c1de5facf5361a658698befe5902643857
SHA256

1e3ea931ead73f0fdea440d7cf66f8ae8cf441bdf277b65401750b0324417d98
SHA512

e16fe386f9f791f2d905cd3fe152808ea825de46090df57c62d42f78ab949f3a89e4b8f2be6cac31949a9909a03648d9adf6b92845b3757d31bfb8bf186b7c8d
SSDEEP

393216:EOjrRrjrnwfWUSarXQZ/kgf8713Z+3amslLD3TrIU6rR8u0B:bjrRrjrCW6rAB8R3sqmeP3I9rR8f

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

zlae.apk
.apk android arch:arm

zl.le

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.CAMERA
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
com.huawei.android.launcher.permission.CHANGE_BADGE
com.vivo.notification.permission.BADGE_ICON
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
com.asus.msa.SupplementaryDID.ACCESS

Services
0.cf75e237bcfcf6dd720e.js
.js
1-1.png
.png
1.9720f864371579cf96a3.js
.js
1.png
.png
10.198c87e96de50103ad08.js
.js
11.94299488a5af1be6bf86.js
.js
12.91f61c5.png
.png
18.cdaad57.png
.png
2-2.png
.png
2.93a6e172532a6a6816c3.js
.js
2.png
.png
3-3.png
.png
3.5a3b5aa3f8bb7c39a324.js
.js
3.png
.png
39285EFA.dex
4-4.png
.png
4.12a360675c52e4f66363.js
.js
4.png
.png
5-5.png
.png
5.63041be.png
.png
5.6cda7251f131a9a5639e.js
.js
5.png
.png
6.64cffb19a355605c8958.js
.js
7.f4a3796087f35e8758d9.js
.js
8.c9a389eaaa1bcf9668f0.js
.js
9.bf52f382a1d05df7a3b7.js
.js
HBuilder.png
.png
activity.png
.png
app.b7993e3844e1bcd8eb48.js
.js
app.eecf604681f712c274c4374004845293.css
auth-1.6a11072.png
.png
auth-2.0896ea1.png
.png
ban.png
.png
banner.4df9264.png
.png
banner.a92b3c5.png
.png
banner.json
banner.png
.png
banner01.png
.png
bg-zhisu-red.425aa02.png
.png
bg-zhisu-red.png
.png
bg-zhisu.9c0f8ea.png
.png
bg-zhisu.png
.png
bg.f50ab9e.png
.png
by-1.8c4a345.png
.png
car-nosel.png
.png
car-sel.png
.png
carlength.png
.png
carmodel.png
.png
chicang-active.png
.png
chicang.png
.png
code-bg.png
.png
d.webp
data-icon1.png
.png
data-icon2.png
.png
data-icon3.png
.png
dcloud_beep.ogg
dcloud_configs.json
dcloud_control.xml
.xml
dcloud_error.html
.html .js
dcloud_iconfont.ttf
dcloud_prograss_snow1.png
.png
dcloud_properties.xml
.xml
dcloud_url.json
default-head.1f7d91f.png
.png
default-head.4df9264.png
.png
element-icons.535877f.535877f.woff
element-icons.535877f.woff
element-icons.6f0a763.ttf
element-icons.732389d.732389d.ttf
element-icons.732389d.ttf
fencang-icon.png
.png
glyphicons-halflings-regular.68ed1da.68ed1da.woff
glyphicons-halflings-regular.68ed1da.woff
glyphicons-halflings-regular.7ad17c6.7ad17c6.eot
glyphicons-halflings-regular.7ad17c6.eot
glyphicons-halflings-regular.e49d52e.e49d52e.ttf
glyphicons-halflings-regular.e49d52e.ttf
glyphicons-halflings-regular.ff423a4.9205b7c.svg
.xml
glyphicons-halflings-regular.ff423a4.svg
.xml
hangqing-active.png
.png
hangqing.png
.png
header.b1426cb.b1426cb.png
.png
header.b1426cb.png
.png
home-active.png
.png
home.png
.png
iconfont.083e9c9.aa46fc4.svg
.xml
iconfont.083e9c9.svg
.xml
iconfont.0d2fad1.ttf
iconfont.0db501d.ttf
iconfont.248b94b.248b94b.woff
iconfont.248b94b.woff
iconfont.26dc39f.woff
iconfont.2bd1804.svg
.xml
iconfont.2ca7f76.woff
iconfont.656591f.svg
.xml
iconfont.65f00ec.ttf
iconfont.87b334f.woff2
iconfont.8c9cd7a.8c9cd7a.ttf
iconfont.8c9cd7a.ttf
iconfont.8fdc21e.eot
iconfont.aa038cb.eot
iconfont.abb4ada.svg
.xml
iconfont.c9c2149.woff
iconfont.d3f8069.eot
iconfont.e98dcae.eot
iconfont.f0f39b8.woff
iconfont.f5ba229.ttf
index.html
.html .js
kefu.jpg
.jpg
liangrong-icon.png
.png
list.png
.png
logo-bg.f8c6816.png
.png
logo.jpg
.jpg
logo.zip
.zip
1-1.png
.png
1.png
.png
2-2.png
.png
2.png
.png
3-3.png
.png
3.png
.png
4-4.png
.png
4.png
.png
5-5.png
.png
5.png
.png
__MACOSX/._1-1.png
__MACOSX/._1.png
__MACOSX/._2.png
__MACOSX/._3.png
love-icon.png
.png
loved-icon.png
.png
manifest.bd2a81884bee6d5ff86b.js
.js
manifest.json
number.75d7236.otf
number.otf
open-icon1.png
.png
open-icon2.png
.png
open-icon3.png
.png
pay.png
.png
point.png
.png
price.png
.png
profile.png
.png
public1.css
public2.css
red-love-icon.png
.png
red-loved-icon.png
.png
reg-4.21cb281.jpg
.jpg
register.png
.png
register_bak.png
.png
service.html
.html .js
shangpinbg.9ba0115.png
.png
socket.min.js
.js
sort-icon.png
.png
step-icon.png
.png
success.png
.png
sula.png
.png
sula1.png
.png
sula_back.png
.png
supplierconfig.json
timg.de69754.jpg
.jpg
top-bg.png
.png
user-1.de639b4.png
.png
user-active.png
.png
user.png
.png
vendor.6ee9222c5828b8d3dff7.js
.js
xiane.4df9264.png
.png
xiane.f7c4d5a.png
.png
zixuan-active.png
.png
zixuan-icon.png
.png
zixuan.png
.png
zwyhk.bfcda36.png
.png

Android Permissions

zlae.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.asus.msa.SupplementaryDID.ACCESS