General

  • Target

    d2c5e4af486a01426f5c98f8ffb13f69f1defece0e07f2c7e4f39d8c2593829b.apk

  • Size

    5.6MB

  • MD5

    95fb562c7721bc502223e9a0b9e5b0f6

  • SHA1

    6ed60847eefb78b9a91d8e0433dc5ea3494357f0

  • SHA256

    d2c5e4af486a01426f5c98f8ffb13f69f1defece0e07f2c7e4f39d8c2593829b

  • SHA512

    a59d5e5840378df2610f599f1529835ec0dc9fd9e74fbaae167152d16dc9b0e01a2d46c99d722e7c88f02ff8fbfed4c25caa3e51fd101e28bd940d0ce6117f15

  • SSDEEP

    98304:Q6NZwHRVLnc20uge7A1PVTf4uFwEEp/txdrroaMtiXIFvGxQdyxrk:Q6fwHRBncHudM9VTfRFwEGRiyKGWdyNk

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • d2c5e4af486a01426f5c98f8ffb13f69f1defece0e07f2c7e4f39d8c2593829b.apk
    .apk android

    com.tencent.reading

    com.tencent.reading.p1279eff1


  • 66666692.amr
    .zip
  • 66666692.tar
    .tar .js
  • appx/af-appx.min.css
  • appx/af-appx.min.js
    .js
  • appx/af-appx.worker.min.js
    .js
  • appx/es6-promise.min.js
    .js
  • appx/index.html
    .html .js
  • appx/security-patch.min.js
    .js
  • appx/web-view.min.js
    .js
  • appx/worker.min.js
    .js
  • bugme.cfg
  • hpmfile.json
  • CERT.json
  • Manifest.xml
    .xml
  • SIGN.json
  • 66666692.appinfo.json
  • AlipayNumber.ttf
  • GaGGTqhhy1.gF9
  • MOBILEIC@idNoMacau
    .js
  • MOBILEIC@secret-question
    .js
  • QUICKPAY@card-no-flex
    .js
  • QUICKPAY@pwd-validate-flex
    .js
  • QUICKPAY@recommend-setspwd-flex
    .js
  • QUICKPAY@waika-select-country-and-area-flex
    .js
  • ag_sdk_cbg_root.cer
  • ali_purchase_ext_iconfont.ttf
  • amc-h5.js
    .js
  • amc.i18n.en_US
  • amc.i18n.zh_HK
  • amc.i18n.zh_TW
  • buy_address_ltao.xml
  • buy_image_select_ltao.xml
  • buy_image_text_ltao.xml
  • buy_input_ltao.xml
  • buy_item_ltao.xml
  • buy_pay_for_another_ltao.xml
  • buy_quantity_ltao.xml
  • buy_select_ltao.xml
  • buy_submit_ltao.xml
  • buy_switch_ltao.xml
  • buy_switch_tj_ltao.xml
  • buy_tips_ltao.xml
  • buy_tips_tj_new_ltao.xml
  • configuration.json
  • dx_appstyle.json
  • framework_slice.json
  • framework_slice_light.png
    .png
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • homepage_dxc_data.json
  • lastAccetsbkup.zip
    .zip
  • 66666692.amr
    .zip
  • 66666692.tar
    .tar .js
  • appx/af-appx.min.css
  • appx/af-appx.min.js
    .js
  • appx/af-appx.worker.min.js
    .js
  • appx/es6-promise.min.js
    .js
  • appx/index.html
    .html .js
  • appx/security-patch.min.js
    .js
  • appx/web-view.min.js
    .js
  • appx/worker.min.js
    .js
  • bugme.cfg
  • hpmfile.json
  • CERT.json
  • Manifest.xml
    .xml
  • SIGN.json
  • 66666692.appinfo.json
  • AlipayNumber.ttf
  • MOBILEIC@idNoMacau
    .js
  • MOBILEIC@secret-question
    .js
  • QUICKPAY@card-no-flex
    .js
  • QUICKPAY@pwd-validate-flex
    .js
  • QUICKPAY@recommend-setspwd-flex
    .js
  • QUICKPAY@waika-select-country-and-area-flex
    .js
  • ag_sdk_cbg_root.cer
  • amc-h5.js
    .js
  • amc.i18n.en_US
  • amc.i18n.zh_HK
  • amc.i18n.zh_TW
  • dinamic/buy_address_ltao.xml
  • dinamic/buy_image_select_ltao.xml
  • dinamic/buy_image_text_ltao.xml
  • dinamic/buy_input_ltao.xml
  • dinamic/buy_item_ltao.xml
  • dinamic/buy_pay_for_another_ltao.xml
  • dinamic/buy_quantity_ltao.xml
  • dinamic/buy_select_ltao.xml
  • dinamic/buy_submit_ltao.xml
  • dinamic/buy_switch_ltao.xml
  • dinamic/buy_switch_tj_ltao.xml
  • dinamic/buy_tips_ltao.xml
  • dinamic/buy_tips_tj_new_ltao.xml
  • dinamic/dx_appstyle.json
  • dinamic/trade_test_address.xml
  • ext/purchase_ext_plugins.json
  • fonts/ali_purchase_ext_iconfont.ttf
  • fonts/purchase_iconfont.ttf
  • framework_slice/framework_slice.json
  • framework_slice/images/framework_slice_light.png
    .png
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • homepage_dxc_data.json
  • map/7/style_antsports01.data
  • map/7/style_light.data
  • map/style_antsports01.data
  • map/style_light.data
  • primary80.prof
  • theme/configuration.json
  • tr_china_cities.json
  • tr_china_cities_v2.db
  • triver.mock.appinfo.json
  • triver_iconfont.ttf
  • uik_core_iconfont.ttf
  • updatesdkcas.bks
  • vi-amc.js
    .js
  • video_weex.msoac
  • video_windmillapi.json
  • voice_thinking/images/voice_thinking_image_0.png
    .png
  • voice_thinking/voice_thinking.json
  • weex_config_bindingx.json
  • weex_config_evocationapp.json
  • weex_config_fashionai.json
  • weex_config_interactive.json
  • weex_config_mytaobao.json
  • weex_config_shopref.json
  • weex_config_tblive.json
  • weex_config_tbplay.json
  • widget_v8.js
    .js
  • windmill.worker.js
    .js
  • workerjs_multiworker.js
    .js
  • workerjs_v8.js
    .js
  • yuv2rgb.frag
  • yuv2rgb.vert
  • primary80.prof
  • purchase_ext_plugins.json
  • purchase_iconfont.ttf
  • style_antsports01.data
  • style_light.data
  • tr_china_cities.json
  • tr_china_cities_v2.db
  • trade_test_address.xml
  • triver.mock.appinfo.json
  • triver_iconfont.ttf
  • uik_core_iconfont.ttf
  • updatesdkcas.bks
  • vi-amc.js
    .js
  • video_weex.msoac
  • video_windmillapi.json
  • voice_thinking.json
  • voice_thinking_image_0.png
    .png
  • weex_config_bindingx.json
  • weex_config_evocationapp.json
  • weex_config_fashionai.json
  • weex_config_interactive.json
  • weex_config_mytaobao.json
  • weex_config_shopref.json
  • weex_config_tblive.json
  • weex_config_tbplay.json
  • widget_v8.js
    .js
  • windmill.worker.js
    .js
  • workerjs_multiworker.js
    .js
  • workerjs_v8.js
    .js
  • yuv2rgb.frag
  • yuv2rgb.vert

Android Permissions

d2c5e4af486a01426f5c98f8ffb13f69f1defece0e07f2c7e4f39d8c2593829b.apk

Permissions

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES