Resubmissions

20-11-2023 06:59

231120-hsab1aec44 7

01-08-2023 06:52

230801-hm7ejsea43 7

01-08-2023 06:50

230801-hme1asfb3t 7

General

  • Target

    synthnet.apk

  • Size

    34.2MB

  • MD5

    73c55e38f936325fc308f73ce58da5a4

  • SHA1

    f5283be075f9e521b882042ddac34078dd2f4d04

  • SHA256

    1366b928506c24f6f41faf69d27cff4e90ea33f4ad86b7d404144ac8f12020b4

  • SHA512

    1a207cac94f16e9fa3db08f37c0ca65ef57d67d46d75231c2be15aa9c9c24fbee181e22c5b5e7cee0da9298b7442dec38063fe5d5ff66c9afe460a65de5c917b

  • SSDEEP

    786432:rjlp9P827+noIv91WnwzAGegsjwaG+BlKTfqPLtYyu:fljPn7fQ9gn8M1jdLBYiYn

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • synthnet.apk
    .apk android arch:arm64 arch:arm

    com.miner.synthnet

    com.miner.synthnet.WelcomeActivity


  • .jgapp
  • LabelMap.pb
  • Latn_ctc_cpu.binarypb
  • aksara_page_layout_analysis_rpn_gcn.binarypb
  • aksara_page_layout_analysis_ti_rpn_gcn.binarypb
  • barcode_ssd_mobilenet_v1_dmp25_quant.tflite
  • baseline.prof
  • baseline.profm
  • bi_an_move.xml
    .xml
  • bian_main.xml
    .xml
  • bit_logo.png
    .png
  • button_not_pressed.xml
    .xml
  • button_pressed.xml
    .xml
  • buttonselector.xml
    .xml
  • cherryBlosProtected.dat
  • colors.xml
    .xml
  • conv_model.fb
  • file_paths.xml
    .xml
  • ic_launcher_background.xml
    .xml
  • img_closure.png
    .png
  • libjiagu.so
    .elf linux arm
  • libjiagu_a64.so
    .elf linux aarch64
  • libjiagu_x64.so
    .elf linux x64
  • libjiagu_x86.so
    .elf linux x86
  • litepal.xml
    .xml
  • logo-loading.json
  • lstm_model.fb
  • model.tflite
  • network_security_config.xml
    .xml
  • oned_auto_regressor_mobile.tflite
  • oned_feature_extractor_mobile.tflite
  • region_proposal_text_detector_tflite_vertical_mbv2_v1.bincfg
  • rpn_text_detection_tflite_mobile_mbv2.binarypb
  • rpn_text_detector_mobile_space_to_depth_quantized_mbv2_v1.tflite
  • spinning-circles.json
  • strings.xml
  • taser_script_identification_tflite_mobile.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_engine.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_engine_ti.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_recognizer.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_runner.binarypb
  • taser_tflite_gocrlatin_mbv2_scriptid_aksara_layout_gcn_mobile_runner_ti.binarypb
  • tflite_langid.tflite
  • tflite_script_detector_0.3.bincfg
  • tflite_script_detector_0.3.conv_model
  • tflite_script_detector_0.3.lstm_model
  • view_main.xml
    .xml
  • yf_tool_entry.xml
    .xml

Android Permissions

synthnet.apk

Permissions

cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK

cn.swiftpass.wxpay.permission.MM_MESSAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

org.simalliance.openmobileapi.SMARTCARD

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.FOREGROUND_SERVICE

com.huawei.permission.external_app_settings.USE_COMPONENT

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_CONTACTS

android.permission.QUERY_ALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.miner.synthnet.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION