Errors

Reason
zip: not a valid zip file
Reason
readat analyses/230807/230807-y74gdshc56/static1/unpack001/jcifs-1.3.18-dexed.jar: negative offset
Reason
zip: not a valid zip file

General

  • Target

    392d9c1f05d8f8d67fbca464690af0d925046f05edbb75087b16c277627b5238.bin

  • Size

    2.4MB

  • MD5

    e2ee98f1ec1e546acfd90372f4855975

  • SHA1

    cd0ad67c662d53401d1cfc1cac01e38eef187b7c

  • SHA256

    392d9c1f05d8f8d67fbca464690af0d925046f05edbb75087b16c277627b5238

  • SHA512

    a3f22aeb971b15c40aa2ecdde9d98fba6e6240775770097990871bcd44d594e8511e5bf80cf4cf3845711afdc55b16c0a1b92a80a25b0e9380bc915f5c67648b

  • SSDEEP

    49152:ALWsSzhcy0kpJD63pfaGHbVQTgAW0DUGWv6+nVTi6gEDiw2OCIt2W:ArBy0kXhM5QsIDYBVbgEmlEQW

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • 392d9c1f05d8f8d67fbca464690af0d925046f05edbb75087b16c277627b5238.bin
    .apk android

    unknown.decline.return

    spring.wage.game.MainActivity


  • 001lighticons-01.png
  • 001lighticons-02.png
  • 001lighticons-03.png
  • 0_0.png
  • 0_1.png
  • 0_10.png
  • 0_100.png
  • 0_101.png
  • 0_102.png
  • 0_103.png
  • 0_104.png
  • 0_105.png
  • 0_106.png
  • 0_107.png
  • 0_108.png
  • 0_109.png
  • 0_11.png
  • 0_110.png
  • 0_111.png
  • 0_112.png
  • 0_113.png
  • 0_12.png
  • 0_13.png
  • 0_14.png
  • 0_15.png
  • 0_16.png
  • 0_17.png
  • 0_18.png
  • 0_19.png
  • 0_2.png
  • 0_20.png
  • 0_21.png
  • 0_22.png
  • 0_23.png
  • 0_24.png
  • 0_25.png
  • 0_26.png
  • 0_27.png
  • 0_28.png
  • 0_29.png
  • 0_3.png
  • 0_30.png
  • 0_31.png
  • 0_32.png
  • 0_33.png
  • 0_34.png
  • 0_35.png
  • 0_36.png
  • 0_37.png
  • 0_38.png
  • 0_39.png
  • 0_4.png
  • 0_40.png
  • 0_41.png
  • 0_42.png
  • 0_43.png
  • 0_44.png
  • 0_45.png
  • 0_46.png
  • 0_47.png
  • 0_48.png
  • 0_49.png
  • 0_5.png
  • 0_50.png
  • 0_51.png
  • 0_52.png
  • 0_53.png
  • 0_54.png
  • 0_55.png
  • 0_56.png
  • 0_57.png
  • 0_58.png
  • 0_59.png
  • 0_6.png
  • 0_60.png
  • 0_61.png
  • 0_62.png
  • 0_63.png
  • 0_64.png
  • 0_65.png
  • 0_66.png
  • 0_67.png
  • 0_68.png
  • 0_69.png
  • 0_7.png
  • 0_70.png
  • 0_71.png
  • 0_72.png
  • 0_73.png
  • 0_74.png
  • 0_75.png
  • 0_76.png
  • 0_77.png
  • 0_78.png
  • 0_79.png
  • 0_8.png
  • 0_80.png
  • 0_81.png
  • 0_82.png
  • 0_83.png
  • 0_84.png
  • 0_85.png
  • 0_86.png
  • 0_87.png
  • 0_88.png
  • 0_89.png
  • 0_9.png
  • 0_90.png
  • 0_91.png
  • 0_92.png
  • 0_93.png
  • 0_94.png
  • 0_95.png
  • 0_96.png
  • 0_97.png
  • 0_98.png
  • 0_99.png
  • BCLlefteyeclosed_200.emd
  • BCLrighteyeclosed_200.emd
  • CertificateWarning.html
    .html .js
  • Excel_exts.txt
  • Excel_mimes.txt
  • FileBrowser.html
  • Flags_1.webp
  • ImageViewer_exts.txt
  • ImageViewer_mimes.txt
  • MFT_fssd_accgray.pb
  • MFT_fssd_fastgray.pb
  • MPExtra.css
  • MediaPlatform.css
  • MediaPlatform.js
    .js
  • MessageViewer_exts.txt
  • MessageViewer_mimes.txt
  • MusicPlayer_exts.txt
  • MusicPlayer_mimes.txt
  • OPENLCS.js
    .js
  • OfficeFileBrowser_exts.txt
  • OfficeFileBrowser_mimes.txt
  • POLITICAS.html
    .html
  • Pdf_exts.txt
  • Pdf_mimes.txt
  • PowerPoint_exts.txt
  • PowerPoint_mimes.txt
  • Roboto-Medium.ttf
  • RxLyO.json
  • SmsPlatformRelease.properties
  • UBReader_exts.txt
  • UBReader_mimes.txt
  • VideoPlayer_exts.txt
  • VideoPlayer_mimes.txt
  • WeReadApi.js
    .js
  • Word_exts.txt
  • Word_mimes.txt
  • YTPlayerView-iframe-player.html
    .html .js
  • addnewbtn.png
  • akbankdirektmobil.cer
  • akbankdirektmobil_test.cer
  • akbankdirektode.cer
  • albumart.jpg
    .jpg
  • angular-translate.min.js
    .js
  • angular.sanitize.min.js
    .js
  • animations.css
  • api_key.txt
  • apimiddleware.js
    .js
  • app.js
    .js
  • app.xml
  • appStyles.xml
    .xml
  • ar.json
  • arch12.bytenn
  • arrow.png
  • assets.czl
  • audio_buy_guide.m4a
  • audio_interact_effect.json
  • av_ic_water_mark_16_9.png
  • av_ic_water_mark_9_16.png
  • avatar_default.png
  • base.bundle
    .js
  • blank.html
    .html
  • book_cover_default.png
  • bootstrap.min.js
    .js
  • bubble_longpress2s.json
  • call.png
  • cfg.json
  • child_whitelist.json
  • chmod.js
    .js
  • cid
    .elf linux x86
  • cn.shuzilm.config.json
  • com.tencent.open.config.json
  • config.js
    .js
  • connecting.mp3
  • container.xml
    .xml
  • content.opf
    .xml
  • copybtn.png
  • cordova-mash-full-1.11.js
    .js
  • crashlytics-build.properties
  • cssInjector.js
    .js
  • current-folder-breadcrumb.html
  • dark.css
  • default_epub.css
  • default_txt.css
  • deletebtn.png
  • dialogs.css
  • dialogs_check.png
  • dialogs_halfcheck.png
  • directives.js
    .js
  • dn.gif
    .gif
  • editor.html
    .html .js
  • editor_display.html
    .html .js
  • en.pattern
  • equalizerbtn.png
  • exitbtn.png
  • externalHttpServerTemplate.html
    .html .js
  • eyemask.png
  • fail.html
    .html
  • ffdkkxckdsdindex.html
    .html
  • file.gif
    .gif
  • filenavigator.js
    .js
  • filters.js
    .js
  • folder.gif
    .gif
  • furniture_drag_and_rotate_web.html
    .html
  • geo_global_ca.cer
  • glyphicons-halflings-regular.woff2
  • gobackbtn.png
  • goforwardbtn.png
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • help.css
  • hianalytics_njjn
  • hmsincas.bks
  • hmsrootcas.bks
  • icon.png
  • icon_lecture_pause_2x.png
  • icon_lecture_pause_3x.png
  • icon_lecture_playing_2x.png
  • icon_lecture_playing_3x.png
  • imageView.html
    .html .js
  • item-context-menu.html
  • item.js
    .js
  • jaxb-api-dexed.jar
    .apk android
  • jcifs-1.3.18-dexed.jar
    .apk android
  • jcifs-1.3.18.jar
  • js_protocol.md
  • jumpbackward_button.png
  • jumpforward_button.png
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • load_page_metrics.js
    .js
  • localinfo
  • loggers.config
  • loggers.debug.config
  • lookup_fc.png
  • main-icons.html
  • main-table-modal.html
  • main-table.html
  • main.css
  • main.html
  • man.png
  • metrics_configuration
  • mimetype
  • more.png
  • mp-video.js
    .js
  • navbar.html
  • nend_button_cancel.png
  • nend_information_icon.png
  • normalize.css
  • note.html
  • note_abstract.html
  • note_book.html
  • note_book_author.html
  • note_book_count.html
  • note_book_title.html
  • note_bookmark.html
  • note_divider.html
  • note_review.html
  • note_review_quote.html
  • note_review_rate.html
  • note_review_text.html
  • note_title.html
  • note_underline.html
  • officialArticle.js
    .js
  • offline.html
    .html
  • offlinepng.png
  • omsdk-v1.js
    .js
  • omsdk_v1.js
    .js
  • onboarding_web.html
    .html
  • pausebtn.png
  • pk_animation.webp
  • playback_speed.png
  • playbtn.png
  • player_indicator.json
  • plugins.json
  • poi_sticker_iconfont.ttf
  • pro.json
  • problems.html
    .html
  • pulling.json
  • radio1.html
    .html .js
  • randomCA.crt
  • rangy-highlighter.js
    .js
  • reader-mp.js
    .js
  • reader-viewer.js
    .js
  • reportMP.js
    .js
  • rich_display.js
    .js
  • right_pic.json
  • ring.mp3
  • secondarybtn.png
  • selbtn.png
  • selector-controller.js
    .js
  • settings.js
    .js
  • settings.json
  • sidebar.html
  • silence.mp3
  • sleep_timer.png
  • social_tab_update_anim.json
  • sortnamebtn.png
  • spinner.html
  • ss.properties
  • stickpoint_switch_music_loading.gif
    .gif
  • strings.txt
  • style.css
  • stylesheets.css
  • success.html
    .html
  • supplierconfig.json
  • tag_profile_live.json
  • test.html
    .html .js
  • theme.xml
    .xml
  • toc.ncx
    .xml
  • translations.js
  • ttlive_ctd_motion.json
  • ttlive_gift_combo_wave.json
  • ttlive_gift_group_dot.json
  • ttlive_gift_group_guide.json
  • ttlive_gift_group_wave.json
  • ttlive_ic_loading_point.webp
  • ttlive_live_line.json
  • ttlive_lottie_anim_follow_tick.json
  • ttlive_lottie_anim_follow_tick_rtl.json
  • ttlive_lottie_interaction_waiting.json
  • ttlive_lucky_box_ready.json
  • tv_guidance3_web.html
    .html
  • tv_guidance4_web.html
    .html
  • txt_emotions.txt
  • up.gif
    .gif
  • updatesdkcas.bks
  • upload.html
    .html
  • user_info_follow_complete.json
  • video_yh_loading_icon.png
  • voicerecordlist1.html
  • water_animation.mp4
  • wbjs.js
    .js
  • white_circle_color_light.json
  • world_notify.webp
  • wr.css
  • wr_mp.css
  • zip.gif
    .gif
  • zipbtn.png
  • zoombtn.png

Android Permissions

392d9c1f05d8f8d67fbca464690af0d925046f05edbb75087b16c277627b5238.bin

Permissions

android.permission.WRITE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_DELETE_PACKAGES

android.permission.NFC

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.DISABLE_KEYGUARD

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.GET_ACCOUNTS

android.permission.READ_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.REORDER_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.READ_SYNC_STATS

android.permission.CALL_PHONE