signed10322c[.]apk

Sharing

Reason

open /tmp/unpacked-apk3592844478/assets/lhYIWhii1nuCteMowtv851msqS1Ak0JSp4uvvC84ZDrhYPWxHFEaLTi35FseqS8bPMnzVq35wBiBJfFM6E3QwJgGWCA0k4NgGqCmCxNqMKOkKSu0aQiXZsPgFROs0cUDYc5sNskI2NeW577dhL0EV1roLwRVUuAJ1lwIXbmTGK6mn4mJUKlonpT8VRRrMzZImG6TLyqfzg9k5faSkibkilvLDyYfv5hgWy0S9D9wuf0hqIdPR0hDyOzakupmKkVF03yHftURkP0dwou5vizwYOTi99HOnWWjvuhykG: file name too long

General

Target

signed10322c.apk
Size

21.1MB
MD5

a31fec324cad87fb47073cd292d5465f
SHA1

71284358b30991e2d768fb419c9b13418eb9f0f9
SHA256

34f69b72c80eb4e5657d91439785d702cd1b482594ee5b19d3f306ca9403aa25
SHA512

507a28f12ad1784beff01b1ffdd794fbf560d8af17fe4bd964ca474ecf68277745eaec265494a77585c509b3169bda4a0afb6d3cfeed17441c942a9a7ec13a5c
SSDEEP

393216:qxt1bny7fZQnPqq7g3etv/Pg4dmXZhnEDCsqbuTy7+mR0VnfLRfwzXd/4Vt6PdwD:SXb2q8kfgQmJtEpqD7+mKVfLR6it6VU

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

signed10322c.apk
.apk android arch:arm

Password: spf200
3Q3kelzxCvij8iEzY0VGk
4IbizSnY8lslHdbKToEgIgBCksxOE8O1oin
8NW2gqY9I0CK56nTBrmI0
9XzD6AUSq6RkrJUCOQfoDPSbiBBIgB3zb6LsAmBXk0Q1JZ9WAH8ei4HufxvF9lLZcrjw9BcCotdO92CuDPiKEYqhyrnc27Y9o1YsQNY9EG1Z04v
AOn4tYHj40TnOFg3nu02UeMPF002FW24
ArjWEfHmJ5oMJRc4pftcTm0Ex2RdiTlbspu0wq58R2BJVqxsFELR8BsoCPyNyEe0TmtuxmH9kww2VrUhEyJPiEe17fyR3sJmXL0I7c6s7NHLeBDl6
EpDKMdusNAZhPvhwXsKbxSmGfpTEnsx0h2To52VlFbYhJQw6BGn0hfOWc7Exu1fv
GZTUeEXI
GoogleSans-Regular.ttf
Hd83sR45swSUJ0NlhWiN3dz0VBEQEClrS0iqw7LkeTzzh9jMpMWBBUhDOih1noA0k
JBI3IMii6cHVqVPf7B9kIGj0FwJ1A56wkkGIOm5GxKQvj22Kxfg1otCdrTylcrSb
JHf0VGxAjq0YZr9f
Jb8ArOy0T3uIqv0ccGPOhAwLPK0b6i2eVrxeXi
MMJiHMXQmPvsIvLt08UoAzxA5wC6Fc5SVXjfiV
P8UpjYmbMeCRXAG09Tm0pbmgHUTMUiq7CxcU1kIodKtNwnZgC5p9vYWOVNTAeKsDYGoAyXjYl8XPSKUu6Mk04sLOMz9nChkDs0019yTPWBYxb
Pizdp6kdr3sfZwo652wDmugIimsz9rl1O9vKDbHKCYTb3nczy0BIhFZub15dOWf0RCB1bP
QQG0cShIAPTKO8GeAF7eblOkGK1DgGNqwIokjU520On
RCRHVMCyBLx2Jc00i9lzW6imUTY2HHEC04mC4XGu77ypHr8ImErL2goWtFXbYL1
SIrg8Lq8cQVOJ05A5gSuxesCx9WK7Gd8R3d9tPm4gnLtx56QAnmUlMONp0U00RbGNY7QW6gq4ZnkE9eCdfkTutWfpBTE5ndAleRK9p5Eh70xzDirVr7UGsmtb1AunNvRVX9ArFEYlRMxDzRXsCU
Sx8FpfHpp9S3XfzvqG1K5U0rEBcHMgsbUMHQ0Q2NK3e0I82Ijj6r94f9yQbYd0Oi
TncgDUehkfu4kW0eIGN7KFh4rUYfCODk1A2JSBc283ufsKxYIP8E
Uy0V0jkDgBnhUfqDQFb4SiHu
V
XfvtB7ihTL4Cb1y1KMLI1LlPoTCmtLnc68YCGHNLBU3uvtbVs8U
YXdSjvwR7oqP3weMEul7JtCpKeKy8lB5pp7WAPPHW53ECFGgdztOxQCFvZifV9UVXvzNAslZQOkOA9XfIDuI2YIKYCBMHJXXlhRhf3RWoF9TGYewcdHrPl30X
YYBznZPyo28OXXCLBDVZ9Qj4tN0JXlqVt6smoDLKSi
bdGCI4OFICqJ3QdoAWNXh0m1pVT0jcZvTTof
com1.s
config.json
easyagent
.apk android

Password: spf200

com.google.android.cts

Permissions

android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.INTERNET
android.permission.DISABLE_KEYGUARD
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE

Services

com.xts.uievent.script.service.ScriptServerService

SCRIPT.SERVER.STARTED.ACTION
SCRIPT.SERVER.STOP.ACTION
SCRIPT.EXEC.START.ACTION
SCRIPT.EXEC.START.FILE.ACTION
ectemplate
ecurl.dat
gN2MepJI4
gyMuXKT1PjyCZ8dgVZouJ0
icJQRElhB8T75Wqxr0d4oDHzodOQ9bgLqNncfoXUsJjz0DNR77J40rWQGkCN1Gjz1hQsJnrdntLPuiJVB7TbDnM91IH6Xk4XzUITXviUPFQQRgvxLRl4Xi7NGSBbRwrdAYqKK19gZ0w9H6sVmjuf900rY6mf5hcsnNq31WYVTffYX9fKzRZHcleAZ0WOO3mR7dV5QA4AvKx35mF00NRnsFqbI0e20jg04y1Tnl50XzmDYmGMF7Zbm9zBYTw0v
index.html
llH9
mDdChkq1zs6rABUbZSgrXxJrdl5CNz7e5s9tOCCvrY06Obw
mhVe3jDeyOf1rdJ9dlwYCpn9
ns
oKFVZZiKqX1S1Tkux
pK1XJRKXQItcOpuJnZLMUAhQW6kvqloZWuU0JUO0GPlBbhgx8iJQBCr0DlbN
pl697ln7bNs8r0h9YSImY3
q3Rhz1ENgSh
qBOIcGNX1krjELUfTBzKZTBUAhyl
qL7byj8hYolbK3WCn1CQssqoURRPKKk59CQNGIBB3dMVBUJXfrRCBlT8vTrSCsHnerchmi6PAbXpQGY0h5Js4TDYUTsYrU9LGzQjRBK8wbbzzDs05sKITouwZpyE0iyQdlTr0PtRuM72RdyqBD30kB2seuuBdghnOww
qOWqmW02MczKn52k9WGEOfjMRAM2dSvnH0FjS6HBAmCPPg3wxtgHANxlEkKXj8Z5SmcyzSDdpeeCOF7LIqFULYX5DuPHwUrCxI7DdE7P1dsvJ5I0o0p4Det4Ah5fd6R
qeekc5AOeDX0IjdHAL0mxcEqNT0sqThoWTcHwpV40J44RbozjY3R3yOnKYHtfixvvIo0hGkk0gnYjLKMF
rxgchuh0xzrKyGEZZpO0e3y9cBg8EVA00J6Pml3sQ6hOtYjONjGc
sC2bX60HwdIXoRfbccOLqBMfMrAyZI0J8VP2TqEG2s5ymGjnM
siNuVASHzIsLjrPrqdeYCkb20WtDXGxHCfniyEyiF9V3r84CrY04JmIigWv0goU3lWjdeG3XP7tEziKc32l0GD8qIebNizbqo2SFZ0xV5noN4dU9lthodVxSZ3G0EpOq5cpHBeocFAfspuxEvdB0sXnEF0R6uxqPK8T1YmIgfeUNPeCEGbPBZZ9h0WcBysSijATsMGQjGuUndKZBInztT01W9LbckhTXxMD
supplierconfig.json
uQHkB84UDjNTm
v6zxUsRIWsweDTlPkwQFmrcW9ILPVRG
vers.dat
w1SsEGPZ9Hrn3P6rx6bfoHcLznAqt8WblHKrYlfYJVmvK11OWmzSBuW0Zh4rfzFbWqbwfOEl0oHEuRbIwXEhJdL1VVCRsYSjplKuZFJhSn2mYsFifv6t6xCSQlLumX4cHxpigSU2nwzwlydDpuL83yo2U3PO4o65u0QBdwcyLegJ9g
wHDjpRbGcqM3UyiwCY6j0ul8f1RhHBtsELNDvxjvsBbA
wM7krdcu12i223wNIDSijFWniZm9ndif46551mAuydORi0P6kwLSCK210TcD1dgXTd878B

Sharing

Errors

General

Malware Config

Signatures

Files

Password: spf200

Password: spf200

com.google.android.cts

Permissions

Services

com.xts.uievent.script.service.ScriptServerService