General

  • Target

    AutoKitools-v1.0.apk

  • Size

    7.5MB

  • MD5

    1ea4d12c9646b0b8f7d10a0d9838aad1

  • SHA1

    9c2f05f3847498eee0035bf27e799d91d8f500db

  • SHA256

    25c674badb8516017bacf3f7c6c69623e9bb699a896c07afaab92645afda58d0

  • SHA512

    73139b278844f7e634344272ef8cf416dc5554c36a3f59623ed28f7d63d5fa26485e089928803d50a159f6633b2ab81d5577c22de026d8d5aa2e2b0b67073690

  • SSDEEP

    196608:rmnl+HXTLALg5nfQzCIAIoio0XfCBdHXBmrdRkkdmr7:QiXALifJIpoh0KBVrkE7

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • AutoKitools-v1.0.apk
    .apk android arch:arm64 arch:arm arch:x86

    cn.paplink.boxsettings

    cn.paplink.boxsettings.MainActivity


  • .jgapp
  • libjiagu.so
    .elf linux arm
  • libjiagu_a64.so
    .elf linux aarch64
  • libjiagu_x64.so
    .elf linux x64
  • libjiagu_x86.so
    .elf linux x86

Android Permissions

AutoKitools-v1.0.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.READ_PHONE_NUMBERS

android.permission.READ_PHONE_STATE

android.permission.READ_SMS