Resubmissions

23/08/2023, 06:42

230823-hgk95abh2v 7

23/08/2023, 06:41

230823-hfv3yabh2s 7

General

  • Target

    504a836280c0d710d0ef9560faa892fa9efa7c8f7bcbbb5a86db1035f4f6725f

  • Size

    744KB

  • MD5

    422c3b7997670b2ee81ad53d2593524d

  • SHA1

    095a72f2bc65a5eb6e5f67329c922cfa3164103a

  • SHA256

    504a836280c0d710d0ef9560faa892fa9efa7c8f7bcbbb5a86db1035f4f6725f

  • SHA512

    3e33e6800eca0ff0f9b473c9bfe1a3412f35060aa11427fe73783d52ec7c7b4b66a14bece525fc93973592c0330d6a9e03e89eebcd9a0228335995d4fc35d6c1

  • SSDEEP

    12288:YQFhsUYciBSXoN76InsirkETM19duQBII0dPweybrvL:YmaUmUoN7CirTM11BIIhe0

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 504a836280c0d710d0ef9560faa892fa9efa7c8f7bcbbb5a86db1035f4f6725f
    .apk android

    com.qihoo.plugin.gameacc

    com.qihoo.plugin.gameacc.GameAccActivity


  • game_list.dat
  • gameacc.apk
    .apk android

    com.appstore.gameacc

    com.appstore.gameacc.MainActivity


  • p-n-troublefreesvc.jar
    .apk android

    com.qihoo360.mobilesafe.troublefreesvc


  • p-n-troublefreesvc.jar.timestamp

Android Permissions

504a836280c0d710d0ef9560faa892fa9efa7c8f7bcbbb5a86db1035f4f6725f

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_PROFILE

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_DRM

com.android.alarm.permission.SET_ALARM