General

  • Target

    63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12.bin

  • Size

    4.1MB

  • MD5

    f2b9f29261778b009388db3ac0eb654a

  • SHA1

    8323e7b6b63da0c470e674c9b623f57e7397c57b

  • SHA256

    63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12

  • SHA512

    3681edf2ae761b68fcdb0c2ade75ed3741aeaff69354fc7c6c8c2339bec787b3ae902e26e7f936d871bba0776bc2d92fb03122f37fbfcd68802cce42f0647bee

  • SSDEEP

    98304:l3D9RaM6IxWhywEvl89pRZs7pQDCSGUDOa5SBr7mk5Lo/:lZRkSbwqIi2D/tOa5dk5w

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12.bin
    .apk android

    com.moxiu.launcher

    com.moxiu.launcher.p58ac7fd7


  • 66666692.appinfo.json
  • SE.bin
  • actions.properties
  • address.json
  • ae-clientSetting-abtest.json
  • ae2016.cer
  • ae_rcmd_item.wlasm.zip
    .zip
  • __MACOSX/._ae_rcmd_item.wlasm
  • ae_rcmd_item.wlasm
  • ae_search_item.wlasm.zip
    .zip
  • __MACOSX/._ae_search_item.wlasm
  • ae_search_item.wlasm
  • ae_search_item_new.mus.wlasm.zip
    .zip
  • __MACOSX/._ae_search_item_new.mus.wlasm
  • ae_search_item_new.mus.wlasm
  • aliexpress.cer
  • asyncResultfail2.json
  • async_credit_card.json
  • audio_windmillapi.json
  • collageDetailMock.json
  • cosmos_api.properties
  • country_zone_map
  • feis_iconfont.ttf
  • floorcontainerorangesetting.json
  • format_time
  • hmsrootcas.bks
  • image_windmillapi.json
  • joachmGmh1.bvs
  • license-ru.html
    .html .js
  • license.html
    .html .js
  • msu.aliexpress.cer
  • pattern_index
  • python27.zip
    .zip
  • UserDict.pyc
  • __MACOSX/._site.pyc
  • _abcoll.pyc
  • _sysconfigdata.pyc
  • _weakrefset.pyc
  • abc.pyc
  • copy_reg.pyc
  • genericpath.pyc
  • linecache.pyc
  • os.pyc
  • posixpath.pyc
  • re.pyc
  • site-packages/README
  • site.pyc
  • sre_compile.pyc
  • sre_constants.pyc
  • sre_parse.pyc
  • stat.pyc
  • sysconfig.pyc
  • traceback.pyc
  • types.pyc
  • warnings.pyc
  • render.json
  • render1.json
  • render_h5_bridge.js
    .js
  • render_selected.json
  • render_with_id_auth.json
  • route_api.properties
  • route_page.properties
  • search_album_template.properties
  • security.json
  • shop_snapshot_template.html
    .html
  • test.json
  • tr_china_cities.json
  • tr_china_cities_v2.db
  • triver.mock.appinfo.json
  • updatesdkcas.bks
  • verisign3.cer
  • video-swipe.json
  • video_windmillapi.json
  • vision_config.dtd
  • vision_config.xml
    .xml
  • waiting_skeleton.json
  • weex_config_bindingx.json
  • weex_config_fashionai.json
  • weex_config_interactive.json
  • weex_config_mytaobao.json
  • weex_config_shopref.json
  • weex_config_tblive.json
  • weex_config_tbplay.json
  • wlmock.json
  • workerjs_multiworker.js
    .js
  • workerjs_v8.js
    .js
  • yuv2rgb.frag
  • yuv2rgb.vert

Android Permissions

63b0a15d6e92441701d15f76576a8f93065d1ed8f40672dce8dfde7fc788ab12.bin

Permissions

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.READ_SMS

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES