General

  • Target

    b625765ce751d3a56674fee9215ba69777a3e7ab37e6cbcf418c918de423c0a3.bin

  • Size

    3.7MB

  • MD5

    fd9bc14fdfc21de632d363a80b4a69b3

  • SHA1

    4b7207e591ec14e255ff6e4615226d6bdf5fb9d1

  • SHA256

    b625765ce751d3a56674fee9215ba69777a3e7ab37e6cbcf418c918de423c0a3

  • SHA512

    c862f82b29ec22969de6990fd4925795efd8dc597a0c1112856c904480e1604948f807d0e4e5f531bdd7c457cad609af9c671a0075b8e8c85904c9aee0016764

  • SSDEEP

    98304:sUrHmTErDuO/KaWKRN7r311AjSNSjJ7Xs0PF5kSQPFfEJ/g9uMkNsy:sUaIVN7r3118S4jJXsAF5SPFMpB

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • b625765ce751d3a56674fee9215ba69777a3e7ab37e6cbcf418c918de423c0a3.bin
    .apk android

    com.urgerdaao.dwwvbcows

    com.urgerdaao.dwwvbcows.zowine


  • 3DFly.flb
  • 3DFly.tmc
  • AlipayNumber.ttf
  • CYAN.png
    .png
  • MAGENTA.png
    .png
  • addbag.msoac
  • addbag.msoap
  • alicart_theme_alias_list.json
  • alimama_ad_windmillapi.json
  • alipay_inside_channel.config
  • amap_sdk_lineDashTexture_circle.png
    .png
  • amap_sdk_lineDashTexture_square.png
    .png
  • amap_sdk_lineTexture.png
    .png
  • ap.data
    .png
  • arrow_line_inner.png
    .png
  • arrow_line_outer.png
    .png
  • arrow_line_shadow.png
    .png
  • base_fragment.sh
  • base_vertex.sh
  • beauty_avatar.frag
  • beauty_avatar.vert
  • behavior.js
    .js
  • bid-log-key-public.key
  • bio_res.json
  • c_backup.json
  • cart.msoac
  • cart.msoap
  • channel.config
  • configuration.json
  • crossing_nigth_bk.data
    .png
  • decision_slice.json
  • decision_slice_img_0.png
    .png
  • delta.json
  • eagle_eye_night.png
    .png
  • framework_slice.json
  • framework_slice_light.png
    .png
  • grs_sdk_server_config.json
  • hgefstv.qjv
  • image_windmillapi.json
  • imgPreview.msoac
  • launcher.json
  • lc_material_config_text_font.json
  • lc_material_config_text_template.json
  • lc_video_edit_plugin_actionbar.json
  • lc_video_edit_plugin_confirm.json
  • lc_video_edit_plugin_mask.json
  • lc_video_edit_plugin_playcontrol.json
  • mic.js
    .js
  • microlog.properties
  • mspjs_v2.js
    .js
  • oekweq.pfl
  • output.json
  • p_backup.json
  • page.json
  • purchase_ext_plugins.json
  • router_guangguang.json
  • router_x_rate.json
  • rsa_public_key.pem

Android Permissions

b625765ce751d3a56674fee9215ba69777a3e7ab37e6cbcf418c918de423c0a3.bin

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.QUICKBOOT_POWERON

android.permission.FOREGROUND_SERVICE

android.permission.GET_CLIPS

android.permission.WRITE_CLIPS