Overview

overview

10

Static

static

7

f5fae514fe...54.apk

android-9-x86

10

f5fae514fe...54.apk

android-11-x64

10

HM_JsBridge.js

windows7-x64

1

HM_JsBridge.js

windows10-2004-x64

1

libwbsafeedit

debian-9-armhf

1

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

libwbsafeedit_x86

ubuntu-18.04-amd64

1

libwbsafeedit_x86_64

ubuntu-18.04-amd64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5fae514fe30195472f518406bf051d1d68faadae91262256cd39add69e3ea54.bin

  • Size

    1.6MB

  • MD5

    43f3dd52fa408eebb3055fb8a2b6d575

  • SHA1

    983ef555fd02dddb611868fb15fb7eeccfaa8ff4

  • SHA256

    f5fae514fe30195472f518406bf051d1d68faadae91262256cd39add69e3ea54

  • SHA512

    42c5214887cfa32ad7207ac1eaf25dfa1a37246a8f72473bb3ceb4bb6c56d797ee791e7bec6d0dfb87e1a4a8b5242745ff691a8121e99dba00883a8aea3fe1d0

  • SSDEEP

    49152:2kX3M1fm3fxfh4IYs7BuqWi1+nAn62lV8MV:2kX3M1fM4rh/nAn6AP

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 28 IoCs

Files

  • f5fae514fe30195472f518406bf051d1d68faadae91262256cd39add69e3ea54.bin
    .apk android arch:x86 arch:arm64 arch:x64 arch:arm

    com.plantfollowwih

    com.plantfollowwih.p057t


  • 3DFly.flb
  • 3DFly.loc
  • 3DFly.tmc
  • AZURE.png
  • AmazonRootCA1.cer
  • AmazonRootCA2.cer
  • AmazonRootCA3.cer
  • AmazonRootCA4.cer
  • BLUE.png
  • CYAN.png
  • GREEN.png
  • HM03.fw
  • HM05.fw
  • HM07.fw
  • HM08.fw
  • HM0D.fw
  • HM_JsBridge.js
    .js
  • HuaShan.fw
  • Huaihe_OTA.bin
  • MAGENTA.png
  • Mili.fw
  • Mili_1a.fw
  • Mili_amazfit.fw
  • Mili_amazfit_kx.fw
  • Mili_hr.fw
  • Mili_pro.ft.en
  • ORANGE.png
  • RED.png
  • ROSE.png
  • SenseID_Liveness_Silent.lic
  • amap_resource1_0_0.png
  • amap_sdk_lineDashTexture_circle.png
  • amap_sdk_lineDashTexture_square.png
  • amap_sdk_lineTexture.png
  • ap.data
  • ap1.data
  • api_key.txt
  • bumping.ogg
  • bumping_tone.ogg
  • bumping_tone_great.ogg
  • bumping_tone_pitch.ogg
  • bumping_tone_well_done.ogg
  • com.tencent.open.config.json
  • config_sport_data.json
  • config_sport_data_cards.json
  • config_sport_data_group.json
  • config_sport_type_group.json
  • country.json
  • country_codes.json
  • default-config.txt
  • dfsJ.json
  • eagle_eye_day.png
  • eagle_eye_night.png
  • eu.json
  • filedownloader.properties
  • findphone.mp3
  • firmwares.json
  • gps_alm.bin
  • guide_result.json
  • h5_qr_back.png
  • home_sky_aura_left.json
  • home_sky_aura_left_light.json
  • homepage_connect_fail.json
  • homepage_connect_success.json
  • homepage_connecting.json
  • homepage_cry_face.json
  • homepage_heart_animation.json
  • homepage_pai_blue.json
  • homepage_smile_face.json
  • homepage_spo2_animation.json
  • homepage_spo2_animation_night.json
  • homepage_spo2_mifit.json
  • homepage_star_sky_loading.json
  • hud.png
  • infowindow_bg.9.png
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • licence.conf
  • location_map_gps_3d.png
  • location_map_gps_locked.png
  • location_pressed.png
  • location_selected.png
  • location_unselected.png
  • long
  • map_indoor_select.png
  • maps_dav_compass_needle_large.png
  • marker_default.png
  • marker_gps_no_sharing.png
  • member_guide_1.json
  • member_guide_2.json
  • member_guide_3.json
  • member_guide_4.json
  • pai_progress_blue.json
  • pai_progress_green.json
  • pai_progress_orange.json
  • pai_value_ripple_blue.json
  • pai_value_ripple_green.json
  • pai_value_ripple_orange.json
  • pay_cashier_loading.json
  • region.json
  • youtube_sans_light.xml
    .xml

Android Permissions

f5fae514fe30195472f518406bf051d1d68faadae91262256cd39add69e3ea54.bin

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.REQUEST_COMPANION_RUN_IN_BACKGROUND

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ADD_VOICEMAIL

android.permission.CLEAR_APP_CACHE

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_SMS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.READ_CLIPS

android.permission.INSTALL_SHORTCUT

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

com.sonyericsson.home.permission.BROADCAST_BADGE

android.permission.READ_CALL_LOG

com.anddoes.launcher.permission.UPDATE_COUNT

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_SMS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.INTERNET

android.permission.REORDER_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SEND_SMS

android.permission.EXPAND_STATUS_BAR

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.EXPAND_STATUS_BAR

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.READ_MEDIA_VIDEO

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WRITE_CLIPS

android.permission.QUICKBOOT_POWERON

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.ACCESS_WIFI_STATE