General

  • Target

    505e9fa3460095e7424ca5e4fa7f77fd97e7062c6467edcc5253bbf3c296b02a.bin

  • Size

    2.1MB

  • MD5

    75d203d2f8068d1407b06d6ef4328d26

  • SHA1

    6341fbe817f2a6004dd24a84806983f71bb14585

  • SHA256

    505e9fa3460095e7424ca5e4fa7f77fd97e7062c6467edcc5253bbf3c296b02a

  • SHA512

    e141ce097bb9e5e3262d91111aa9647b5a53ad67415f0baed299393c8dc493ebbe7189508fdc532889bff87df6c2febad0e77d71ea2d2013c6945c3be56f913c

  • SSDEEP

    49152:zM/MezoBZCPqBLMKLFZzVBN0J0801tJ0bCETc5uFycl1dIpkJMRV5z+:4zgQiLLZzQCBESMyz+

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 12 IoCs

Files

  • 505e9fa3460095e7424ca5e4fa7f77fd97e7062c6467edcc5253bbf3c296b02a.bin
    .apk android

    com.tobacco.gossip

    com.mhiauaqmlacl.ypmsfwbkjhsbeoz.dhadsej


  • AZURE.png
  • AmazonRootCA1.cer
  • AmazonRootCA2.cer
  • AmazonRootCA3.cer
  • AmazonRootCA4.cer
  • BLUE.png
  • CYAN.png
  • DHxjWo.json
  • GJ_LaunchSheet-hd.png
  • GJ_LaunchSheet.png
  • GJ_gradientBG-hd.png
  • GJ_gradientBG.png
  • GJ_moveBtn-hd.png
  • GJ_moveBtn.png
  • GJ_moveSBtn-hd.png
  • GJ_moveSBtn.png
  • GJ_square01-hd.png
  • GJ_square01.png
  • GJ_square02-hd.png
  • GJ_square02.png
  • GJ_square03-hd.png
  • GJ_square03.png
  • GJ_square04-hd.png
  • GJ_square04.png
  • GJ_square05-hd.png
  • GJ_square05.png
  • GJ_square06-hd.png
  • GJ_square06.png
  • GJ_square07-hd.png
  • GJ_square07.png
  • GJ_squareB_01-hd.png
  • GJ_squareB_01.png
  • GREEN.png
  • HM_JsBridge.js
    .js
  • MAGENTA.png
  • ORANGE.png
  • RED.png
  • ROSE.png
  • VIOLET.png
  • YELLOW.png
  • ad_full_loading.json
  • amap_sdk_lineDashTexture_circle.png
  • amap_sdk_lineDashTexture_square.png
  • amap_sdk_lineTexture.png
  • bumping.ogg
  • bumping_tone.ogg
  • bumping_tone_great.ogg
  • bumping_tone_pitch.ogg
  • bumping_tone_well_done.ogg
  • button_anim.json
  • consentform.html
    .html .js
  • corsica_slideUpAndDown_img_0.png
  • corsica_slideUpAndDown_img_1.png
  • corsica_slideUpAndDown_img_2.webp
  • corsica_slideUpAndDown_img_3.webp
  • corsica_slideUpAndDown_img_3_en.webp
  • corsica_slideUpAndDown_img_4.webp
  • corsica_slideUpAndDown_img_4_en.webp
  • corsica_slideUpAndDown_img_5.webp
  • corsica_slideUpAndDown_img_5_en.webp
  • corsica_slideUpAndDown_img_6.webp
  • eagle_eye_day.png
  • eagle_eye_night.png
  • h5_qr_back.png
  • hud.png
  • img_0.jpg
  • img_0.webp
  • img_1.jpg
  • img_2.jpg
  • infowindow_bg.9.png
  • jf.json
  • js.json
  • js_dark.json
  • location_map_gps_3d.png
  • location_map_gps_locked.png
  • location_pressed.png
  • location_selected.png
  • location_unselected.png
  • map_indoor_select.png
  • maps_dav_compass_needle_large.png
  • marker_default.png
  • marker_gps_no_sharing.png
  • offlinemapv4.png
  • scan_anim.json
  • sevenzipjbinding-platforms.properties
  • terrainDefault.png
  • tracelinetexture.png
  • wallpaper_loading.json
  • youtube_sans_light.xml
    .xml
  • zoomin_pressed.png
  • zoomin_selected.png
  • zoomin_unselected.png
  • zoomout_pressed.png
  • zoomout_selected.png
  • zoomout_unselected.png

Android Permissions

505e9fa3460095e7424ca5e4fa7f77fd97e7062c6467edcc5253bbf3c296b02a.bin

Permissions

android.permission.USE_FULL_SCREEN_INTENT

android.permission.QUICKBOOT_POWERON

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.BLUETOOTH

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.DISABLE_KEYGUARD

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.CALL_PHONE

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_SMS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.READ_PHONE_STATE