Resubmissions

22/09/2023, 17:08

230922-vnkcmahd2z 10

21/09/2023, 18:44

230921-xdsblaca32 10

20/09/2023, 22:01

230920-1w89lsah3x 10

General

  • Target

    21440d7a9289ef45f7438109a5e334b09d917d28c4ef972d1dcae349b6e31834.bin

  • Size

    2.4MB

  • MD5

    f31c96e95584c7073b8be905e444044c

  • SHA1

    85897eb018caa5e6bd9e3419e2a36276e2d92741

  • SHA256

    21440d7a9289ef45f7438109a5e334b09d917d28c4ef972d1dcae349b6e31834

  • SHA512

    fd79918d0fd3ebfbc2ca54f1d762fa7cc952c1e052a320467f2f8f19ce03023bd3a630b78371d633f1d7fde0a2f2e1e458f3934d9c63a1c6c4dd9ac4db56a7d3

  • SSDEEP

    49152:Tavum9a2D6tudueh4w9vcZTuujopJLEE3aUbUDuoEp1vDGbXZT1RmjF0hiGb:2mv2D6tudus4dZTuujo3X3Guo6bcXZz9

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 21440d7a9289ef45f7438109a5e334b09d917d28c4ef972d1dcae349b6e31834.bin
    .apk android

    com.irmlgxhth.sjllqffoa

    com.irmlgxhth.sjllqffoa.mainActivity


  • anim_fancy_thumb_with_text.pag
  • app.light.css
  • archive_arrow.json
  • arrow_green.json
  • audio_playing_black.json
  • audio_playing_white.json
  • bg_click.mp3
  • book_breath.json
  • book_mark.json
  • change_rec_groups_loading.json
  • com.douban.frodo.cert.pem
  • com.tencent.open.config.json
  • content.html
    .html
  • default_list_loading.json
  • default_list_loading_night.json
  • dt_template_ad_one_big_img.xml
  • easygo.json
  • fancy_vote_img.png
    .png
  • geo_global_ca.cer
  • group_topic.css
  • group_topic.html
    .html
  • grs_sdk_global_route_config_opendevicesdk.json
  • hmsrootcas.bks
  • home_feed_pre_load.json
  • home_feed_pre_load_night.json
  • ic_action_audio.json
  • ic_action_playable.json
  • ic_action_readable.json
  • ic_action_ticket.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • img_8.png
    .png
  • img_9.png
    .png
  • main_group_tab_scroll_top.json
  • mama.js
    .js
  • meteor.json
  • movie_breath.json
  • movie_list_dialog_win_cup.json
  • music_breath.json
  • my_tab_archive_stars.mp4
  • omsdk-v1.js
    .js
  • play_widget_status_loading_to_playing.json
  • play_widget_status_paused_to_loading.json
  • play_widget_status_paused_to_playing.json
  • play_widget_status_playing_to_paused.json
  • push_img_0.png
    .png
  • push_img_1.png
    .png
  • push_img_2.png
    .png
  • push_img_3.png
    .png
  • splash_twist_phone_both.json
  • splash_twist_phone_left.json
  • splash_twist_phone_right.json
  • splash_twist_progress_both.json
  • stuhgsg.fip
  • uhhfml.osn
  • useless_vote.json
  • useless_vote_night.json
  • vote_for_short_commentary_white.json

Android Permissions

21440d7a9289ef45f7438109a5e334b09d917d28c4ef972d1dcae349b6e31834.bin

Permissions

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.REQUEST_DELETE_PACKAGES

android.permission.FOREGROUND_SERVICE