General

  • Target

    ca9c520404e2b4a8e2851bc0ba9eb6325f58cf5f860099dac7066bb00ab5aaef.apk.zip

  • Size

    118.2MB

  • MD5

    f37c4da91dad98a5527b2c8abd59a363

  • SHA1

    351f8465fbb6648ec854d092a7d935acff8d0bdb

  • SHA256

    b9fe3038ef6c45119ef16973ba401b8a382ce4611c11fe0e04ef1e624c09b1ce

  • SHA512

    e8c227d14acc2ff16b8281396c8cc0ce2f13f637040d5501e982c2c5e7b68347daa149a3f651eacde9f69f58cc8c370404df06cf3f1b17de61ab28c5ceabb8b4

  • SSDEEP

    3145728:mLVdqPMwe1uc8siHVGCgaMuQPipucyoKEZkAf:2yPMn1h8lVG/z7oxZ5f

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 12 IoCs

Files

  • ca9c520404e2b4a8e2851bc0ba9eb6325f58cf5f860099dac7066bb00ab5aaef.apk.zip
    .zip

    Password: infected

  • ca9c520404e2b4a8e2851bc0ba9eb6325f58cf5f860099dac7066bb00ab5aaef.apk
    .apk android arch:arm

    com.sohu.sohuvideo

    com.sohu.sohuvideo.ui.homepage.MainActivity


  • 00.png
    .png
  • 01.png
    .png
  • 1.png
    .png
  • 2.png
    .png
  • 3.png
    .png
  • 4.png
    .png
  • Adobe Heiti Std.ttf
  • Arial_Bold_Italic.ttf
  • DIN-Alternate-Bold.ttf
  • DINCondensed-Bold-new.ttf
  • DINEngschriftStd.otf
  • DIN_Alternate_Bold.ttf
  • DIN_Engschrift_Std.otf
  • Eurostile-LT-Bold-Condensed2.ttf
  • M_SenseME_Face_Video_5.3.3.model
  • SENSEME.lic
  • UniversLTStd-Cn.otf
  • a236f56217cf2add0df7e0b9c87f6c60
    .apk android arch:arm64 arch:arm

    com.byted.pangle

    com.bytedance.sdk.openadsdk.core.activity.base.TTWebPageActivity


  • dynamic_default.json
  • tt_mime_type.pro
  • tt_na.czl
  • tt_nd
    .elf linux x86
  • add_follow.json
  • add_follow_delay_dismiss.json
  • ag_sdk_cbg_root.cer
  • bdxadsdk.jar
    .apk android
  • beep.ogg
  • capture_logo.jpg
    .jpg
  • channel_purple.gif
    .gif
  • cjkl.aac
  • com.sohu.sohuvideo.cert.pem
  • com.tencent.open.config.json
  • cover.png
    .png
  • data.bin
  • data_bg.json
  • data_guide.json
  • default_sohu_gallery_ad.json
  • default_third_ad_bg.mp4
  • delete.webp
  • effect.json
  • effect_yanhuo01.zip
    .zip
  • emotion.apk
    .apk android

    com.sohu.sohuvideo.emotion


  • filedownloader.properties
  • filter.json
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • h5_qr_back.png
    .png
  • handmodel_32_1214sq3.dat
  • hianalytics_njjn
  • hmsincas.bks
  • hmsrootcas.bks
  • hndj.aac
  • host_cucc.properties
  • httpdns.config
  • hw_heart.svga
  • hw_step.svga
  • hw_walk.svga
  • icon_klq.png
    .png
  • icon_ygq.png
    .png
  • icon_ylq.png
    .png
  • img_0.png
    .png
  • img_1.jpg
    .jpg
  • img_1.png
    .png
  • img_10.png
    .png
  • img_11.png
    .png
  • img_12.png
    .png
  • img_13.jpg
    .jpg
  • img_13.png
    .png
  • img_14.jpg
    .jpg
  • img_14.png
    .png
  • img_15.png
    .png
  • img_16.png
    .png
  • img_17.png
    .png
  • img_2.png
    .png
  • img_3.jpg
    .jpg .ps1
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.jpg
    .jpg
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • img_8.png
    .png
  • img_9.png
    .png
  • interceptheader.html
    .html .js
  • jiazai_slow_data.json
  • jpush_close.png
    .png
  • label_builder_normal.json
  • label_builder_press.json
  • label_button_normal.json
  • label_button_press.json
  • left_drag.svga
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • lingdang.json
  • multidexconfig.json
  • notice.webp
  • p1_1.png
    .png
  • p1_2.png
    .png
  • p1_3.png
    .png
  • right_drag.svga
  • rule_di.png
    .png
  • rule_sure.png
    .png
  • rule_title.png
    .png
  • sdcard.properties
  • sdkconfig.xml
    .xml
  • section1_a.png
    .png
  • sohuvideoChannel
  • splash_detail_btn_bg_circle.json
  • splash_detail_btn_bg_time.json
  • super_comment_icon.svga
  • supplierconfig.json
  • three_speed_data.json
  • tips_hand.gif
    .gif
  • update.webp
  • updatesdkcas.bks
  • vr_gesture.svga
  • webview_bridge.js
    .js
  • wfdj.aac