b22e34a0f5046ada777189e669198b354a2667c0ef5cebffc4288d23602e1ab7[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

b22e34a0f5046ada777189e669198b354a2667c0ef5cebffc4288d23602e1ab7.apk.zip
Size

80.0MB
MD5

79a5509de856f3b2df9cd177f55841bf
SHA1

f670ef023ee90d42f613eb4390834995d7f7923c
SHA256

3a0af5f00f8c0cdb52391f6710c5db46f0528466651af5df3fb5f025738e2a85
SHA512

1fc995c413a13d69f35f9c46a7c7b240b918905961a82a3403b0a591542cb06d89298e6721b3fec96a6f684f8a7686bc1e3b7a1a23e6236f2fbc3f162f70b2b7
SSDEEP

1572864:rwjUvkojbr/1n3ARCZ+3lDZN+avkhWN4Fqi8mCxqN7Y7/+Vq9LnUf:MjUvFjbb1nQM+V+oeWN3+7Y7/+QBUf

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

b22e34a0f5046ada777189e669198b354a2667c0ef5cebffc4288d23602e1ab7.apk.zip
.zip

Password: infected
b22e34a0f5046ada777189e669198b354a2667c0ef5cebffc4288d23602e1ab7.apk
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

ai.xmov.hxttsa

ai.xmov.hxttsa.app.LoginActivity

Activities

ai.xmov.hxttsa.app.LoginActivity

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN

Receivers

ai.xmov.core.service.AlarmReStartReceiver

ai.xmov.core.reboot

Services
5005378d.jet
6e736b76.jet
AZURE2d.png
.png
BLUE2d.png
.png
CYAN2d.png
.png
GREEN2d.png
.png
MAGENTAV2d.png
.png
ORANGE2d.png
.png
README.txt
RED2d.png
.png
ROSE2d.png
.png
VIOLET2d.png
.png
WakeUp.bin
YELLOW2d.png
.png
ap12d.data
.png
ap2d.data
.png
app_config.properties
baidu_speech_grammar.bsg
bg.png
.png
cei.json
charts.html
.html .js
copylist.txt
echarts.js
.js
highcharts-3d.js
.js
highcharts.js
.js
infowindow_bg2d.9.png
.png
location_map_gps_3d.png
.png
location_map_gps_locked.png
.png
location_pressed2d.png
.png
location_selected2d.png
.png
location_unselected2d.png
.png
maps_dav_compass_needle_large2d.png
.png
marker_default2d.png
.png
marker_gps_no_sharing2d.png
.png
nui.json
parameter.cfg
piecharts.html
.html .js
uievents.json
zoomin_pressed2d.png
.png
zoomin_selected2d.png
.png
zoomin_unselected2d.png
.png
zoomout_pressed2d.png
.png
zoomout_selected2d.png
.png
zoomout_unselected2d.png
.png

Sharing

General

Malware Config

Signatures

Files

Password: infected

ai.xmov.hxttsa

ai.xmov.hxttsa.app.LoginActivity

Activities

ai.xmov.hxttsa.app.LoginActivity

Permissions

Receivers

ai.xmov.core.service.AlarmReStartReceiver

Services