General

  • Target

    897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk.zip

  • Size

    38.9MB

  • MD5

    d31194ef2ffe53db10b4ebdb39c6f54e

  • SHA1

    6b6ca7147f437be3a25cb4eafabbbbc730ee8516

  • SHA256

    5a2e74acc2e1add7f2a21a6ff7bc102d88bb507ad700ba23f311c0dcec5686d2

  • SHA512

    11734c356a976d56518a46b3214a76fe1432f6cc2f4277d868ab082474f67eec5a03ddaccec5f9912edf2b0b51226a3461dfb5eb1b7802e72483d67885097c11

  • SSDEEP

    786432:1V+jEX/fTusj6Z9iW90Tr6f9sU9hMpNFsV4aHmM3R4F5N24aj4v31gkhxrC:ZwZ2rc6UbwNSVTliJnajqddC

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • 897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk.zip
    .zip

    Password: infected

  • 897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk
    .apk android arch:arm64 arch:arm

    cn.ninegame.gamemanager

    cn.ninegame.gamemanager.business.common.activity.LaunchActivity


  • AlibabaSans102-Bd.ttf
  • MFQiHei_score.ttf
  • NumberBold.ttf
  • acceleration_entrance.json
  • ag_sdk_cbg_root.cer
  • base.app.cpu.abilist.properties
  • btn_speeding.json
  • com.tencent.open.config.json
  • danmu_like.json
  • diam1.png
    .png
  • diam2.png
    .png
  • faceContinuity.bin
  • fdmodel.bin
  • fish.png
    .png
  • frag.sh
  • geo_global_ca.cer
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • h5_qr_back.png
    .png
  • hianalytics_njjn
  • hmsincas.bks
  • hmsrootcas.bks
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • index.umd.js
    .js
  • index_new_default_data.json
  • industrytest-demi-webfont.ttf
  • ldClassifier.bin
  • ldmodel.bin
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • like_sel.png
    .png
  • like_text_img.png
    .png
  • liked_text_img.png
    .png
  • live_stream_fans_badge_anim.json
  • live_stream_goods_popup_anim.json
  • live_stream_goods_popup_img_0.png
    .png
  • live_stream_goods_shop_anim.json
  • live_stream_goods_shop_img_0.png
    .png
  • live_stream_goods_shop_img_1.png
    .png
  • live_stream_goods_shop_img_2.png
    .png
  • live_stream_goods_shop_img_3.png
    .png
  • live_stream_goods_shop_img_4.png
    .png
  • live_stream_goods_shop_img_5.png
    .png
  • live_stream_goods_shop_img_6.png
    .png
  • live_stream_guide_vod_flip_anim.json
  • live_stream_guide_vod_like_anim.json
  • live_stream_live_state_orange.json
  • live_stream_live_state_white.json
  • live_stream_pic_live_mic_talking_orange.json
  • live_stream_pic_live_mic_talking_purple.json
  • live_stream_video_loading.json
  • live_stream_video_mic_icon.json
  • live_stream_vod_follow.json
  • live_stream_vod_like.json
  • live_stream_vod_like_img_0.png
    .png
  • live_stream_vod_user_head_living.json
  • loading.json
  • loading_refresh_color.json
  • lucky.png
    .png
  • main.dx
  • middleware_7.9.9.2_7.9.9.2.json
  • ng_bar_community_icon.json
  • ng_bar_findgame_icon.json
  • ng_bar_findgame_icon_guide.json
  • ng_bar_home_icon.json
  • ng_bar_live_icon.json
  • ng_bar_live_icon_guide.json
  • ng_bar_mine_icon.json
  • ng_bar_speed_icon.json
  • ng_bar_speed_icon_guide.json
  • ng_comment_grade_full.json
  • ng_community_zan_animation.json
  • ng_community_zanjson_bang_img.png
    .png
  • ng_community_zanjson_bg_img.png.png
    .png
  • ng_community_zanjson_tan1_img.png
    .png
  • ng_community_zanjson_tan2_img.png
    .png
  • ng_community_zanjson_xian_img.png.png
    .png
  • ng_community_zanjson_zhen_img.png
    .png
  • ng_draw_down_refresh.json
  • ng_draw_up_refresh.json
  • ng_followpage_follow_btn.json
  • ng_game_video_loading.json
  • ng_guide_slidetoleft.json
  • ng_guide_slidetoleft_bg.png
    .png
  • ng_like_discovery_like.png
    .png
  • ng_like_guide_icon.json
  • ng_like_mascot.json
  • ng_like_text.png
    .png
  • ng_list_til_icon_live.json
  • ng_live_emoji.json
  • ng_live_lucky_draw.json
  • ng_live_video_label_orange.json
  • ng_live_video_label_orange_forindex.json
  • ng_live_video_label_white.json
  • ng_loading_grey_s.json
  • ng_navbar_download_icon.json
  • ng_navbar_download_icon_white.json
  • ng_page_loading.json
  • ng_res_splash_guide_breath_light.json
  • ng_res_splash_guide_click_bg.json
  • ng_res_splash_guide_click_finger.json
  • ng_res_splash_guide_grow.json
  • ng_screenflash_btn_arrow.json
  • ng_shortvideo_like_yx.json
  • ng_shortvideo_lottie_comment_emoji_fly.json
  • ng_shortvideo_playloading.json
  • ng_video_guild_finger_img.png
    .png
  • ng_video_guild_text_img.png
    .png
  • ng_video_like_icon_bg.png
    .png
  • ng_video_page_follow_btn.json
  • ng_video_share_icon_bg.png
    .png
  • ng_video_share_icon_wechat.json
  • oneprivacy.json
  • pkgcache_basic.db
  • platformProtocol.html
    .html
  • presetTemplateInfos.json
  • publish_list_article.png
    .png
  • publish_list_post.png
    .png
  • publish_list_video.png
    .png
  • recommend_selected_content_more.json
  • redbag.png
    .png
  • speedup_accelerator.json
  • sysconfig
  • template_list.json
  • updatesdkcas.bks
  • userProtocol.html
    .html
  • vertex.sh
  • windmill.worker.js
    .js