General

  • Target

    2094f0cdd9067eec13ea451477f8704ccc0556e0f31ca6ac277e9ecf4c9108d2.apk.zip

  • Size

    38.9MB

  • MD5

    204775f536bc77b6171b4d99a92c75bd

  • SHA1

    26e40c07a10b3d7a0517d318d1e53d87406f9bf7

  • SHA256

    3722803a8b186a8e131d52fe150300581d3bf940f65fdcc2232526d03a6e6c37

  • SHA512

    39292838199f9b5c82f16ebc2ea5d4f23a67d89c0eb70feba8ac4cfa862df9475fcdfc6f790092b0eeca2ab21c399872b4cc29397839ddf8970630c89b1431c3

  • SSDEEP

    786432:1yOo6Zy5Mjn+xNpucsUHBgtPDpcMtorQUeZGQdXnYckzoxbP:1yOo6ZuHxNpuczhALp7ASl+bzc

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • 2094f0cdd9067eec13ea451477f8704ccc0556e0f31ca6ac277e9ecf4c9108d2.apk.zip
    .zip

    Password: infected

  • 2094f0cdd9067eec13ea451477f8704ccc0556e0f31ca6ac277e9ecf4c9108d2.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.yoku.marumovie.analytics

    com.movie.ui.activity.SplashActivity


  • index.android.bundle
    .js
  • origin.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.yoku.marumovie.analytics

    com.movie.ui.activity.SplashActivity


  • index.android.bundle
    .js