Overview

overview

10

Static

static

7

cb43d09133...74.apk

android-9-x86

10

cb43d09133...74.apk

android-10-x64

10

cb43d09133...74.apk

android-11-x64

10

android-su...v4.jar

windows7-x64

1

android-su...v4.jar

windows10-2004-x64

1

corejs.1.3.4.js

windows7-x64

1

corejs.1.3.4.js

windows10-2004-x64

1

libfolly_futures.so

ubuntu-18.04-amd64

libfolly_futures.so

debian-9-armhf

libfolly_futures.so

debian-9-mips

libfolly_futures.so

debian-9-mipsel

libjsijniprofiler.so

ubuntu-18.04-amd64

libjsijniprofiler.so

debian-9-armhf

libjsijniprofiler.so

debian-9-mips

libjsijniprofiler.so

debian-9-mipsel

libnative-...der.so

ubuntu-18.04-amd64

libnative-...der.so

debian-9-armhf

libnative-...der.so

debian-9-mips

libnative-...der.so

debian-9-mipsel

libreactnativeblob.so

ubuntu-18.04-amd64

libreactnativeblob.so

debian-9-armhf

libreactnativeblob.so

debian-9-mips

libreactnativeblob.so

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb43d09133f6c65bdd25001f231cc1379aa63bd8ad5a20e8671861f5f0da2b74.bin

  • Size

    3.9MB

  • MD5

    4e5b975596521d64b8f9ae1cbe4a9879

  • SHA1

    64569d6caecae1cb0a7982bdcbaec104f99eb7d4

  • SHA256

    cb43d09133f6c65bdd25001f231cc1379aa63bd8ad5a20e8671861f5f0da2b74

  • SHA512

    530b27bed6d9b06086d3b80347acbd73c3fabc3198fb53a35918a3222586b791adee1323132e0bffd6971c75ba31f2c966a5719956a5c840e4398a0f17311199

  • SSDEEP

    98304:eqC/loKvtb7KA0mTsL6kr3dQf+AC7rjZRFJtYvw:eqC/e47lElLdC6rj7FJz

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • cb43d09133f6c65bdd25001f231cc1379aa63bd8ad5a20e8671861f5f0da2b74.bin
    .apk android

    com.tencent.mm

    com.tencent.mm.MainActivity


  • RNFetchBlobReq$e.smali
  • RNFetchBlobReq$f.smali
  • RNFetchBlobReq.smali
  • SmsPlatformRelease.properties
  • android-support-v4.jar
    .jar
  • appconfig_basic.json
  • boot.config
  • classes-v1.bin
  • corejs.1.3.4.js
    .js
  • libfolly_futures.so
    .elf linux aarch64
  • libjsijniprofiler.so
    .elf linux aarch64
  • libnative-imagetranscoder.so
    .elf linux aarch64
  • libreactnativeblob.so
    .elf linux aarch64
  • segoeui.ttf

Android Permissions

cb43d09133f6c65bdd25001f231cc1379aa63bd8ad5a20e8671861f5f0da2b74.bin

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.QUERY_ALL_PACKAGES

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.REQUEST_DELETE_PACKAGES