Overview

overview

10

Static

static

7

1d0dfe6b25...0e.apk

android-9-x86

10

1d0dfe6b25...0e.apk

android-10-x64

10

1d0dfe6b25...0e.apk

android-11-x64

10

HM_JsBridge.js

windows7-x64

1

HM_JsBridge.js

windows10-2004-x64

1

consentform.html

windows7-x64

1

consentform.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d0dfe6b258b1c0049f447bb47cdebe7b342886350c854f214721c7e67f9400e.bin

  • Size

    4.0MB

  • MD5

    45db02c80d5c8ca3cb9d014c85c95393

  • SHA1

    40e00aa944a7e31b0a319925d3157496f2b466d2

  • SHA256

    1d0dfe6b258b1c0049f447bb47cdebe7b342886350c854f214721c7e67f9400e

  • SHA512

    371fdd786fd4125443b4b9e3bfdf5302f209f20ed58c034cd76df2007345847e255fe5c3a14390eaf5fafb15a58d47dfea3d2d2b67e65053ce9f5ba1279b0e66

  • SSDEEP

    98304:TDTXEtfPxKuKRK+KtNp1KOpz5P0tik+3bcPrSMkJLMsq1:b0tHEXkH/SOplMthobesq1

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 20 IoCs

Files

  • 1d0dfe6b258b1c0049f447bb47cdebe7b342886350c854f214721c7e67f9400e.bin
    .apk android

    com.toward.elbow

    LMRxSSHna7d295150ab43a4f96f4d2a1.LMRxSSHne25acd3d98d55b3ed9c933fc.LMRxSSHn524625b8f85be57746fd6927.LMRxSSHn06c33b84e2d1bee9838a82d2


  • AZURE.png
  • AmazonRootCA1.cer
  • AmazonRootCA2.cer
  • AmazonRootCA3.cer
  • AmazonRootCA4.cer
  • BLUE.png
  • CYAN.png
  • GJ_LaunchSheet-hd.png
  • GJ_LaunchSheet.png
  • GJ_gradientBG-hd.png
  • GJ_gradientBG.png
  • GJ_moveBtn-hd.png
  • GJ_moveBtn.png
  • GJ_moveSBtn-hd.png
  • GJ_moveSBtn.png
  • GJ_square01-hd.png
  • GJ_square01.png
  • GJ_square02-hd.png
  • GJ_square02.png
  • GJ_square03-hd.png
  • GJ_square03.png
  • GJ_square04-hd.png
  • GJ_square04.png
  • GJ_square05-hd.png
  • GJ_square05.png
  • GJ_square06-hd.png
  • GJ_square06.png
  • GJ_square07-hd.png
  • GJ_square07.png
  • GJ_squareB_01-hd.png
  • GJ_squareB_01.png
  • GREEN.png
  • HM_JsBridge.js
    .js
  • Lsd.json
  • MAGENTA.png
  • ORANGE.png
  • RED.png
  • ROSE.png
  • VIOLET.png
  • YELLOW.png
  • ad_full_loading.json
  • amap_sdk_lineDashTexture_circle.png
  • amap_sdk_lineDashTexture_square.png
  • amap_sdk_lineTexture.png
  • bumping.ogg
  • bumping_tone.ogg
  • bumping_tone_great.ogg
  • bumping_tone_pitch.ogg
  • bumping_tone_well_done.ogg
  • button_anim.json
  • consentform.html
    .html .js
  • corsica_slideUpAndDown_img_0.png
  • corsica_slideUpAndDown_img_1.png
  • corsica_slideUpAndDown_img_2.webp
  • corsica_slideUpAndDown_img_3.webp
  • corsica_slideUpAndDown_img_3_en.webp
  • corsica_slideUpAndDown_img_4.webp
  • corsica_slideUpAndDown_img_4_en.webp
  • corsica_slideUpAndDown_img_5.webp
  • corsica_slideUpAndDown_img_5_en.webp
  • corsica_slideUpAndDown_img_6.webp
  • eagle_eye_day.png
  • eagle_eye_night.png
  • h5_qr_back.png
  • hello.txt
  • hud.png
  • img_0.jpg
  • img_0.webp
  • img_1.jpg
  • img_2.jpg
  • infowindow_bg.9.png
  • jf.json
  • js.json
  • js_dark.json
  • location_map_gps_3d.png
  • location_map_gps_locked.png
  • location_pressed.png
  • location_selected.png
  • location_unselected.png
  • map_indoor_select.png
  • maps_dav_compass_needle_large.png
  • marker_default.png
  • marker_gps_no_sharing.png
  • offlinemapv4.png
  • scan_anim.json
  • sevenzipjbinding-platforms.properties
  • terrainDefault.png
  • tracelinetexture.png
  • wallpaper_loading.json
  • youtube_sans_light.xml
    .xml
  • zoomin_pressed.png
  • zoomin_selected.png
  • zoomin_unselected.png
  • zoomout_pressed.png
  • zoomout_selected.png
  • zoomout_unselected.png

Android Permissions

1d0dfe6b258b1c0049f447bb47cdebe7b342886350c854f214721c7e67f9400e.bin

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.CAMERA

android.permission.READ_CALL_LOG

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.LOCK_DEVICE

android.permission.RECORD_AUDIO

android.permission.QUERY_ALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.MANAGE_APP_OPS_MODES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_SMS

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_SECURE_SETTINGS

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_CALL_LOG

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.GET_PACKAGE_SIZE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_SMS

android.permission.FOREGROUND_SERVICE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.PACKAGE_USAGE_STATS

android.permission.ACCESS_BACKGROUND_LOCATION