General

  • Target

    charge-web.apk

  • Size

    36.3MB

  • MD5

    8ee9ffe2e96311ce7dd4a2ede1b180b4

  • SHA1

    7d68687ad8bf523e91ebee90da633e909284dce6

  • SHA256

    d564e94904f5df40e11fc9edbab58a5423cfc298958c7e5410478bcc77c2f742

  • SHA512

    01c0a1fd94be4a7644fb21a92e8dec03a806cd28f73e223c8ef6f0496670ef94c4f403b9ec5d425cea85ce4ee1604a051493f7ebea92594506da70e60622c8a3

  • SSDEEP

    786432:COTEs0U7orQbG8B270qJ8BzbhEbsjqoglRBRK+XLSglM85JK+:lyrQVB20qJeHhEqgm4nJK+

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • charge-web.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.zero.ztothez

    io.dcloud.PandoraEntry


  • HBuilder.png
    .png
  • __uniappchooselocation.js
    .js
  • __uniapperror.png
    .png
  • __uniappes6.js
    .js
  • __uniappopenlocation.js
    .js
  • __uniapppicker.js
    .js
  • __uniappquill.js
    .js
  • __uniappquillimageresize.js
    .js
  • __uniappscan.js
    .js
  • __uniappsuccess.png
    .png
  • __uniappview.html
    .html .js
  • ad2.jpg
  • ad3.jpg
  • app-config-service.js
    .js
  • app-config.js
    .js
  • app-service.js
    .js
  • app-view.js
    .js
  • arc.png
    .png
  • baseline.prof
  • baseline.profm
  • car.png
    .png
  • dcloud3.dat
    .js
  • dcloud_beep.ogg
  • dcloud_configs.json
  • dcloud_control.xml
    .xml
  • dcloud_error.html
    .html .js
  • dcloud_iconfont.ttf
  • dcloud_prograss_snow1.png
    .png
  • dcloud_properties.xml
  • dcloud_uniplugins.json
  • emptyCart.jpg
  • error.html
    .html
  • h1.png
    .png
  • login.png
    .png
  • logo.png
    .png
  • manifest.json
  • missing-face.png
    .png
  • point.png
    .png
  • select.png
    .png
  • selected.png
    .png
  • supplierconfig.json
  • tab-cart-current.png
    .png
  • tab-cart.png
    .png
  • tab-cate-current.png
    .png
  • tab-cate.png
    .png
  • tab-home-current.png
    .png
  • tab-home.png
    .png
  • tab-mall-current.png
    .png
  • tab-mall.png
    .png
  • tab-my-current.png
    .png
  • tab-my.png
    .png
  • uni-jsframework-dev.js
  • uni-jsframework-vue3-dev.js
  • uni-jsframework-vue3.js
  • uni-jsframework.js
  • uni.webview.1.5.2.js
    .js
  • unincomponents.ttf
  • user-bg.jpg
  • view.css
  • view.umd.min.js
    .js
  • vip-card-bg.png
    .png
  • yticon.ttf
  • zlsioh.dat

Android Permissions

charge-web.apk

Permissions

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_NETWORK_STATE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.READ_EXTERNAL_STORAGE

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

android.permission.WAKE_LOCK

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE