General

  • Target

    0f20f613876784e3ffdb0767612168a3f16370457477d3c24e07ee5f44dbc26b.bin

  • Size

    2.5MB

  • MD5

    ab9ab20b3e85d3d6020b12e8c517615f

  • SHA1

    7ab8188895d77f3c6722baafe917a9f61b8e3491

  • SHA256

    0f20f613876784e3ffdb0767612168a3f16370457477d3c24e07ee5f44dbc26b

  • SHA512

    a40c9561a844e904a67780651a6ab1de9be66db2f471a1afdb8453891e9b7f06b0e82eb23f8bcc75e65472b5d66b0237709f4e6b7872bd6b5c16a6aed0e11938

  • SSDEEP

    49152:QCKwG+CPxv+agqxQD1ij56BJNqD8XxTpOGTMcXO88Ytdu9QRGaw+WeMgkLw:SwG+CZvRhQDIaJ8D8XVpO9ce88YtNMzk

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • 0f20f613876784e3ffdb0767612168a3f16370457477d3c24e07ee5f44dbc26b.bin
    .apk android

    com.fire.job

    com.original.water.vdxv


  • CKUI.json
  • CK_HUNXIA2_SHOW.json
  • CK_HXJL.json
  • CK_JLYL.json
  • CK_JS.json
  • CK_JS_1.json
  • CK_RMB.json
  • CK_SuperBossShop_Hero.json
  • CLONE_CHOOSE_HERO.json
  • CS_GH_ui.json
  • Card_SignetDraw_UI.json
  • Card_SignetFoster_UI.json
  • Card_SignetOneKeyLevelUp_UI.json
  • Card_SignetPreView_UI.json
  • Card_SignetSlotReset_UI.json
  • Card_Strenthen_UI.json
  • Card_UpAdvance_UI.json
  • Card_UpLevel_UI.json
  • Card_UpPotency_UI.json
  • Card_UpSkill_UI.json
  • Card_UpStar_UI.json
  • Gene_EmpathyTrainer.png
  • Gene_EmpathyTrainer_Locked.png
  • apple_coin.png
  • default.ui
  • frenchrev.properties
  • frenchrev_ca.properties
  • frenchrev_de.properties
  • frenchrev_en.properties
  • frenchrev_eu.properties
  • frenchrev_fr.properties
  • frenchrev_it.properties
  • frenchrev_ja.properties
  • frenchrev_pt.properties
  • frenchrev_ru.properties
  • hindu.properties
  • hindu_bn.properties
  • hindu_hi.properties
  • hindu_kn.properties
  • hindu_ml.properties
  • hindu_or.properties
  • hindu_pa.properties
  • hindu_ru.properties
  • hindu_sa.properties
  • hindu_ta.properties
  • hindu_te.properties
  • horderelease.wav
  • loaaMDd.json
  • neurax.txt
  • symbols-ad.sdf
  • symbols.sdf

Android Permissions

0f20f613876784e3ffdb0767612168a3f16370457477d3c24e07ee5f44dbc26b.bin

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.REQUEST_DELETE_PACKAGES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.READ_PHONE_NUMBERS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.QUERY_ALL_PACKAGES

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.RECEIVE_LAUNCH_BROADCASTS

android.permission.READ_PHONE_STATE

android.permission.BLUETOOTH

android.permission.QUICKBOOT_POWERON

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.ACCESS_BACKGROUND_LOCATION

com.google.android.c2dm.permission.RECEIVE

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.GET_TASKS