Overview

overview

7

Static

static

7

6cd8e9bdff...a4.apk

android-9-x86

1

TencentUnipay.apk

android-9-x86

1

TencentUnipay.apk

android-10-x64

1

MidasCFT_1...9a.apk

android-9-x86

1

MidasCFT_1...9a.apk

android-11-x64

1

MidasCore_...44.apk

android-9-x86

1

MidasCore_...44.apk

android-10-x64

1

MidasCore_...44.apk

android-11-x64

1

MidasPay_1...42.apk

android-9-x86

1

MidasPay_1...42.apk

android-10-x64

1

click.html

windows7-x64

1

click.html

windows10-2004-x64

1

libwbsafeedit

debian-9-armhf

1

alipay_plu...sp.apk

android-9-x86

1

alipay_plu...sp.apk

android-10-x64

1

alipay_plu...sp.apk

android-11-x64

1

libjiagu.so

debian-9-armhf

libjiagu_x86.so

ubuntu-18.04-amd64

1

libwbsafeedit

debian-9-armhf

1

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

libwbsafeedit_x86

ubuntu-18.04-amd64

1

libwbsafeedit_x86_64

ubuntu-18.04-amd64

1

Sharing

Copy URL Twitter E-mail

Errors

Reason
strconv.ParseInt: parsing "0x7fffffff": invalid syntax

General

  • Target

    6cd8e9bdffa54b05fcbfb7e276b0f253797fdd9e3722447a81b4f0cedc2137a4.apk

  • Size

    31.9MB

  • MD5

    8cf80e3e47687361b290d7f2688c2905

  • SHA1

    20356ec16e96173edda1f2393e33c5a633c37b90

  • SHA256

    6cd8e9bdffa54b05fcbfb7e276b0f253797fdd9e3722447a81b4f0cedc2137a4

  • SHA512

    0eb95ad0bcbef4b9693ce5933f19425e3a3f922dc036435fd821aba90812787d8d5c6c1c985fbc8981954fcddd432dcc9ef721a3c5a1ac2a1a55ac706568cbf7

  • SSDEEP

    786432:DskooU944mmQXs9TZBpPE/0n/8wxDcGNsCkaJs36pd:okkJ4ATZBRB8XG3Bpd

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 6cd8e9bdffa54b05fcbfb7e276b0f253797fdd9e3722447a81b4f0cedc2137a4.apk
    .apk android arch:arm

    yiqi.bazi

    yiqi.activity.main.Launch


  • .appkey
  • FZLBJW.TTF
  • TencentUnipay.apk
    .apk android arch:arm arch:mips arch:x86
  • MidasPay.zip
    .zip
  • MidasCFT_1.5.1d_34_fefa46db17af090a6901cc91ba53929a.jar
    .apk android arch:arm arch:x86

    com.tencent.midas.tenpay


  • MidasCore_1.5.1d_34_d22dffaba0f3554c05a2243cca21ec44.jar
    .apk android

    com.tencent.midas.core


  • MidasPay_1.5.1d_34_e5c335dcae9fcef63cdea5914c398942.jar
    .apk android arch:arm arch:x86

    com.tencent.midas.pay


  • MidasSign.ini
  • click.html
    .html .js
  • com.tencent.open.config.json
  • libwbsafeedit
    .elf linux arm
  • unipay_tenpay_bin_json
  • WSJPay_5.5.0e_21.zip
    .zip
  • alipay_plugin_20120428msp.apk
    .apk android

    com.alipay.android.app

    .Cashier


  • background.9.png
    .png
  • buttonNegt.png
    .png
  • buttonPost.png
    .png
  • button_green.9.png
    .png
  • button_red.9.png
    .png
  • calendardata.db
  • close_btn_bg.png
    .png
  • close_btn_src_normal.png
    .png
  • close_btn_src_pressed.png
    .png
  • com.tencent.open.config.json
  • com.tencent.plus.bar.png
    .png
  • com.tencent.plus.blue_disable.png
    .png
  • com.tencent.plus.blue_down.png
    .png
  • com.tencent.plus.blue_normal.png
    .png
  • com.tencent.plus.gray_disable.png
    .png
  • com.tencent.plus.gray_down.png
    .png
  • com.tencent.plus.gray_normal.png
    .png
  • com.tencent.plus.ic_error.png
    .png
  • com.tencent.plus.ic_success.png
    .png
  • com.tencent.plus.logo.png
    .png
  • common_button_big_blue.9.png
    .png
  • common_button_big_blue_disable.9.png
    .png
  • common_button_big_blue_highlighted.9.png
    .png
  • common_button_white.9.png
    .png
  • common_button_white_highlighted.9.png
    .png
  • countryCode.txt
  • countryCodeEn.txt
  • countryCodeTw.txt
  • dreamresultdata1.sqlite
  • get_code_button.9.png
    .png
  • get_code_button_highlighted.9.png
    .png
  • ic_com_sina_weibo_sdk_close.png
    .png
  • libjiagu.so
    .elf linux arm
  • libjiagu_x86.so
    .elf linux x86
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • login_bottom_background.9.png
    .png
  • login_btn_src_big_normal.png
    .png
  • login_btn_src_big_pressed.png
    .png
  • login_btn_src_normal.png
    .png
  • login_btn_src_pressed.png
    .png
  • login_btn_src_small_normal.png
    .png
  • login_btn_src_small_pressed.png
    .png
  • login_country_background.9.png
    .png
  • login_country_background_highlighted.9.png
    .png
  • login_top_background.9.png
    .png
  • logout_btn_src_normal.png
    .png
  • logout_btn_src_pressed.png
    .png
  • logout_btn_src_small_normal.png
    .png
  • logout_btn_src_small_pressed.png
    .png
  • pinyinindex
  • sdk_weibo_logo.png
    .png
  • search_clear_btn_down.png
    .png
  • search_clear_btn_normal.png
    .png
  • tableview_sectionheader_background.png
    .png
  • timeline_icon_add_friends.png
    .png
  • timeline_icon_attention.png
    .png
  • timeline_relationship_icon_addattention.png
    .png
  • timeline_relationship_icon_attention.png
    .png
  • title_bg.png
    .png
  • triangle.png
    .png
  • weibosdk_common_button_alpha.9.png
    .png
  • weibosdk_common_button_alpha_highlighted.9.png
    .png
  • weibosdk_common_shadow_top.9.png
    .png
  • weibosdk_dialog_bg.9.png
    .png
  • weibosdk_empty_failed.png
    .png
  • weibosdk_navigationbar_back.png
    .png
  • weibosdk_navigationbar_back_highlighted.png
    .png
  • weibosdk_navigationbar_background.9.png
    .png
  • weibosdk_notification_icon.png
    .png
  • ysdkconf.ini
  • yyb_appdetail_bg_floatingwindow.9.png
    .png
  • yyb_appdetail_showmore.png
    .png
  • yyb_friends.png
    .png
  • yyb_icon_back.png
    .png
  • yyb_qq.png
    .png
  • yyb_qzone.png
    .png
  • yyb_topbar.9.png
    .png
  • yyb_weixin.png
    .png

Android Permissions

6cd8e9bdffa54b05fcbfb7e276b0f253797fdd9e3722447a81b4f0cedc2137a4.apk

Permissions

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.READ_LOGS

android.intent.action.XMPP_CONNECTED

android.intent.action.XMP

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.READ_PHONE_STATE