General

  • Target

    09c28d864e89a2686f821d6ec76897620f25113dd954d061eaba74580d7aaaad.bin

  • Size

    3.4MB

  • MD5

    f88c7b5245048b8ec686069d09e51b4e

  • SHA1

    fb0b1e93c3e9bef83e23dcfa4f7f344daeaacd4d

  • SHA256

    09c28d864e89a2686f821d6ec76897620f25113dd954d061eaba74580d7aaaad

  • SHA512

    a8c9f4b8546fc93ac4711fd8b3dd8e64c200575a680f99eedc824361599726a9fab182482a8f1fc7ad308fcb830dadedfa7d916b31b4dccfac99f8630121b8d5

  • SSDEEP

    49152:OzlRn+EDrtUJsVhHYqS8Vog3VVYEAGFBt5m0jXi3LX5zZk0xGKWY6FM41mMkL+X2:OzlZ7DrtM5q9zYRGFQ8XiT5FkgsQ+m

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 09c28d864e89a2686f821d6ec76897620f25113dd954d061eaba74580d7aaaad.bin
    .apk android

    impact.flight.hobby

    exit.canyon.absent.nhtpqlz


  • 2_02.png
  • 2_04.png
  • 2_05.png
  • 2_06.png
  • 2_07.png
  • 2_09.png
  • AchievementsDescMD.plist
    .xml
  • AssetManifest.json
  • BlackSludge_AnimDesc.plist
  • ColorPS.shader
  • ColorVS.shader
  • EmailAddress.xml
  • Facial Features Tracker - High.cfg
  • Facial Features Tracker - Low.cfg
  • FontManifest.json
  • FontPS.shader
  • FontVS.shader
  • Head Tracker.cfg
  • TexturePS.shader
  • TextureVS.shader
  • WeChatNum.ttf
  • WeChatSansSS-Bold.ttf
  • about1d.html
    .html
  • about2d.html
    .html
  • achievement_01.ogg
  • actionbar_icon_dark_back.svg
    .xml
  • actionbar_icon_dark_search.svg
    .xml
  • actionbar_send_icon.svg
    .xml
  • actionbar_setting_icon.svg
    .xml
  • andorid-chs_1.jpg
  • andorid-chs_3.jpg
    .jpg
  • andorid-en_1.jpg
  • andorid-en_3.jpg
    .jpg
  • api_key.txt
  • app.2d89045a.js
    .js
  • app.html
    .html
  • app.xml
  • appStyles.xml
    .xml
  • app_get_version.html
    .html .js
  • aps-mraid.js
    .js
  • aps_mobile_client_config.json
  • arch12.bytenn
  • audio_interact_effect.json
  • bakchat_privacy.htm
    .html
  • bank_logo.xml
  • base.bundle
    .js
  • bg_gradient_fragment_shader.glsl
  • bg_gradient_vertex_shader.glsl
  • big-1d.png
  • big-datamatrix.png
  • big-qr.png
  • bigFont-hd.fnt
  • bottomsheet_icon_moment.svg
    .xml
  • bottomsheet_icon_transmit.svg
    .xml
  • buyItem03.ogg
  • cancel.ogg
  • candide3.fdp
  • candide3.wfm
  • canvas_valid_type.xml
  • chestClick.ogg
  • chestLand.ogg
  • chestOpen.plist
    .xml
  • chestOpen01.ogg
  • chs-2v.jpg
    .jpg
  • config.conf
  • contact-results-screen.jpg
    .jpg
  • counter003.ogg
  • cr.png
  • crashlytics-build.properties
  • credit_card_tb.otf
  • crystal01.ogg
  • cu.png
  • customizations.css
  • default_chat.xml
    .xml
  • demo-no.png
  • demo-yes.png
  • detect_model.param
  • emoji_arrow.svg
    .xml
  • emoji_download_cancel_normal.svg
    .xml
  • emoji_download_finish.svg
    .xml
  • emojipanel-config-jifu.xml
    .xml
  • emojipanel-config.xml
    .xml
  • en-2v.jpg
    .jpg
  • en_US.json
  • error.js
    .js
  • error.ogg
  • filtered.png
  • finish.ogg
  • frag_framebuffer_plane.glsl
  • friendactivity_mycover_bg.jpg
  • gold01.ogg
  • gold02.ogg
  • gq.png
  • gr.png
  • groundSquare_17_2_001-hd.png
  • groundSquare_17_2_001.png
  • grs_sdk_global_route_config_apptouchupdatesdk.json
  • grs_sdk_global_route_config_opendevicesdk.json
  • grs_sdk_global_route_config_opensdkService.json
  • grs_sdk_global_route_config_updatesdk.json
  • grs_sdk_server_config.json
  • grs_sp.bks
  • gt.png
  • gw.png
  • gy.png
  • hianalytics_njjn
  • highscoreGet02.ogg
  • home.css
  • home.html
    .html
  • hvn_models_inst_motion_pre.dat
  • hvn_models_inst_spoof_pre.dat
  • hvn_models_motion_pre.dat
  • hvn_models_spoof_pre.dat
  • index.html
    .html
  • jquery-history.js
    .js
  • jquery-resizable.min.js
    .js
  • jsbridge.js
    .js
  • keyEffect.plist
    .xml
  • kmjXC.json
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • liveness_ensemble-1.2.1.jcq
  • lk.png
  • load_page_metrics.js
    .js
  • localinfo
  • loggers.config
  • loggers.debug.config
  • login.css
  • login.html
    .html
  • manifest.xml
    .xml
  • mig_wifi_service_terms_chs.html
    .html
  • mig_wifi_service_terms_en.html
    .html
  • model.yaml
  • motion_liveness_nn-0.0.1.jcq
  • net_fc.param
  • network_warning.htm
    .html
  • oauth_network_error.html
    .html
  • power.json
  • primary_cascade-1.1.0.xml
    .xml
  • purecolor_chat.xml
    .xml
  • qqsync_intro.htm
    .html
  • qqsync_privacy.htm
    .html
  • reserved_chat.xml
    .xml
  • scan-example.png
  • scan-from-phone.png
  • scanning.html
    .html
  • scene_shaderf.glsl
  • scene_shaderv.glsl
  • search-book-contents.jpg
    .jpg
  • shakehideimg_man.jpg
  • sharing.html
    .html
  • srnet.bin
  • srnet.param
  • start.ogg
  • style.css
  • texture_fragment_shader.glsl
  • texture_vertex_shader.glsl
  • tiles.bin
  • vertex_framebuffer_plane.glsl
  • wx_wifi_faq.html
  • wx_wifi_service_terms_chs.html
  • wx_wifi_service_terms_en.html
  • zh_CN.json

Android Permissions

09c28d864e89a2686f821d6ec76897620f25113dd954d061eaba74580d7aaaad.bin

Permissions

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.USE_FULL_SCREEN_INTENT

android.permission.READ_CONTACTS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.RECEIVE_SMS

android.permission.ACCESS_NETWORK_STATE