1b9ebf086412c329ab419aa3344a502b01eecac1f5da7dade7e0f6115345cec9

Sharing

Copy URL

Twitter E-mail

General

Target

1b9ebf086412c329ab419aa3344a502b01eecac1f5da7dade7e0f6115345cec9
Size

5.0MB
MD5

3b0407bafa3a7c04eeeb42ed3e852526
SHA1

fed1be067885b1540f539c428acd1b15b77f2e79
SHA256

1b9ebf086412c329ab419aa3344a502b01eecac1f5da7dade7e0f6115345cec9
SHA512

f1fd9e462916b08e12e0544469455ecaf8594a8c13b0d7db02d98936bedc5fa6d4330124837911f31bed59d3b9f6a6621ecfc6b75516161c0878fe9cd553dd56
SSDEEP

98304:VNIwNuIqX5dJBiUceB10KI0TotrTZkcGlXTz8AMe5F477UR4RWuWzo:VxNDqdBivolTobkcajRN5F4kucuWc

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read user selected media files from external storage.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED

Files

1b9ebf086412c329ab419aa3344a502b01eecac1f5da7dade7e0f6115345cec9
.zip
app.apk
.apk android arch:arm64 arch:arm arch:x86

www.qckyly.com

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CHANGE_NETWORK_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_CONTACTS
android.permission.VIBRATE
android.permission.READ_LOGS
android.permission.WRITE_CONTACTS
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.GET_ACCOUNTS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.CALL_PHONE
android.permission.FLASHLIGHT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.CAMERA
com.asus.msa.SupplementaryDID.ACCESS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_VISUAL_USER_SELECTED
com.huawei.android.launcher.permission.CHANGE_BADGE
com.vivo.notification.permission.BADGE_ICON

Services
39285EFA.dex
HBuilder.png
.png
__shortcut.js
__template.json
__wap2app.js
__wap2app.ttf
__wap2appbrowser.html
__wap2appconfig.js
.js
__wap2appcontext.html
__wap2apperror.html
__wap2appplayer.js
__wap2appquit.js
.js
__wap2appswiper.html
__wap2apptabbar.css
__wap2apptabbar.js
.js
client_index.html
.html
dcloud_beep.ogg
dcloud_configs.json
dcloud_control.xml
.xml
dcloud_error.html
.html .js polyglot
dcloud_iconfont.ttf
dcloud_prograss_snow1.png
.png
dcloud_properties.xml
.xml
dcloud_url.json
libso.so
manifest.json
point.png
.png
sitemap.json
supplierconfig.json

Sharing

General

Malware Config

Signatures

Files

www.qckyly.com

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

Permissions

Services