General

  • Target

    32bc7608b758171f30a4d317fc598ee1

  • Size

    9.7MB

  • MD5

    32bc7608b758171f30a4d317fc598ee1

  • SHA1

    dd5f270b6e86b969d7a839e64e9303fd9a108a87

  • SHA256

    d73cce87f68e24fb935829433f386434c195af67362052d847c950d6d8a8b8ef

  • SHA512

    6646dd410a3061c58549c40157a360134fc3a232a0b3c849d220def235362d484a8fb75917306982f1dd85ce149eb5ce0266ebc2ac20772d38c88fbf595f01d8

  • SSDEEP

    196608:PudOdQhnYjxi01574DjJeGQqBRKkFmcMXpTWIn8v6:Pp2hn6N4Dj5zBIwmzlWeE6

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 29 IoCs

Files

  • 32bc7608b758171f30a4d317fc598ee1
    .apk android arch:arm arch:x86

    com.zdanjian.zdanjian

    com.zdanjian.zdanjian.activities.start.StartActivity


  • gdtadv2.jar
    .apk android

Android Permissions

32bc7608b758171f30a4d317fc598ee1

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.FOREGROUND_SERVICE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

com.huawei.authentication.HW_ACCESS_AUTH_SERVICE

com.samsung.svoice.sync.READ_DATABASE

com.samsung.svoice.sync.ACCESS_SERVICE

com.samsung.svoice.sync.WRITE_DATABASE

com.sec.android.app.voicenote.Controller

com.sec.android.permission.VOIP_INTERFACE

com.sec.android.permission.LAUNCH_PERSONAL_PAGE_SERVICE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

com.samsung.android.providers.context.permission.READ_RECORD_AUDIO

com.samsung.android.providers.context.permission.WRITE_RECORD_AUDIO

com.sec.android.settings.permission.SOFT_RESET

sec.android.permission.READ_MSG_PREF

com.samsung.android.scloud.backup.lib.read

com.samsung.android.scloud.backup.lib.write

android.permission.BIND_DIRECTORY_SEARCH

android.permission.UPDATE_APP_OPS_STATS

com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL

android.permission.ACCOUNT_MANAGER

android.permission.PACKAGE_USAGE_STATS

android.permission.USE_CREDENTIALS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_WIMAX_STATE

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.BIND_APPWIDGET

android.permission.BLUETOOTH_ADMIN

android.permission.BODY_SENSORS

android.permission.BROADCAST_STICKY