Overview

overview

8

Static

static

8

756abb0d5d...23.apk

android-9-x86

6

756abb0d5d...23.apk

android-13-x64

amap_resou..._0.apk

android-9-x86

amap_resou..._0.apk

android-10-x64

amap_resou..._0.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    756abb0d5d201e9b48537c01872af9b32e3463b6ea62f2bdd09df750abce3023

  • Size

    25.6MB

  • MD5

    ef3c17ae47610922bbdf54e788ea2784

  • SHA1

    9ffce9e7a51ddffcf1122a0aea8e8a73f00565df

  • SHA256

    756abb0d5d201e9b48537c01872af9b32e3463b6ea62f2bdd09df750abce3023

  • SHA512

    1091c994c7383689f70a6927155f103e010b4afb6cc24e9e39a11963c64c5122761ec3387382f94e042766e8a515deec72521edf460ceb90b72961bac0c6fc35

  • SSDEEP

    786432:1OaWbtGcdzUKNxLLC5MAcXlhTAfWYIcbcnow2:ca0ldzUKNxLLRNbcdbcow2

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 9 IoCs

Files

  • 756abb0d5d201e9b48537c01872af9b32e3463b6ea62f2bdd09df750abce3023
    .apk android arch:arm arch:x86

    org.yaochong.app.partner

    io.dcloud.PandoraEntry


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

756abb0d5d201e9b48537c01872af9b32e3463b6ea62f2bdd09df750abce3023

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

getui.permission.GetuiService.org.yaochong.app.partner

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

org.yaochong.app.partner.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

com.meizu.c2dm.permission.RECEIVE

org.yaochong.app.partner.push.permission.MESSAGE

org.yaochong.app.partner.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.READ_LOGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.huawei.android.launcher.permission.CHANGE_BADGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS