General

  • Target

    78afdc6635ea300d6e16ed05dfdc866a991eca94fd5809cbe1376fb6d0c60384

  • Size

    7.5MB

  • MD5

    d8c1f9c71c793b6e8f6341682f789b37

  • SHA1

    e4eb3ed9a616076fb92b8ab56e6d9e8a2d31cd03

  • SHA256

    78afdc6635ea300d6e16ed05dfdc866a991eca94fd5809cbe1376fb6d0c60384

  • SHA512

    d829db6335238b51371570fcfd5acc705c423769fc23c38f4491be580524afdd82938b5552efda86fa6dd4b5163b8f0ad13cbb0d41091aa307398e8c50a493c4

  • SSDEEP

    196608:AEFuezz7tGDY0XqU9ngwqaXqFCUv17tNbpw+H24yw+wGm:ByYcngwqaXqFCUN7tBpw424yP7m

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 78afdc6635ea300d6e16ed05dfdc866a991eca94fd5809cbe1376fb6d0c60384
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    robot9.robot.deified.com.robot9

    robot9.robot.deified.com.robot9.Robot9Activity


  • 66db.db
    .apk android arch:arm arch:x86

    com.eagle.pay66safe

    com.eagle.pay66safe.wxapi.PayActivity


  • bp.db
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    cn.bmob.knowledge

    .wxapi.BmobActivity


  • gdtadv2.jar
    .apk android

Android Permissions

78afdc6635ea300d6e16ed05dfdc866a991eca94fd5809cbe1376fb6d0c60384

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.PACKAGE_USAGE_STATS

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

robot9.robot.deified.com.robot9.permission.C2D_MESSAGE

android.permission.CAMERA