General

  • Target

    7f8d17606fc4e0a2309783e8f85366c7470133864ca27d1c47789bda3f4d502a

  • Size

    18.3MB

  • MD5

    0f13f2fc87dffac9d5ae0e02a488fd9c

  • SHA1

    60e32a32f7696c8e7ae1978bc4cd7683ffd90bd9

  • SHA256

    7f8d17606fc4e0a2309783e8f85366c7470133864ca27d1c47789bda3f4d502a

  • SHA512

    9f56fe8af8ad0d0543c841e5828053dc1dc2b04af54aa28c4d4be6caf35253f3b7797836de80e7113ca51f6db9cf41cb3c957a8c6fe60d92ca742bcf94fa69bb

  • SSDEEP

    393216:fjAkc/sbB9FtbhMF7J6ptmzCXGEMbxALUSmDBI/paER15Ah6CMhhhhhM6FLR:fjAkdtN7mzEG9qUSmDBI/4prMhhhhhMk

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 12 IoCs

Files

  • 7f8d17606fc4e0a2309783e8f85366c7470133864ca27d1c47789bda3f4d502a
    .apk android arch:arm64 arch:arm

    com.xiakexing.passenger

    com.qianxx.yypassenger.module.launch.LaunchActivity


Android Permissions

7f8d17606fc4e0a2309783e8f85366c7470133864ca27d1c47789bda3f4d502a

Permissions

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.REQUEST_INSTALL_PACKAGES

com.xiakexing.passenger.permission.JPUSH_MESSAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_LOGS