com.shanchuang.lg.activity.SplashActivity
android.intent.action.MAIN
com.shanchuang.lg.wxapi.WXPayEntryActivity
android.intent.action.VIEW
com.tencent.tauth.AuthActivity
android.intent.action.VIEW
Behavioral task
behavioral1
Sample
8310b72904ca19f87644de84d65536971d82bc30a5b91b294cbb4e5cb1622fa2.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
amap_resource1_0_0.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
amap_resource1_0_0.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
amap_resource1_0_0.apk
Resource
android-x64-arm64-20231215-en
Target
8310b72904ca19f87644de84d65536971d82bc30a5b91b294cbb4e5cb1622fa2
Size
20.6MB
MD5
ff170d57b6c47317af4e84a6571e75e6
SHA1
b534229aed9aa842d63ee9f9d68f86f8f10a4cd6
SHA256
8310b72904ca19f87644de84d65536971d82bc30a5b91b294cbb4e5cb1622fa2
SHA512
3da94055548671c6bee54cf386707bf7a0593d40af614007b55d78063e44e460e694fff5db04f0e794884a8d8a80698466aed2ff791463990c599a2812886fc6
SSDEEP
393216:i7j8yRynUH/daJI5I0tALiRkpTLiRk/x3cP6dYFDJssXOA8bgPOiggrkUGizLa:6ryUHwq57lRNRvJ/GA+z3gVPXa
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
sample | patched_upx |
resource | yara_rule |
---|---|
sample | upx |
sample | upx |
description | ioc |
---|---|
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Required to be able to access the camera device. | android.permission.CAMERA |
Allows an application to record audio. | android.permission.RECORD_AUDIO |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.INTERNET
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.ACCESS_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.INTERNET
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.ACCESS_WIFI_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.FLASHLIGHT