Overview

overview

8

Static

static

6

a9225d5ca5...19.apk

 

a9225d5ca5...19.apk

android-10-x64

8

a9225d5ca5...19.apk

android-11-x64

8

ZqhySafePay.apk

 

ZqhySafePay.apk

android-10-x64

1

ZqhySafePay.apk

android-11-x64

1

res.apk

 

res.apk

android-10-x64

res.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9225d5ca5ca97cffa9b1b5e74aad24baf635b3d1f9f31e90d60065a52af8119

  • Size

    3.0MB

  • MD5

    39fbd248b2f85a605226e6a716308a0e

  • SHA1

    b5b7ba73879c69cd27e7faf88f198d5f5b8eca2d

  • SHA256

    a9225d5ca5ca97cffa9b1b5e74aad24baf635b3d1f9f31e90d60065a52af8119

  • SHA512

    41cc0a1761a40e70f1347692fa1ed915fe61a7b8e935390ee659c84310316ef330423333d3e583b9e5976b907f9b1781cd1477de76154d3c93f250ada5c3b32e

  • SSDEEP

    49152:YyzDvaMJW7vZO4yJRNy6powgspi9kpNohn/zY6qIwtNm4cyga5pJfRSJ95o:jMzZOhxe9knohnrY44cygoxRh

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • a9225d5ca5ca97cffa9b1b5e74aad24baf635b3d1f9f31e90d60065a52af8119
    .apk android

    yang.cong.tymyd.che.xian.lhh

    yang.cong.tymyd.che.xian.SplashActivity


  • ZqhySafePay.apk
    .apk android

    com.zqhy.safepay

    com.zqhy.safepay.wechatpay.PayActivity


  • res.bin
    .apk android

Android Permissions

a9225d5ca5ca97cffa9b1b5e74aad24baf635b3d1f9f31e90d60065a52af8119

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

andorid.permission.MONUN_UNMOUNT_FILESYSTEMS

android.permission.INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT