Errors

Reason
could not process APK: zip: not a valid zip file

General

  • Target

    bc004a32ccb57c94de1b23e305be9296

  • Size

    18.2MB

  • MD5

    bc004a32ccb57c94de1b23e305be9296

  • SHA1

    0f640e6485cc37dc3b820f7b39d0e908c496a052

  • SHA256

    404aa0c874a08e836368c302e99d1fa90d6810e21063ec841e06b5b9a28cebd2

  • SHA512

    ebab9b4cc242ef09faabacc0e3590a3f687ebdc74e559f5cef0083014bef29b15ce7b6640e72db76ac9655ed13d6071bd16b8e219af7f44f97d0fb8f1fd50bb5

  • SSDEEP

    196608:yRGkR6PaDZTKcqYjqAYcsKL1nmm1TCuK46HOLdyJ2L4BsC12m:k64dKcqYjqrcsKJNThouL9sB71R

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • bc004a32ccb57c94de1b23e305be9296
    .apk android arch:arm arch:x86

    com.geeks.gba.kdyglbshyzh

    com.geeks.shell.ShellActivity


  • AdServer.apk
    .apk android

    com.miui.systemAdSolution


  • __pasys_remote_offer_wall.jar
    .apk android
  • __xadsdk__remote__final__.jar
    .apk android
  • analytics_core.apk
    .apk android arch:arm64 arch:arm

    com.miui.analytics


  • geeks.dat
    .apk android
  • __pasys_remote_offer_wall.jar
    .apk android

Android Permissions

bc004a32ccb57c94de1b23e305be9296

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.android.vending.CHECK_LICENSE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK