General

  • Target

    c4da21fba1c89e4771390b2c934eda15

  • Size

    9.3MB

  • MD5

    c4da21fba1c89e4771390b2c934eda15

  • SHA1

    edad8c9ffc2ba99e6e3044c3ea9aaef177ca82ac

  • SHA256

    44ce864ba275bd77a67af6926287f50f82c41eb329aa8384fc86a431edd23245

  • SHA512

    9dfa7ee43a7f50c6cb6b463a6bc2488ae60fb7a5158a7633ac576fc58d54e907e3e597d3e76e8eb438e4beeef1f5950f3592b4241fbe4449e147753683b6a255

  • SSDEEP

    196608:McP/3NhoJtb5LEU0BkMiES4D1COx/gzSgcpOantZfXsDg4tqKZfWZrc:Mc3NhoXV0biEGE/gzkNnkDrEKZfWZrc

Score
10/10

Malware Config

Signatures

  • BadMirror payload 1 IoCs
  • Badmirror family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • c4da21fba1c89e4771390b2c934eda15
    .apk android arch:arm

    com.tencent.humblegames.block.zhengxiang

    cn.cmgame.billing.api.GameOpenActivity


  • PaySDK-1.2.9.13-UR_yx.jar
    .apk android

Android Permissions

c4da21fba1c89e4771390b2c934eda15

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.GET_TASKS

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECEIVE_SMS

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_PHONE_STATE

android.permission.WRITE_SMS

android.permission.BROADCAST_SMS

android.permission.WRITE_APN_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_CONTACTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION