General

  • Target

    9410e50968fe2d2bd8e425aeaed0a1b8f51a0d5775ffdeadca04faecd555234d

  • Size

    12.7MB

  • MD5

    6c7d8c211e076c4563ce2a5a6a7db9bb

  • SHA1

    f535b9f64f3ded03072bedf92c7b7e27f85c87a9

  • SHA256

    9410e50968fe2d2bd8e425aeaed0a1b8f51a0d5775ffdeadca04faecd555234d

  • SHA512

    044bbf1d3c6600c0e0a466c1521d785ad4c3898b152b77ea2d9fe73a3b33173a5e4209ed3debc5d9a0271f721d4f65d4354e1278e51f4a1bf20b5b2391c0228a

  • SSDEEP

    393216:2yGD0NqjRrOeZjGx+yQQWqHJw3zpzoYy0hTy:2ys0UNaeZ6x+yhHJw3dzoXKy

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 9410e50968fe2d2bd8e425aeaed0a1b8f51a0d5775ffdeadca04faecd555234d
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

9410e50968fe2d2bd8e425aeaed0a1b8f51a0d5775ffdeadca04faecd555234d

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS