General

  • Target

    9acdd0d1cdf1e386c0744a6c26b96f1d16a0f9e939b11df52228380ab62d34ff

  • Size

    12.7MB

  • MD5

    4cb84330b903504604327a72292980fe

  • SHA1

    0016aed84af70329ed16ec7155051decedb4430e

  • SHA256

    9acdd0d1cdf1e386c0744a6c26b96f1d16a0f9e939b11df52228380ab62d34ff

  • SHA512

    bd51e1cc364f4a2cdb18bd3e0df056146199d2bb76d1a754e0726b0e39657bcde0cb384a112d59478b5e81671f08bfdfa6e089522e44c869d618024814b4b826

  • SSDEEP

    393216:CGD0NqjRrOeZjGx+yQQWqHJw3zpzoay0cTB:Cs0UNaeZ6x+yhHJw3dzoJJB

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 9acdd0d1cdf1e386c0744a6c26b96f1d16a0f9e939b11df52228380ab62d34ff
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

9acdd0d1cdf1e386c0744a6c26b96f1d16a0f9e939b11df52228380ab62d34ff

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS