General

  • Target

    9f5a2fcc7a9fde2a77ca05d970b740c079898399d00e818fa421c2bfefb28f1f

  • Size

    25.6MB

  • MD5

    55a3183a8b154a4f213623879e5483b4

  • SHA1

    dfe011455909798399f7b596ec6ed6d801f2b4e1

  • SHA256

    9f5a2fcc7a9fde2a77ca05d970b740c079898399d00e818fa421c2bfefb28f1f

  • SHA512

    aea91dd27cfecc39f4e6b437b209a1389b86e2db2d92d91023633f12c6d1ad449af0737cc35d6f9abc105803ad3f6c84e6c1f601a65212635aea5593550a99eb

  • SSDEEP

    786432:aXMXgIiafPo66S3WN7e8004k0hHUFiwlp1:aXAgB6g9AW7WkE0Fimp1

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 12 IoCs

Files

  • 9f5a2fcc7a9fde2a77ca05d970b740c079898399d00e818fa421c2bfefb28f1f
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.ganten.saler

    com.ganten.saler.splash.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

9f5a2fcc7a9fde2a77ca05d970b740c079898399d00e818fa421c2bfefb28f1f

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.FLAG_GRANT_READ_URI_PERMISSION

android.permission.CAMERA