General

  • Target

    a025d66c1e67d834522921d7660ed1fa47da57078df780d63039d2a6460cb3f9

  • Size

    17.4MB

  • MD5

    4ae4b489823aa4e6b8803db9d204d7fa

  • SHA1

    868906cd1dd2e124789e80aa0b4d31eb51b66eb3

  • SHA256

    a025d66c1e67d834522921d7660ed1fa47da57078df780d63039d2a6460cb3f9

  • SHA512

    dd38b07b84f5461f501256ac909653639d27373710bb3a0e32726c36d57ce18ef783086273000e98fb67a5c4f23f492c82f417a2964fbdd8d39f33470c937898

  • SSDEEP

    393216:ms1W1uOsQtWwQ+D2dfCxuu+vo3mRAD7nW5AZ5vu+O2qfe:3qu5lMaCrmW7W5V6qfe

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 9 IoCs

Files

  • a025d66c1e67d834522921d7660ed1fa47da57078df780d63039d2a6460cb3f9
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.yimi.book

    com.yimi.book.ui.login.EntranceActivity


Android Permissions

a025d66c1e67d834522921d7660ed1fa47da57078df780d63039d2a6460cb3f9

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.FLASHLIGHT

android.permission.CHANGE_CONFIGURATION

getui.permission.GetuiService.com.yimi.book