General

  • Target

    a1eefdd941342d4ecde4aa328c19a5226da7be958485af152d74b4440707b332

  • Size

    28.1MB

  • MD5

    429a27deae06091beed74490e3e03e0a

  • SHA1

    683885b24eeca627476569237f1da5ba3b3e7f02

  • SHA256

    a1eefdd941342d4ecde4aa328c19a5226da7be958485af152d74b4440707b332

  • SHA512

    fdb8ebeb7985d1d7ec4fc0e08ea1710727ade87c9dae467b7ca927f4241c184a5a592c3516c46a258ed5e08616e0a0c22d9abdc0c94ea5f5211c42291a9ca78b

  • SSDEEP

    786432:G0XVboKFgl2g3J9PLFDz2ewmMhgWl4hGQ:GE16NLFDz2pCn0Q

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 9 IoCs

Files

  • a1eefdd941342d4ecde4aa328c19a5226da7be958485af152d74b4440707b332
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    app.chanye.qd.com.newindustry

    app.chanye.qd.com.newindustry.Splash


  • amap_resource1_0_0.png
    .apk android

    com.example.amapsdkv2

    com.amap.api.maps.offlinemap.OfflineMapActivity


Android Permissions

a1eefdd941342d4ecde4aa328c19a5226da7be958485af152d74b4440707b332

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS