General

  • Target

    a26245028e01714263688f5b70207c5de67ce261d7bad9c9781a286ac2ca5e87

  • Size

    20.6MB

  • MD5

    738706dde30e16ecf91a064043ad64a0

  • SHA1

    f580ab5f16c67bd570387970c318df837110bedd

  • SHA256

    a26245028e01714263688f5b70207c5de67ce261d7bad9c9781a286ac2ca5e87

  • SHA512

    b70f802757662dd7cdd449bd5428476b37303c3cb41fd95ac7f69cfe2b1d8684a137ac16f5781fa655c4351542997c0bfc02a9e69998e9dc32b71e35335934d3

  • SSDEEP

    393216:gcnHHCMmwxuWB2VfmjE6+n2iw2lweEQTeOvqPSbp7eCbQX7QTpLwOyLBiXq/vUtX:g2mwxwVfmH+nllweEQTZLF5sXyOv8gB0

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs

Files

  • a26245028e01714263688f5b70207c5de67ce261d7bad9c9781a286ac2ca5e87
    .apk android arch:arm arch:mips arch:x86

    com.nibiru.play

    com.nibiru.ui.SplashActivity


  • alipay_msp.apk
    .apk android arch:arm arch:x86

    com.alipay.android.app

    com.alipay.android.app.pay.MainActivity


  • support_event23.jar
    .apk android
  • support_event40.jar
    .apk android
  • support_event41.jar
    .apk android

Android Permissions

a26245028e01714263688f5b70207c5de67ce261d7bad9c9781a286ac2ca5e87

Permissions

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

com.nibiru.support.eventservice

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.hardware.usb.host

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

nibiru.permission.GAME_DETAIL

nibiru.permission.LOCAL_GAME

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE