General

  • Target

    0441fa6b09480ea4b1d0854c5a8a9c82783974f6766441802c10eb1586933bc4

  • Size

    12.9MB

  • MD5

    4da154d5165438888a21e595c71594a7

  • SHA1

    2ced576bbde8f72d788a4e374ab85995a6ca8db9

  • SHA256

    0441fa6b09480ea4b1d0854c5a8a9c82783974f6766441802c10eb1586933bc4

  • SHA512

    a08e0b0726e79d194ccb0701a33d9972f4bdb630023c89ab70a8e637db1830a374d7b2123bc24d715c1f5f91917288554e4a63ccf2743a424dfde1351b006417

  • SSDEEP

    393216:WsGJZ53uHAqh00D4y7WqHJw3zpzo1Ry0MUR:WsUoHR00D4yxHJw3dzom6

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 0441fa6b09480ea4b1d0854c5a8a9c82783974f6766441802c10eb1586933bc4
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

0441fa6b09480ea4b1d0854c5a8a9c82783974f6766441802c10eb1586933bc4

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS