General

  • Target

    060d1fcbc8bf572aa9566a41e93494f002a2e58fa638dccd7564aa8c903bac48

  • Size

    27.7MB

  • MD5

    6fe56811fc0d101de394d6613ccd5cc9

  • SHA1

    cd2b0e1324f512f65ab83306bdfb0939aada6447

  • SHA256

    060d1fcbc8bf572aa9566a41e93494f002a2e58fa638dccd7564aa8c903bac48

  • SHA512

    48926f6f2e8ad17601ad3134f26185d4c331163276c61abe59807acd898e948bebb92a40bf31326d7859f262f589a474665405b1a8a0efe042f78fd9b094f88b

  • SSDEEP

    786432:N+9WZQow/ME3eXyGoTGnxZFARBE2NkoGyqj:mW+owE4eCGqUZFARBtkn1j

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • 060d1fcbc8bf572aa9566a41e93494f002a2e58fa638dccd7564aa8c903bac48
    .apk android arch:arm

    com.bestvet.app.chongwuyishi

    com.uzmap.pkg.EntranceActivity


  • UPPayPluginEx.apk
    .apk android arch:x64 arch:arm64 arch:arm arch:mips arch:x86

    com.unionpay.uppay

    com.unionpay.uppay.PayActivity


Android Permissions

060d1fcbc8bf572aa9566a41e93494f002a2e58fa638dccd7564aa8c903bac48

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECORD_AUDIO

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.READ_LOGS

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_MEDIA_STORAGE

com.bestvet.app.chongwuyishi.permission.JPUSH_MESSAGE

android.permission.RECORD_VIDEO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS