com.superman.app.flybook.wxapi.WXEntryActivity
android.intent.action.VIEW
com.superman.app.flybook.activity.SplashActivity
android.intent.action.MAIN
General
-
Target
0868cb8a65322113e6b4effb5079221e3da6e8d80bc2d3e2127f25c8ce22754a
-
Size
22.5MB
-
MD5
6f443be4f8dd73492ffc0ca62879c81c
-
SHA1
73ae8ee9329910af8ceb53b3a788c4e0b5de3b92
-
SHA256
0868cb8a65322113e6b4effb5079221e3da6e8d80bc2d3e2127f25c8ce22754a
-
SHA512
6426fd8fcbd28db227efe113755f322b31c1dc6a090b89dd348c25e764a92b108c2ab6f2a54d99ea363f5f90cc6062514b5f6e3e952e643bc7f598647773f3ab
-
SSDEEP
393216:n78meO2zi7H4k4zPeV6hOHhyUrSTmxF0cljSF0cljNjEQKIN/31FjDxSjRQ:ImeOUif4z2sYUU3xbljSbljNg5s/3nXj
Score
8/10
Malware Config
Signatures
-
Patched UPX-packed file 5 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Requests dangerous framework permissions 7 IoCs
Files
-
0868cb8a65322113e6b4effb5079221e3da6e8d80bc2d3e2127f25c8ce22754a
com.superman.app.flybook
com.superman.app.flybook.activity.SplashActivity
-
amap_resource1_0_0.png
com.amap.api.map3d
Android Permissions
0868cb8a65322113e6b4effb5079221e3da6e8d80bc2d3e2127f25c8ce22754a
Permissions
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
com.superman.app.flybook.permission.MIPUSH_RECEIVE