General

  • Target

    1fb7a572ad6a0b16ecf4a2969fa4826d9fb805031ab58b129a3cf09cbe9ad263

  • Size

    23.0MB

  • MD5

    2ca95ec907ef1b8da6bed2fea35ad8cc

  • SHA1

    398b8feb223c8a08ea88812e0fdde2ab46d72e34

  • SHA256

    1fb7a572ad6a0b16ecf4a2969fa4826d9fb805031ab58b129a3cf09cbe9ad263

  • SHA512

    76252733afddca30cdecfde56b2e7f74aec2a0594122992a6fdd9be5c6dcc2ca370c49c24daaa458677dbb4df180a4b765b542d8039dd1d146bf62addf69f5c8

  • SSDEEP

    393216:27F3r2XVtc6fJqrCpkZN+R1dHi0FsXidyk+bds+T8kjTsYAVQ0CKqNeAK3emH:i7eb4rhfsHhiiwk+bds+T8T9pCG

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • 1fb7a572ad6a0b16ecf4a2969fa4826d9fb805031ab58b129a3cf09cbe9ad263
    .apk android arch:arm

    com.yilian.yesapp

    com.yilian.yesapp.modules.login.LoginActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

1fb7a572ad6a0b16ecf4a2969fa4826d9fb805031ab58b129a3cf09cbe9ad263

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.FOREGROUND_SERVICE

com.yilian.yesapp.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

com.yilian.yesapp.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.yilian.yesapp.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

com.huawei.android.launcher.permission.CHANGE_BADGE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

com.yilian.yesapp.permission.PROCESS_PUSH_MSG

com.yilian.yesapp.permission.PUSH_PROVIDER

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA