General

  • Target

    21177bd22e2c79bef4ac3429d57536744931a16219595c2ea364b699e193cd8e

  • Size

    17.5MB

  • MD5

    f8b9f6bbe0fd1ecb297c44972e9fb461

  • SHA1

    d2e1a385be66161905c75afc50bb955859789604

  • SHA256

    21177bd22e2c79bef4ac3429d57536744931a16219595c2ea364b699e193cd8e

  • SHA512

    670c740bef60e6177bb52b0390849a8194c7ef05549cb91f69254c281b548b98c05939d80e682902f85066a9c4ee53a599f8dce702e40acf39c63cb0209bf1f0

  • SSDEEP

    393216:72dmbZydJJa7AD4iRFthFXvu1MJMUSzXAi4Gp0xS5Y:72o1ydJJ3/t4Djt4GpWH

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • 21177bd22e2c79bef4ac3429d57536744931a16219595c2ea364b699e193cd8e
    .apk android arch:arm

    com.ziipin.softkeyboard

    com.ziipin.setting.WelcomeActivity


  • market.mp3
    .apk android arch:arm

    com.badam.softcenter

    com.badam.softcenter.common.ui.SplashActivity


  • ukijtut.mp3
    .apk android

    com.monotype.android.font.wuhuaguo_b03f3e648a91e77eb968df2480cc3bd9


  • ukijtuz.mp3
    .apk android

    com.monotype.android.font.wuhuaguo_bd5f649a9c58cacbfd012df769384d68


  • ziipinmobile_c
    .apk android

Android Permissions

21177bd22e2c79bef4ac3429d57536744931a16219595c2ea364b699e193cd8e

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER

com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

com.mozillaonline.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

com.mozillaonline.permission.DOWNLOAD_WITHOUT_NOTIFICATION

com.mozillaonline.permission.ACCESS_ALL_DOWNLOADS

android.permission.GET_PACKAGE_SIZE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.REORDER_TASKS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.READ_CONTACTS