General

  • Target

    2285ed503930567744efc9615a0f31e8ddc7a835e414006e7c10e04e28bdf23c

  • Size

    12.0MB

  • MD5

    57716941034ce06fc179ced766415666

  • SHA1

    b608ccf324739fcda299535ba067268ec4af6421

  • SHA256

    2285ed503930567744efc9615a0f31e8ddc7a835e414006e7c10e04e28bdf23c

  • SHA512

    e6989c3029188fc292e7db003be9680aee3b8c17ae200ca917387db5cbc5de1e8a9eeafbac01e304565435f8deefc025f5f0646aacb0fb511b2388354ac8a98b

  • SSDEEP

    393216:QuQ7y+TdHisfDUa5BxUz0W84dOxoPm6EYdQiO:zr+TZDUa5Yz0W84Mxo1O

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 7 IoCs

Files

  • 2285ed503930567744efc9615a0f31e8ddc7a835e414006e7c10e04e28bdf23c
    .apk android arch:arm

    com.bl.kdj.app

    com.bl.kdj.app.activity.SplashActivity


Android Permissions

2285ed503930567744efc9615a0f31e8ddc7a835e414006e7c10e04e28bdf23c

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.INTERNET

android.hardware.sensor.accelerometer

android.permission.VIBRATE

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

android.permission.ACCESS_MOCK_LOCATION

android.permission.CONTROL_LOCATION_UPDATES

android.permission.MODIFY_AUDIO_SETTINGS

cn.com.bailian.provider.openapi.ACCESS_PERSSION

android.permission.BLUETOOTH

android.permission.CALL_PHONE

android.permission.BLUETOOTH_ADMIN

cc.permission.cn.com.bl.bailian.bailianmobile.libs.component