General

  • Target

    2c04351bf4d16f6a6d66bcbb83adf348f45247b40acf4c91e311abd0a7054fd6

  • Size

    15.1MB

  • MD5

    86a0a86452aa7d517122e4b6e8f775fb

  • SHA1

    e5e0f5a6c4690ac121b1f2c2e4a52cd979623ad6

  • SHA256

    2c04351bf4d16f6a6d66bcbb83adf348f45247b40acf4c91e311abd0a7054fd6

  • SHA512

    bbeb698929249c2ff719db97ab2949c94595c0f4601064add782f606452ad4b7d38c482c9d86efb16bbc4e4187c6a138065bc8cc0e493d490b7e09a241afb20a

  • SSDEEP

    393216:sHnZi7B3+YHdHztrYAgkgt0433JOLFnz9pJ:sHZcd+YHdhgl2q3JOLFnz9P

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 20 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 6 IoCs

Files

  • 2c04351bf4d16f6a6d66bcbb83adf348f45247b40acf4c91e311abd0a7054fd6
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    org.fjea.earthquakewarn

    org.fjea.earthquakewarn.ui.activity.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.example.amapsdkv2

    com.amap.api.maps.offlinemap.OfflineMapActivity


Android Permissions

2c04351bf4d16f6a6d66bcbb83adf348f45247b40acf4c91e311abd0a7054fd6

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH