General

  • Target

    373cb14c76136dbf9cd2dec03a2fb4f24b8d629b63b039febba740355686db15

  • Size

    6.9MB

  • MD5

    03fab170404e9ad1bf05f35af2ec5557

  • SHA1

    e6d98edc42655dc7a942ad55c664f9f227928125

  • SHA256

    373cb14c76136dbf9cd2dec03a2fb4f24b8d629b63b039febba740355686db15

  • SHA512

    667ae6654abf5c6235fd2a95c8d67c77b285f2b89109ccb031a9cc9949554eb23954ed51c42a0f6424b8fe4a038ebc8d550b2c3c4611ef10fbb6610229a45cbe

  • SSDEEP

    98304:9tXt4RTB9JfwCyrnihhpfisj1QsuRGRfIDwmwfW8RSwkGUuJixGNZM+KQjp:DATZ4Cyri9xuR8IDwfWFucxGNmS

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 373cb14c76136dbf9cd2dec03a2fb4f24b8d629b63b039febba740355686db15
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.yy.only.exo2

    com.yy.only.activity.SplashActivity


  • gdtadv2.jar
    .apk android

Android Permissions

373cb14c76136dbf9cd2dec03a2fb4f24b8d629b63b039febba740355686db15

Permissions

com.yy.only.exo2.permission.JPUSH_MESSAGE

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.EXPAND_STATUS_BAR

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

com.android.alarm.permission.SET_ALARM

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FLASHLIGHT

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.BROADCAST_STICKY

android.permission.USE_FINGERPRINT

android.permission.SET_WALLPAPER

android.permission.INTERACT_ACROSS_USERS

android.permission.PACKAGE_USAGE_STATS