General

  • Target

    3a2ebc2ff3b67115aacdd82c6b09d9b196372718b62f85f5de2bde52f3f6269b

  • Size

    17.5MB

  • MD5

    892d324e2e0fa0d1435a99bf042c0d1c

  • SHA1

    7689d323205a50fecfd34b88f9bfb6701874b99a

  • SHA256

    3a2ebc2ff3b67115aacdd82c6b09d9b196372718b62f85f5de2bde52f3f6269b

  • SHA512

    d2e991e802a1c3b9de8ebb9aaf7083dc9a46e34cb6c416b7e502ad5ee9b7f797be7451c530cbe1b22c6688279469b0eeded62ab59fa89e32e6fa64f3aebe58d5

  • SSDEEP

    393216:xTyzmeOy4TMkAF0cljogU8F0cljEnmsMclBoygAj:cmeOvAbljogU8bljEmsqygC

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 9 IoCs

Files

  • 3a2ebc2ff3b67115aacdd82c6b09d9b196372718b62f85f5de2bde52f3f6269b
    .apk android arch:arm

    com.zcys.aq

    com.zcys.yjy.sys.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

3a2ebc2ff3b67115aacdd82c6b09d9b196372718b62f85f5de2bde52f3f6269b

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CAMERA

android.permission.READ_LOGS

android.permission.READ_EXTERNAL_STORAGE

com.zcys.aq.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS