General

  • Target

    3aef5b54bf21cc891b29dbc7340603a723b693ad00f82b5076e921c498d3539d

  • Size

    12.7MB

  • MD5

    2f3c29c9b91f6228b0b1477981cd1159

  • SHA1

    e783bc6c4910bd851e714686fa6664c87429dd1b

  • SHA256

    3aef5b54bf21cc891b29dbc7340603a723b693ad00f82b5076e921c498d3539d

  • SHA512

    ed84910b0d354de0df660844b2d9cf7ec4dd3755e0b8d76edde6448a35ef9ed5f27ab7ef0c91a072f57790b5eb543c123c31164cc7dc113bd079d1740393414b

  • SSDEEP

    393216:QYGD0NqjRrOeZjGx+yQQWqHJw3zpzoty0cTh:Ls0UNaeZ6x+yhHJw3dzowJh

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 3aef5b54bf21cc891b29dbc7340603a723b693ad00f82b5076e921c498d3539d
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

3aef5b54bf21cc891b29dbc7340603a723b693ad00f82b5076e921c498d3539d

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS