General

  • Target

    3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a

  • Size

    27.6MB

  • MD5

    6ca4f063b478b96ae93ed890d669ffb2

  • SHA1

    14a71c2419f4fc86e5fd7717225b0eaaf52eb647

  • SHA256

    3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a

  • SHA512

    db02efbe6a1561f76bc23718d47ec09f9cb16fbb514cb30242a501f7d0be359041db332afcbf2512bf911093ed7c84fc506f96f531d8c4f68ead2a6e221545dc

  • SSDEEP

    786432:YIjAmC1C+WVWTJHK586I+BwBjZpbzi5EtnLSqA:PjXyC+WYVHK5pI+BwBjTq5EtLtA

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • 3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.daojia

    com.daojia.DaoJiaApp


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

3afa919c6f248e300211301d7175ddbab30dcc35f101ed53519b977572134d2a

Permissions

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_GPS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.daojia

android.permission.REQUEST_INSTALL_PACKAGES