General

  • Target

    4434a44e8354f25abdec8c38054c5e1f52abb5b8fd4c1e4d31e8b2573e19e042

  • Size

    13.9MB

  • MD5

    b8cec37dc02a6177bca0dd4669b1ac69

  • SHA1

    7486ad52b8bed2ce4442eb69c730730598e34850

  • SHA256

    4434a44e8354f25abdec8c38054c5e1f52abb5b8fd4c1e4d31e8b2573e19e042

  • SHA512

    024e9bdff3dbf69c3f27e845af0a07deb5113140bb17a1bfe79dfb932f57d29dc7c2db30e4626f5a0c5044eb1d268d8a67754994fe151fcdf9cf8d5158c7a714

  • SSDEEP

    393216:2OG2ENl4aSppIQ4y9QpUHJwIanMDzovysphT:vijS+Q4yrHJwIEizoaUT

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 4434a44e8354f25abdec8c38054c5e1f52abb5b8fd4c1e4d31e8b2573e19e042
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

4434a44e8354f25abdec8c38054c5e1f52abb5b8fd4c1e4d31e8b2573e19e042

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS