General

  • Target

    4761395d6a09d687f914773363e1b38a573449876308e36d404f8ed4b215393c

  • Size

    28.3MB

  • MD5

    68f8bd0ef2abf9165a03f434808b91d3

  • SHA1

    51d2c69f7865143b737b1c5a87b8290c11200c7a

  • SHA256

    4761395d6a09d687f914773363e1b38a573449876308e36d404f8ed4b215393c

  • SHA512

    94a5ea72f8531404aa380c18972ce9cdf07eaab476845179304db5e2c34b55a601bbbc5cf59c8d00207cccfa7cb7a01d8cc19d59c888f39d50cd73105c21791a

  • SSDEEP

    393216:k7wr2Vi2u0oyKyhWK6LJi2pqXm2gj5ff0IBeL2+gQHdfRM5YMDsKg0egTYAb31pq:gV5u0oyojcGqX+j3dpQdGYAjphMiPWNv

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • 4761395d6a09d687f914773363e1b38a573449876308e36d404f8ed4b215393c
    .apk android arch:arm arch:x86

    com.zhonghuan.quruo

    com.zhonghuan.quruo.activity.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • autonavi_Resource1_1_0.png
    .apk android

    com.amap.api.navi

    com.amap.api.navi.AmapRouteActivity


Android Permissions

4761395d6a09d687f914773363e1b38a573449876308e36d404f8ed4b215393c

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CAMERA

android.permission.REQUEST_INSTALL_PACKAGES

com.zhonghuan.quruo.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.CALL_PHONE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK