General

  • Target

    5ddb5747f35a42820ff9143bc82f45e18c07229a9bddf34d6b14d07f460c7b7b

  • Size

    25.2MB

  • MD5

    df3e05719bac9d88b1769c026343607e

  • SHA1

    2385f3f52959eb313968fe21bfedc5edb77faf4e

  • SHA256

    5ddb5747f35a42820ff9143bc82f45e18c07229a9bddf34d6b14d07f460c7b7b

  • SHA512

    f36e669aed0fa57e2b79ddfafdf2bb0dc4332a81e1ac39c91c88489ac978b4015de93ba495d68d5864c00ff13c7f9be7fb8a6cdefe6fd420c7225544434e5924

  • SSDEEP

    393216:Y7xPMccuuZzqrJ83MlPQpevtuWA9Gc5Mu1ZQ3u1ZQaEUncYjKoAIWyGpSdpDW75h:kEFGOc0evtun9LM+ZQ3+ZQHEjKjdzYFc

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • 5ddb5747f35a42820ff9143bc82f45e18c07229a9bddf34d6b14d07f460c7b7b
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    io.dcloud.H57FC2AF8

    com.lm.romaManager.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

5ddb5747f35a42820ff9143bc82f45e18c07229a9bddf34d6b14d07f460c7b7b

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE