General

  • Target

    7d04ff63ca52a588d7b7a91ad30d38a0ca4fc1d5840572d782fbe89abf5f37ec

  • Size

    8.4MB

  • MD5

    2c6f6cd668b178b43f9c4b1e3388714f

  • SHA1

    780d8446f4c3fa970394b8ad7194d764d7f89fdb

  • SHA256

    7d04ff63ca52a588d7b7a91ad30d38a0ca4fc1d5840572d782fbe89abf5f37ec

  • SHA512

    f0cc4548993d4489b27e7a43888505052d6aa8a67a9adf83e66475a704279390685f960ff0f1dca109729bc012a70a3c50fc70d8156d35f15d6e4293af6419f1

  • SSDEEP

    196608:tgUL5RifIvuP3xe81uy4w3spxFbFGujYiqZldx2aLrjAdvjE4vOKxoTVZ:tgmbvUMlwcLFbFJjYvJx2aLrjAdvHOKo

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 7d04ff63ca52a588d7b7a91ad30d38a0ca4fc1d5840572d782fbe89abf5f37ec
    .apk .ps1 android arch:arm arch:x86 polyglot

    com.hxyh.wxmp3

    com.hxyh.wxmp3.StartActivity


  • gdtadv2.jar
    .apk android arch:arm64 arch:arm

Android Permissions

7d04ff63ca52a588d7b7a91ad30d38a0ca4fc1d5840572d782fbe89abf5f37ec

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.REORDER_TASKS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES