General

  • Target

    b994fea58de2fc0cda9e25568c275e0bc53cea1979db8534619ac0f0a3e36aa1

  • Size

    12.9MB

  • MD5

    357f5e836216aea7cb29e0aa742b0792

  • SHA1

    1163c1bb7df372828b9167b4d4f1dbd934ab7f7b

  • SHA256

    b994fea58de2fc0cda9e25568c275e0bc53cea1979db8534619ac0f0a3e36aa1

  • SHA512

    0ab9368f20a56a04172c926ee5786b59996531a49b6461e3db38923a5d2dcb5bdb8bda3a8ee4b12364eef022b53f505ee6b8d3d52312e45fc34465babee7d8b5

  • SSDEEP

    393216:0dAHTGJZ53uHAqh00D4y7WqHJw3zpzo5y0kC:lHTUoHR00D4yxHJw3dzok6

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • b994fea58de2fc0cda9e25568c275e0bc53cea1979db8534619ac0f0a3e36aa1
    .apk android arch:arm arch:x86

    com.lushi.zhuanbao

    com.tieniu.lezhuan.start.ui.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

b994fea58de2fc0cda9e25568c275e0bc53cea1979db8534619ac0f0a3e36aa1

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.FOREGROUND_SERVICE

android.permission.INSTANT_APP_FOREGROUND_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.asus.msa.SupplementaryDID.ACCESS

android.permission.CHANGE_WIFI_STATE

getui.permission.GetuiService.com.lushi.zhuanbao

android.permission.READ_SETTINGS