General

  • Target

    bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55

  • Size

    27.6MB

  • MD5

    083478ca7ec8f00d969e290dd3246851

  • SHA1

    44374967a611d1154671c7e4489453e37f7b16f7

  • SHA256

    bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55

  • SHA512

    f500540aa1a09dd5bcff03f2b83732156cf0fbb515a9234b7486031ca77a5c0678db9ce868d66b0076e12539995ee11c085f104dc687bd78143512cda01f3cf9

  • SSDEEP

    786432:GOammX/jwEqOvLLLPE47G470TF1vxUR+RREdAqbxmrUFHt+M:5ammbwErvLLbyBEzCqbAIL

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 4 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55
    .apk android arch:arm64 arch:arm arch:x86

    com.yyq.annie.jieyun

    com.yyq.annie.jieyun.HomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

bfa95d0f92a057715f17a91ce949498a05f03022cc15888fcf34f94661be2e55

Permissions

com.yyq.annie.jieyun.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE