General

  • Target

    c41d2c036d0e047b39a58ecc57a2d986e95af21c969a1a2e7d3201cb0a9b5672

  • Size

    26.3MB

  • MD5

    d61959f52f677620b827ac8980ee0a9d

  • SHA1

    6d4f9fe325c51251b6129607f3d75eb6c87b588d

  • SHA256

    c41d2c036d0e047b39a58ecc57a2d986e95af21c969a1a2e7d3201cb0a9b5672

  • SHA512

    fb583f83c4a2600bdc5914760995c30a9c85306a13c03dd529c0b040a8de3919fa1a60bdf799fd62ead74f6729b67f6fadb505a2f4c436756ab102251113a0a2

  • SSDEEP

    393216:S15csSRhaLS1rJveY8wrxQpv5Rtmv5RiFzfSlGyUNdzhDxj6cHI5k6N5hA3H9uX5:+tSRhZnGYKptmOk0hdUFhk9cv

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 5 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 10 IoCs

Files

  • c41d2c036d0e047b39a58ecc57a2d986e95af21c969a1a2e7d3201cb0a9b5672
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.bdw.jydd

    com.bdw.jydd.login.view.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

c41d2c036d0e047b39a58ecc57a2d986e95af21c969a1a2e7d3201cb0a9b5672

Permissions

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.meizu.flyme.push.permission.RECEIVE

com.bdw.jydd.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.bdw.jydd.permission.C2D_MESSAGE

android.permission.GET_TASKS

android.permission.VIBRATE

com.bdw.jydd.permission.MIPUSH_RECEIVE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_LOGS