General

  • Target

    dbd0810d2835d7fc03b0fb57b6f05308fe661e8e111638ef1198cb73748b45fd

  • Size

    7.9MB

  • MD5

    c121c63f9ae78b81a08a932e86a618f2

  • SHA1

    a3868717f34618ed0bcda9e56cda53cf1d8c9088

  • SHA256

    dbd0810d2835d7fc03b0fb57b6f05308fe661e8e111638ef1198cb73748b45fd

  • SHA512

    5446d2ec1dddeb37f1a537b275f547f604147fd8a79c87eee8ac68bf717b0bae4ee63bf94d39491f3b5e9ac859be8255892c59642bb924077dda2b610cf913b5

  • SSDEEP

    196608:uA9uBgshj9/tp2OcJovTxSOAHx7q/H/xWHmpXdxJgOB:huucAPovNMHx7q/fxWHWXrJgOB

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • dbd0810d2835d7fc03b0fb57b6f05308fe661e8e111638ef1198cb73748b45fd
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.vpn.feifan10

    com.vm.shadowsocks.myactivity.StartADActivity


  • bp.db
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    cn.bmob.knowledge

    .wxapi.BmobActivity


  • gdtadv2.jar
    .apk android

Android Permissions

dbd0810d2835d7fc03b0fb57b6f05308fe661e8e111638ef1198cb73748b45fd

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE