Overview

overview

8

Static

static

8

e0aebcf5ff...01.apk

 

gdtadv2.apk

 

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0aebcf5ff60de3afaede7d4b552b0e010e81a2c257e9adf1cc29f1add5e1701

  • Size

    20.2MB

  • MD5

    0636f9a6a8411743002b9058cff97990

  • SHA1

    495d7494e16d70fafab2a59b358c8aeed18cd147

  • SHA256

    e0aebcf5ff60de3afaede7d4b552b0e010e81a2c257e9adf1cc29f1add5e1701

  • SHA512

    5724c934b234f7cc1c025b56f62d4931f3b6252d02bc518d0c7536bf2b02f6e1e82788e415a41b7230cc0a1221771573d407cbf679b7b7e66908c8210082fb3f

  • SSDEEP

    393216:DA5yrWZ+zgKbmoAZmDSiCNhEUD4rTLjhFzswrByaBdQk6ID4X0VVa4l:DprWZS5bmoAzimhEUkrjrzsEUIhosVdl

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Requests dangerous framework permissions 11 IoCs

Files

  • e0aebcf5ff60de3afaede7d4b552b0e010e81a2c257e9adf1cc29f1add5e1701
    .apk android arch:arm

    com.nowcasting.activity

    com.nowcasting.activity.SplashActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

e0aebcf5ff60de3afaede7d4b552b0e010e81a2c257e9adf1cc29f1add5e1701

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.REQUEST_INSTALL_PACKAGES

com.nowcasting.activity.permission.MIPUSH_RECEIVE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_COARSE_UPDATES

android.permission.READ_LOGS

com.android.alarm.permission.SET_ALARM

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_CONTACTS

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH