General

  • Target

    20230919_2468231ed1875bf34d4b729d4e31f595_sign_v1 (1).apk

  • Size

    21.9MB

  • MD5

    a17e00104f548585c198154286dac5bf

  • SHA1

    2d4c0164768275b16ab78bc3926dba9e207d0a6c

  • SHA256

    d5cdeb64dc627e4e92f9c8f9248d70b494585a2b67b301223c980e19ec238719

  • SHA512

    a684ddab471482de4064e853196a62ddfbb69e50b30e85e761e6a9f9db3e2e7ce13c37f1d35eb04bb74f289134d9f8ef1d6ab42f7af8affdae1f48eabf5444f6

  • SSDEEP

    393216:OlbfhKSFxgnwej8B2MI7yab+QQ4HG3Lyr2NE8kXPC2yY8CxUrXRpN:sTYOxgwaO2MSyPQQMEeadrY8Carhp

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 6 IoCs
  • Requests dangerous framework permissions 19 IoCs

Files

  • 20230919_2468231ed1875bf34d4b729d4e31f595_sign_v1 (1).apk
    .apk android arch:arm64 arch:arm

    Password: spf200

    com.tencent.android.qqdownloader

    com.tencent.pangu.link.SplashActivity


  • EmptyRes1.apk
    .apk android

    Password: spf200

    com.midas.emptyresfirst


  • QRomCommand.jar
    .apk android

    Password: spf200

Android Permissions

20230919_2468231ed1875bf34d4b729d4e31f595_sign_v1 (1).apk

Permissions

com.android.permission.GET_INSTALLED_APPS

com.tencent.android.qqdownloader.component_security

com.tencent.android.qqdownloader.permission.XGPUSH_RECEIVE

com.tencent.android.qqdownloader.theme.permission

oicq.wlogin_sdk.permission.WloginProvider.READ

oicq.wlogin_sdk.permission.WloginProvider.WRITE

com.qq.AppService.permission.out.IPC_SERVICE

com.qq.superuser.READ_PERMISSION

com.qq.AppService.permission.out.CACHE_READ_PERMISSION

com.qq.AppService.permission.out.CACHE_WRITE_PERMISSION

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

cn.nubia.launcher.permission.READ_SETTINGS

cn.nubia.launcher.permission.WRITE_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.BROADCAST_STICKY

android.permission.BATTERY_STATS

android.permission.INTERNET

android.permission.SET_WALLPAPER

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.RESTART_PACKAGES

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_COARSE_LOCATION

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

com.tencent.permission.VIRUS_SCAN