General

  • Target

    5abafbd8b6e8286a1316ca45e0a1dab9

  • Size

    21.7MB

  • MD5

    5abafbd8b6e8286a1316ca45e0a1dab9

  • SHA1

    e0eb2aff74797415f1984bf939afdea737adb8b3

  • SHA256

    8669d9fd5fb62afeab1bc3e13751399a510b4e5c145253cfef46fd2fbd781771

  • SHA512

    d5bd161ba2868894d9d044f498b58514e9d048407ca7c4abd333281333b18cf58a432466e4cdfc11352dd525802438cba5020998e957f9d8d1d0fb568e8172a6

  • SSDEEP

    393216:OKmqaLX6JgsmHUSVak6Na/2+eWnPCI46mXI46mpw5SEKWSxtMpwW:OOaWd+nQa/rPn47447253K9xapp

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 3 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 8 IoCs

Files

  • 5abafbd8b6e8286a1316ca45e0a1dab9
    .apk android arch:arm64 arch:arm

    com.front.pandaski

    com.front.pandaski.ui.activity_splash.SplashActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

5abafbd8b6e8286a1316ca45e0a1dab9

Permissions

com.front.pandaski.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA