General

  • Target

    63a5bd8c94472efe03d4a354a14a75f0

  • Size

    29.8MB

  • MD5

    63a5bd8c94472efe03d4a354a14a75f0

  • SHA1

    5b836742378e2af9bb929ad5d2a3e733c8f5156e

  • SHA256

    cfe086fa6664b956a636afce64667e736c7ce8d6b02daa9fdaf91c7dde0978ee

  • SHA512

    2f7c632cbcab883a3b7d52cbdd38bcca2abb5891d1c404922486265aa9d64f84611a7081e5f3d585cd9a0eefdb6dfb72ad685a155f18d365f92b87e54a93a6d3

  • SSDEEP

    786432:QwSDOdxRI8wgKHR2Z+ZQOksnW0Ffc+ZQnksnW0FfiRsEjKYxW:QwSDOdxRYgnwZrvn/ZevnesH

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 3 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 13 IoCs

Files

  • 63a5bd8c94472efe03d4a354a14a75f0
    .apk android arch:arm arch:x86

    app.android.wenzimao

    app.eeui.playground.WelcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

63a5bd8c94472efe03d4a354a14a75f0

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.READ_CALENDAR

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS