General

  • Target

    钉钉助手.apk

  • Size

    2.6MB

  • MD5

    d11022fe4ed398d1ef62bbb740e0a055

  • SHA1

    947039ca6a6cbfe9d41b5633eecf71660037a079

  • SHA256

    77df004642389e2bb057db54205d1f77f807e6026b653e9c7b41223c14113fa0

  • SHA512

    b3d9bfb335339375f7a6f4b5c2c0ffea180dde84d8cbfa6a7473e7401a51d0a536b92f40f5e2911046d2346b2f27dd4c625a0fbbc1248eed9ef12239777ed77c

  • SSDEEP

    49152:EC0cLpzns8oshqM09A/+WbQBN8Wh2SNuKh85zzjiV5qJt:EMVCscM6ObQBNd34K2Qct

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • 钉钉助手.apk
    .apk android

    com.gy.rimet

    com.sky.xposed.rimet.ui.activity.MainActivity


  • kZtSENALIz
    .apk android

    com.cloudinject.resplugin

    com.cloudinject.core.app.MainActivity


Android Permissions

钉钉助手.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.BIND_VPN_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.QUERY_ALL_PACKAGES