General

  • Target

    b69dfcbde5a5e706034d0d5e8f4e9a4d

  • Size

    25.3MB

  • MD5

    b69dfcbde5a5e706034d0d5e8f4e9a4d

  • SHA1

    d3bb89fed9798f4349e6cf21a56f0c3241aff8d6

  • SHA256

    d2f4b5ca663e26e316ec8e3c5a0de0e1fb465018b6542e81420ba5af3d4e7016

  • SHA512

    649f3b9c5a78481c5f9a5c0e45b069a1b85de39bb3cd21da2b1d42e1af2bd07c1ad8c1554c0f84d926fd2eabde75d42237e9d4b4c5940ff27d542eeff878f686

  • SSDEEP

    786432:jLInwMuYjFo4nzZV6meOHPymUobljiqg5jFV:PI6gZwmeO3iqg5

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 14 IoCs

Files

  • b69dfcbde5a5e706034d0d5e8f4e9a4d
    .apk android arch:arm arch:x86

    com.xingzhi.jianzhi

    io.dcloud.PandoraEntry


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

b69dfcbde5a5e706034d0d5e8f4e9a4d

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_EXTERNAL_STORAGE

com.asus.msa.SupplementaryDID.ACCESS

getui.permission.GetuiService.com.xingzhi.jianzhi

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.huawei.android.launcher.permission.CHANGE_BADGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.yulong.android.launcher3.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS