General

  • Target

    c45653c53ca0639629da3d703c6cdbe2

  • Size

    2.0MB

  • MD5

    c45653c53ca0639629da3d703c6cdbe2

  • SHA1

    f1d4c3e1b994e1b9cb771daf018c8c213c5396c4

  • SHA256

    dfb6612762667e0d66f04b44042e53dcd070955df151ac08cb159a6aabf3c7a7

  • SHA512

    d3b44a36b8e659ad1d9b96a2649cb09d5a9bb495eec4d0f689f5194f1094ad8d9e3bdfb653ba00c755a7589a82637cdbb17ee1a9132e035c9fcc9c4718e16984

  • SSDEEP

    49152:+p2AP3Lh45wXHnxwgsG6dfYxegS2v4x32MUq40e:+N3V62HL6+xeP/e

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 5 IoCs

Files

  • c45653c53ca0639629da3d703c6cdbe2
    .apk android

    yyc.xk

    yyc.xk.adview


  • gdtadv2.jar
    .apk android arch:arm arch:arm64
  • yyc.xk.core.apk
    .apk .ps1 android polyglot

    yyc.xk.core

    yyc.xk.core.seting


  • zcx.zip
    .apk android

    yyc.xk.xk

    yyc.xk.xk.MainActivity


  • yyc.xk.core.apk
    .apk .ps1 android polyglot

    yyc.xk.core

    yyc.xk.core.seting


Android Permissions

c45653c53ca0639629da3d703c6cdbe2

Permissions

android.permission.SET_WALLPAPER

android.permission.READ_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DISABLE_KEYGUARD

android.permission.FOREGROUND_SERVICE