Overview

overview

6

Static

static

6

c32790f889...f2.apk

android-9-x86

5

baiduprotect1.apk

android-9-x86

baiduprotect1.apk

android-10-x64

baiduprotect1.apk

android-11-x64

baiduprotect2.apk

android-9-x86

baiduprotect2.apk

android-10-x64

baiduprotect2.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    c32790f88961961ae4750703c739d0f2

  • Size

    2.1MB

  • MD5

    c32790f88961961ae4750703c739d0f2

  • SHA1

    75c13dae8b37cc4268a8a5ead4b5892eec072dff

  • SHA256

    7233ec5c3c944c77bea53ce10dd65ceb96de9d8f5f09cf962be1c77f6d589e6f

  • SHA512

    4e98aaab84f00d3b6bb000fb553c9289b816051d9ed26f626a1a753d4a24160a3df4e51d3de96a4ab3e0d0e2f72a591d6de68e7a97f010779ad1861f52dd95db

  • SSDEEP

    49152:v2bZXjk9cH1L+yQMOAR0bB3qCxOCC6lS79ByY0ZIEae:v2dw9s1LaAGbB6CUuShByD1

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • c32790f88961961ae4750703c739d0f2
    .apk android arch:arm arch:arm64

    com.fcm.xg

    com.e4a.runtime.android.StartActivity


  • baiduprotect1.i
    .apk android
  • baiduprotect2.i
    .apk android

Android Permissions

c32790f88961961ae4750703c739d0f2

Permissions

android.permission.READ_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_CONFIGURATION

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED