4ea06f609cb0435f8a282d3d3c0e6693-28982bbfec6149779583408faedddd28-f18857282d494c4da0979b53413312b5-1c27a5bc1ef0691c0cceaf299143bcb527c32c01[.]temp[.]zip

General

Target

4ea06f609cb0435f8a282d3d3c0e6693-28982bbfec6149779583408faedddd28-f18857282d494c4da0979b53413312b5-1c27a5bc1ef0691c0cceaf299143bcb527c32c01.temp.zip
Size

10.3MB
MD5

a425efb85b0aa5cb3164f40a8b1309db
SHA1

bdc754b055abeaebc16171d78fb70d1425a7bee4
SHA256

8db69a714f7a4994ffda827f9ad9593a75bd6aff210024ed171a4441db78b3bd
SHA512

1745255980cc35f01db6b464e7b95cfddc4b51072f41c980aa03e1bf6f6ecea61673d8e8826ce6d332cff7b4917a896149fbae3e10613332981ee7612a867738
SSDEEP

196608:AbyVDGlq4g5Qb9ktGU7/nxkNBSz57ue/gPct1a0OKD7x3dQJuqm12FFSkgO5:/Kly5V/xkz0Ngkt1xOKD7wJbm12Fl

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

4ea06f609cb0435f8a282d3d3c0e6693-28982bbfec6149779583408faedddd28-f18857282d494c4da0979b53413312b5-1c27a5bc1ef0691c0cceaf299143bcb527c32c01.temp.zip
.zip

Password: infected
4ea06f609cb0435f8a282d3d3c0e6693-28982bbfec6149779583408faedddd28-f18857282d494c4da0979b53413312b5-1c27a5bc1ef0691c0cceaf299143bcb527c32c01.temp
.apk android arch:arm64 arch:arm

cn.bertsir.floattime

cn.bertsir.floattime.base.SplashActivity

Activities

cn.bertsir.floattime.base.SplashActivity

android.intent.action.MAIN

com.mob.guard.MobTranPullUpActivity

com.mob.open.app_20000

com.mob.guard.MobTranPullLockActivity

com.mob.open.app_lk

Permissions

android.permission.INTERNET
android.permission.REORDER_TASKS
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.QUERY_ALL_PACKAGES
com.asus.msa.SupplementaryDID.ACCESS
android.permission.READ_PHONE_STATE
freemme.permission.msa
android.permission.READ_CONTACTS
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.READ_APP_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonyericsson.home.action.UPDATE_BADGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT

Receivers

Services

com.mob.guard.MobGuardPullUpService

com.mob.intent.MOB_GUARD_SERVICE

com.mob.MobACService

com.mob.service.action.MOB_AC_SERVICE

com.blankj.utilcode.util.MessengerUtils$ServerService

cn.bertsir.floattime.messenger

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote
gdtadv2.jar
.apk android arch:arm64 arch:arm

Sharing

General

Malware Config

Signatures

Files

Password: infected

cn.bertsir.floattime

cn.bertsir.floattime.base.SplashActivity

Activities

cn.bertsir.floattime.base.SplashActivity

com.mob.guard.MobTranPullUpActivity

com.mob.guard.MobTranPullLockActivity

Permissions

Receivers

Services

com.mob.guard.MobGuardPullUpService

com.mob.MobACService

com.blankj.utilcode.util.MessengerUtils$ServerService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService