General

  • Target

    1e784e08a32c53dc588b500bbee5147c.bin

  • Size

    18.1MB

  • MD5

    1e784e08a32c53dc588b500bbee5147c

  • SHA1

    342d3ae0dd5a3343a97a1393ae55898c72a72a12

  • SHA256

    f024ac3ab345333af12fdfdefb136edadd5a2fc479c75d42adb6cc493b5d397e

  • SHA512

    623be5c50bf7d1c838832e1bb1e543761dbfa9ca51c7206b94f19129210848082d6e1cd563a69ed8c45ede1f3346442e79af3b4f8f24ca5a2114e93e1371e26e

  • SSDEEP

    393216:Sch2659V6Ogo4V8Dwj8Tk487XfxVOiVSwoMElAXNk2+yYIvF:Rz59V67VEg7fxVOQFX

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • 1e784e08a32c53dc588b500bbee5147c.bin
    .apk android arch:arm arch:x86

    Password: infected

    org.qm.zhen

    .MainActivity


  • __pasys_remote_banner.jar
    .apk android

    Password: infected

Android Permissions

1e784e08a32c53dc588b500bbee5147c.bin

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.BROADCAST_STICKY