Overview

overview

10

Static

static

10

2825d07c0c...18.apk

android-9-x86

8

2825d07c0c...18.apk

android-11-x64

8

vivouniona...ed.apk

android-9-x86

7

vivounionsdk.apk

android-9-x86

1

vivounionsdk.apk

android-10-x64

1

vivounionsdk.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2825d07c0c22ce7163b02e33383d3ff3_JaffaCakes118

  • Size

    31.7MB

  • MD5

    2825d07c0c22ce7163b02e33383d3ff3

  • SHA1

    682ac969938da916aa2ed75a729a1e6973c0601c

  • SHA256

    10eff7323ac2e20362ed7595ab089bb8c13079565991cd29e579563e5939bbf0

  • SHA512

    1c7bd56af0fb75fb0cf5185112f1097f4cdb4b5e65d91f010d9ba212f3808a8cb57bb8bb21112848215134a9fa2c4bb3781e4b0b3b065758274ba75e504b3d2c

  • SSDEEP

    786432:uNKDyd9wNtfzhsfsZ1AToR7XVp8ZWy+p480NpDv/ZdH3uggw+DsKAZrD:ucDcfsZiTS7VpmH+p48qXODmP

Score
10/10
privateloader

Malware Config

Signatures

  • Privateloader family
    privateloader
  • Requests dangerous framework permissions 6 IoCs

Files

  • 2825d07c0c22ce7163b02e33383d3ff3_JaffaCakes118
    .apk android arch:arm arch:x86

    com.hlys.ygsj.nearme.vivo

    com.tendcloud.wd.UWD


  • vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua
    .apk android arch:arm

    com.vivo.sdkplugin

    com.vivo.sdkplugin.activity.LoginActivity


  • vivounionsdk.res
    .apk android

    com.vivo.sdkplugin

    com.vivo.unionsdk.ui.UnionActivity


Android Permissions

2825d07c0c22ce7163b02e33383d3ff3_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

vivo.game.permission.OPEN_JUMP_INTENTS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION