General

  • Target

    夜光云Android.apk

  • Size

    18.9MB

  • MD5

    7ad19a9962cb74727c109df85bc15434

  • SHA1

    415c0c9f16957fa6bddec1272759e4a94f91c1a8

  • SHA256

    50219c0ded9e1646a751bba4a8f41bd7cffb9af05c3eb84237974b45b6d30de9

  • SHA512

    3d4eece44a9ab3649d3562b15986d7127ae032e7767a2413df5f60e757e70a3f094efede0893db36d88cb7a809e9c66f5b2f446ca54e4265fa41fc9379862583

  • SSDEEP

    393216:VScxuOGCYvHeuhQgQoSvae8TYfGCNPOQAwbj6BwsuAiUXYdgXv8gauHj:VSRjvHeuaySvnpfh2ZGSXz/vj

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 1 IoCs

Files

  • 夜光云Android.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.rocket.ef792a2e0dbdf51

    com.github.kr328.clash.SplashActivity


Android Permissions

夜光云Android.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.rocket.ef792a2e0dbdf51.permission.RECEIVE_BROADCASTS