General

  • Target

    抓包-Postern-3.1.2.apk

  • Size

    4.3MB

  • MD5

    b9f0f294b21ff5af19f70d80505e00e5

  • SHA1

    655fa22404ca52639742a0ef1eedf46d817ab5b7

  • SHA256

    7492bb19a8fc741fb6750e12ad8f5149c18e6a654ca622398fd164cc86f98e4f

  • SHA512

    e2a59dcae872287f7cd15e645d533c063ba8d50f81c06c0ebcad33e911382fd12b73ca89ed9623ad12dd0c09dffd42502d75ebf03e13d2e0237f649d1c750a99

  • SSDEEP

    98304:63zW1N/Z1siSn6R1pLXpZN4Xob+QAFb6sfquugqq05hW5GCvlJD71O:63zW1NB1sDnOhvb7AcDfKGCvlJVO

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs

Files

  • 抓包-Postern-3.1.2.apk
    .apk android arch:arm arch:x86

    com.tunnelworkshop.postern

    .PosternMain


Android Permissions

抓包-Postern-3.1.2.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE