1ad28b10-30cd-4122-adfa-66165f9a65b7[.]apk

General

Target
1ad28b10-30cd-4122-adfa-66165f9a65b7.apk
Size 8.1MB
Sample240522-ntynwade4v
SHA256 ffa1ef4565c6733913fbb0937cb7e1359854ced39e7d4bb5ecc48dba8d163fcb
MD5 033b0f408094646d9f0c4810d3d4170c
SHA1 862857c5a2e4a791f11ad93b7f5dd4422e575776
SHA512 3d83350c313113df686d256e87073ac2ba47265fc501ff69a56179930aa42fe56011226154cfffbd9b29605426fe598479f579a64b115a7f0bf6d0bbf42cbe8b
SSDEEP 98304:dCu+4ES+iVVStgNxy3m/UQGmmvWvbPcwoE/yhigmIySpJNnq5zwe64R6Q7AWuBMO:FVS2XU8Uoj+E/yogySJr+ZANMTeA+tN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk

.apk 8.1MB

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk

SHA256 ffa1ef4565c6733913fbb0937cb7e1359854ced39e7d4bb5ecc48dba8d163fcb
MD5 033b0f408094646d9f0c4810d3d4170c
SHA1 862857c5a2e4a791f11ad93b7f5dd4422e575776
SHA512 3d83350c313113df686d256e87073ac2ba47265fc501ff69a56179930aa42fe56011226154cfffbd9b29605426fe598479f579a64b115a7f0bf6d0bbf42cbe8b
SSDEEP 98304:dCu+4ES+iVVStgNxy3m/UQGmmvWvbPcwoE/yhigmIySpJNnq5zwe64R6Q7AWuBMO:FVS2XU8Uoj+E/yogySJr+ZANMTeA+tN
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:arm64

com.loafish.ckc

Android Permissions

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_PRIVILEGED

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

android.permission.READ_EXTERNAL_STORAGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

com.loafish.ckc.permission.GYRECEIVER

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.payment.weixin.WXPayProcessMeadiatorActivity

com.loafish.ckc.wxapi.WXPayEntryActivity

com.loafish.ckc.wxapi.WXEntryActivity

com.g.gysdk.view.ELoginActivity

com.g.gysdk.view.ELoginWebActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

io.dcloud.share.mm.WXShareProcessMeadiatorActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.ads.activity.WebViewActivity

io.dcloud.ads.base.service.DownloadService

com.getui.gtc.GtcService

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.ads.base.service.provider.DCloudAdFileProvider

com.getui.gtc.base.GtcProvider

Sharing

General

Malware Config

Signatures

File Explorer

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.feature.payment.weixin.WXPayProcessMeadiatorActivity

com.loafish.ckc.wxapi.WXPayEntryActivity

com.loafish.ckc.wxapi.WXEntryActivity

com.g.gysdk.view.ELoginActivity

com.g.gysdk.view.ELoginWebActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

io.dcloud.share.mm.WXShareProcessMeadiatorActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.WebAppActivity

io.dcloud.ProcessMediator

io.dcloud.WebviewActivity

com.dmcbig.mediapicker.PickerActivity

com.dmcbig.mediapicker.PreviewActivity

io.dcloud.feature.gallery.imageedit.IMGEditActivity

io.dcloud.ads.activity.WebViewActivity

io.dcloud.ads.base.service.DownloadService

com.getui.gtc.GtcService

io.dcloud.common.adapter.io.DownloadReceiver

io.dcloud.common.util.DCloud_FileProvider

io.dcloud.ads.base.service.provider.DCloudAdFileProvider

com.getui.gtc.base.GtcProvider

Android Permissions

1ad28b10-30cd-4122-adfa-66165f9a65b7.apk