General

  • Target

    38ac5c33f29c4b564622c00e8d736f589ad8143ab3ef7dfce7fc2948209346d4

  • Size

    10.8MB

  • MD5

    6a38f9bca6eb67d89d9185659fb44fc3

  • SHA1

    d0a07bd63a26f648fbec8b88c66965cda34e9c07

  • SHA256

    38ac5c33f29c4b564622c00e8d736f589ad8143ab3ef7dfce7fc2948209346d4

  • SHA512

    ebe9868eae3c99b1b5363128b26daaa69fc5a1a3a102606862086249da89b4b286c1b3a41dcb0d774dc4d50d3cef2f1f098b2aecdf22f10a9fb4f8574381eff7

  • SSDEEP

    196608:0GmIP11/YoQBbcmhthdiM9KvA2ogzJQQLjCkYTcW2/B9SA4DgFsf4jp:7mIPneQWsw2WQ3YTcW2/B8fIp

Score
10/10

Malware Config

Extracted

Family

joker

C2

http://ask.dcloud.net.cn/article/285

http://ofloc.map.baidu.com/offline_loc

http://open.weixin.qq.com/connect/sdk/qrconnect?appid=%s&noncestr=%s&timestamp=%s&scope=%s&signature=%s

Signatures

  • Joker family
  • Requests dangerous framework permissions 9 IoCs

Files

  • 38ac5c33f29c4b564622c00e8d736f589ad8143ab3ef7dfce7fc2948209346d4
    .apk android arch:arm arch:x86

    com.seeyourjourney.www

    io.dcloud.PandoraEntry


Android Permissions

38ac5c33f29c4b564622c00e8d736f589ad8143ab3ef7dfce7fc2948209346d4

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

getui.permission.GetuiService.com.seeyourjourney.www