Overview

overview

6

Static

static

6

8f85e191eb...2a.apk

android-9-x86

5

8f85e191eb...2a.apk

android-13-x64

__pasys_re...er.apk

android-9-x86

__pasys_re...er.apk

android-10-x64

__pasys_re...er.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f85e191eb7c40f25913aae643834a2a.bin

  • Size

    9.0MB

  • MD5

    8f85e191eb7c40f25913aae643834a2a

  • SHA1

    169057f2aa52df43cd87f8ebf6366bd5435067d0

  • SHA256

    5396b622461ef554d4070e2734cf90044c23ab8c168729040b897de14190d71a

  • SHA512

    1dac55a21f44c6156a87601f125431a267f3598e57936350a5e0fffcc3fe9dd00a64d4a83030209b92c45a26dd0cbfe7456133e6e800725dd1c41a3c93a0dca8

  • SSDEEP

    196608:LLHA+aaGoHfuMonfPQ9FWUYdKxZ4AWSWXW4WYWUWLrgMZuxxFUq:nA+hGoHWnHQbMdEZhVULH0MMZuxgq

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 8f85e191eb7c40f25913aae643834a2a.bin
    .apk android arch:arm arch:x86

    Password: infected

    com.qing.study.zimu125xblxzm

    .Welcome


  • __pasys_remote_banner.jar
    .apk android

    Password: infected

Android Permissions

8f85e191eb7c40f25913aae643834a2a.bin

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE