965daea2d7a5baefb63ddef1b6941d9c[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
965daea2d7a5baefb63ddef1b6941d9c.bin
Size 19.7MB
Sample240606-da345sfa9w
SHA256 b407641a36673ac61f4f238707e57167c0478ab5c3f990be26ccb40a1de993be
MD5 965daea2d7a5baefb63ddef1b6941d9c
SHA1 c5614e6d63b0f45dadadcaa2bb994757b26e86d3
SHA512 4ff9554243a10e5b72430de72d52b7e05ab02004a9f233473f6fe6646141d728b02d8dfa0c5371643e9c416b8d8b8daa3d4422fceec6e3a0f8c0e50aab95a975
SSDEEP 393216:vpfwR/K0F+JxTbH01cmE9dl2CFPV2TTVPEgkbfihM0mDdp7slOHyOjguNnp6eoUT:lCKnRbU1cnPhFPQV8gwf0LPQEjeJT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

965daea2d7a5baefb63ddef1b6941d9c.bin

.apk 19.7MB

965daea2d7a5baefb63ddef1b6941d9c.bin

SHA256 b407641a36673ac61f4f238707e57167c0478ab5c3f990be26ccb40a1de993be
MD5 965daea2d7a5baefb63ddef1b6941d9c
SHA1 c5614e6d63b0f45dadadcaa2bb994757b26e86d3
SHA512 4ff9554243a10e5b72430de72d52b7e05ab02004a9f233473f6fe6646141d728b02d8dfa0c5371643e9c416b8d8b8daa3d4422fceec6e3a0f8c0e50aab95a975
SSDEEP 393216:vpfwR/K0F+JxTbH01cmE9dl2CFPV2TTVPEgkbfihM0mDdp7slOHyOjguNnp6eoUT:lCKnRbU1cnPhFPQV8gwf0LPQEjeJT
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

Password

infected

com.tkvip.platform

com.tkvip.platform.test.TestActivity

com.tkvip.platform.module.SplashActivity

android.intent.action.MAIN

com.tkvip.platform.module.main.MainActivity

com.tkvip.platform.module.login.LoginActivity

com.tkvip.platform.module.login.CodeVerifyActivity

com.tkvip.platform.module.main.my.setting.SettingActivity

com.tkvip.platform.module.main.my.setting.AddressActivity

com.tkvip.platform.module.main.my.CollectionActivity

com.tkvip.platform.module.main.my.message.MessageActivity

com.tkvip.platform.module.main.my.order.OrderActivity

com.tkvip.platform.module.main.my.fund.view.FundManagerActivity

com.tkvip.platform.module.main.my.fund.view.FundWithdrawActivity

com.tkvip.platform.module.main.my.fund.view.FundRecordActivity

com.tkvip.platform.module.main.my.fund.view.PayDetailActivity

com.tkvip.platform.module.main.category.ProductListActivity

com.tkvip.platform.module.main.my.order.OrderDetailActivity

com.tkvip.platform.module.main.my.message.MessageDetailActivity

com.tkvip.platform.module.pay.PayCashierActivity

com.tkvip.platform.module.main.my.setting.NewAddressActivity

com.tkvip.platform.module.main.category.ProductDetailH5Activity

com.tkvip.platform.module.main.category.CartH5Activity

com.tkvip.platform.module.main.h5.PlatChannelH5Activity

com.tkvip.platform.module.main.h5.CustomH5Activity

com.tkvip.platform.module.main.shop.ShopActivity

com.tkvip.platform.module.main.shop.ShopActiveDetailActivity

com.tkvip.platform.module.main.shop.SearchH5ShopActivity

com.tkvip.platform.module.main.my.order.LogisticsActivity

com.tkvip.platform.module.main.category.capture.CaptureActivity

com.tkvip.platform.module.main.home.view.SearchActivity

com.tkvip.platform.module.main.my.order.OrderSearchActivity

com.tkvip.platform.module.login.LosePwdH5Activity

com.tkvip.platform.module.pay.recharge.RechargeActivity

com.tkvip.platform.module.main.my.preorder.PrepayOrderPayH5Activity

com.tkvip.platform.module.login.register.RegisterActivity

com.tkvip.platform.module.pay.recharge.RechargeSuccessActivity

com.tkvip.platform.module.main.my.preorder.PreOrderActivity

com.tkvip.platform.module.main.my.preorder.PreOrderDetailActivity

com.tkvip.platform.module.main.my.refund.RefundApplyActivity

com.tkvip.platform.module.main.my.refund.RefundCostActivity

com.tkvip.platform.module.main.my.exchangeproduct.RefundCustomerActivity

com.tkvip.platform.module.main.my.orderafter.OrderAfterServiceActivity

com.tkvip.platform.module.main.my.orderafter.RefundH5Activity

com.tkvip.platform.module.main.my.preorder.PreResultFActivity

com.tkvip.platform.module.main.my.order.OrderFResultActivity

com.tkvip.platform.module.pay.recharge.BankH5Activity

com.tkvip.platform.module.pay.recharge.PosRechargeActivity

com.tkvip.platform.wxapi.WXPayEntryActivity

com.tkvip.platform.module.main.my.orderafter.OrderRefundDetailH5Activity

com.tkvip.platform.module.main.my.orderafter.ReturnOrderList

com.tkvip.platform.module.main.my.orderafter.ReturnOrderDetailH5Activity

com.tkvip.platform.module.main.my.orderafter.ReturntypeH5Activity

com.tkvip.platform.module.main.my.orderafter.OrderRefundApplyH5Activity

com.tkvip.platform.module.main.my.orderafter.ReturnOrderEditH5Activity

com.tkvip.platform.module.main.my.refund.RefundSuccessActivity

com.tkvip.platform.module.main.my.refund.RefundListActivity

com.tkvip.platform.module.main.my.setting.vip.VipCardMActivity

com.tkvip.platform.module.main.my.refund.RefundDetailActivity

com.tkvip.platform.module.main.my.exchangeproduct.ExchangeListActivity

com.tkvip.platform.module.pay.AlipayWebActivity

com.tkvip.platform.module.main.my.security.SecurityManagerActivity

com.tkvip.platform.module.main.my.security.ChangeMobileActivity

com.tkvip.platform.module.main.my.security.MobileCodeActivity

com.tkvip.platform.module.main.my.security.ChangeMobileSuccessActivity

com.tkvip.platform.module.main.my.security.pwd.ChangePwdCodeActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.tkvip.platform.module.main.my.exchangeproduct.ExchangeCActivity

com.tkvip.platform.module.main.my.exchangeproduct.NewExchangeActivity

com.tkvip.platform.module.main.my.exchangeproduct.SearchReturnProductActivity

com.tkvip.platform.module.main.my.exchangeproduct.ConfirmReturnActivity

com.tkvip.platform.module.main.my.exchangeproduct.ReturnSuccessActivity

com.tkvip.platform.module.main.my.exchangeproduct.ExchangeDetailActivity

com.tkvip.platform.module.main.my.refund.RefundSearchActivity

com.tkvip.platform.module.main.my.security.pwd.ChangePwdActivity

com.tkvip.platform.module.main.my.security.pwd.ChangePwdSuccess

com.tkvip.platform.module.main.my.setting.vip.VipCardCanBuyListActivity

com.tkvip.platform.module.main.my.setting.vip.VipBuyDetailActivity

com.tkvip.platform.module.main.my.fund.view.BindingBankCardActivity

com.tkvip.platform.module.main.my.fund.view.BankCardListActivity

com.tkvip.platform.module.main.my.account.view.AccountInfoActivity

com.tkvip.platform.module.main.video.view.VideoDetailActivity

com.tkvip.platform.module.main.my.fund.view.BindSuccessActivity

com.tkvip.platform.module.main.my.fund.view.WithdrawCashActivity

com.tkvip.platform.module.main.my.fund.view.WithdrawSuccessActivity

com.tkvip.platform.module.pay.PayResultSuccessActivity

com.tkvip.platform.module.main.video.view.VideoListDetailActivity

com.tkvip.platform.module.main.video.view.VideoDetailNActivity

com.luck.picture.lib.PictureSelectorActivity

com.luck.picture.lib.PicturePreviewActivity

com.luck.picture.lib.PictureVideoPlayActivity

com.luck.picture.lib.PictureExternalPreviewActivity

com.yalantis.ucrop.UCropActivity

com.yalantis.ucrop.PictureMultiCuttingActivity

com.luck.picture.lib.PicturePlayAudioActivity

com.blankj.utilcode.util.PermissionUtils$PermissionActivity

Android Permissions

965daea2d7a5baefb63ddef1b6941d9c.bin

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_WIFI_STATE