General

  • Target

    0ac4f77dbf120731969f6b522efbd7f7.bin

  • Size

    18.7MB

  • MD5

    0ac4f77dbf120731969f6b522efbd7f7

  • SHA1

    8cf27ebe4c5a8f22ea73587a2846ae789c1c5cbc

  • SHA256

    4eb912f3962c65e3f6afb9c9df6a005d0d699fb372c31190727fde538b4a8531

  • SHA512

    1415d9b753a0292d816b016ec1d9f646abf6417403e3b7610cd161a8a85092d63b6d9dc58f2d7e5fff261d28952805cf300c04bdb3ba88c63fb0c3ccb7f7db7c

  • SSDEEP

    393216:5zkVN1VqQEHKKjAKFbLBUcxFQXxyCn4wLNti7UIG81xwK4V8j:5zkVN1VvEH1UKxV3gEs48pIGkwH0

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • 0ac4f77dbf120731969f6b522efbd7f7.bin
    .apk android arch:arm

    Password: infected

    com.moxiu.launcher

    com.moxiu.launcher.Launcher


  • bdxadsdk.jar
    .apk android

    Password: infected

  • firmcore.jar
    .apk android

    Password: infected

  • gdtadv2.jar
    .apk android arch:arm64 arch:arm

    Password: infected

Android Permissions

0ac4f77dbf120731969f6b522efbd7f7.bin

Permissions

android.permission.ACCESS_WEATHERCLOCK_PROVIDER

com.xiaomi.permission.AUTH_SERVICE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

android.permission.CALL_PHONE

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

com.android.launcher.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_PHONE_STATE

android.permission.CAMERA

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RESTART_PACKAGES

android.permission.PERSISTENT_ACTIVITY

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.dianxinos.dxhome.permission.READ_SETTINGS

com.dianxinos.dxhome.permission.WRITE_SETTINGS

com.nemustech.regina.permission.READ_SETTINGS

com.demo.launcher.business.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.sec.android.app.launcher.permission.READ_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FIND_LOCATION

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FLASHLIGHT

android.permission.CHANGE_WIFI_STATE

com.android.ContactWidget.permission.READ_SETTINGS