General

  • Target

    2C689191A9AD2B9278E02FC5DC6419FBE5EA5753235EF634755713109B9CB70E.apk

  • Size

    17.9MB

  • MD5

    092321dfadb4e68bc659845100c9d564

  • SHA1

    20234127d3e7f417a2d14698cf61999f6613117f

  • SHA256

    2c689191a9ad2b9278e02fc5dc6419fbe5ea5753235ef634755713109b9cb70e

  • SHA512

    3ed1a3c2bb1c632f31a2d351561ac24749c6e3b9564cb9bc642d6e5c3807438fab384b9de58f5d0b943949d0682dac4620738b782fd862d63369d2f6bbccc349

  • SSDEEP

    393216:z47DD3ksC+WfG9g/Zmi95ZlJ5P1cbKoyjgm4UILwXS4UILwX4OYNu6Aa:QD3ksC+Wt/jLljPKmSm4U9XS4U9X4OQl

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 3 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 7 IoCs

Files

  • 2C689191A9AD2B9278E02FC5DC6419FBE5EA5753235EF634755713109B9CB70E.apk
    .apk android arch:arm64 arch:arm

    com.zxc.gofinder

    com.zxc.gofinder.activity.welcomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

2C689191A9AD2B9278E02FC5DC6419FBE5EA5753235EF634755713109B9CB70E.apk

Permissions

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FLASHLIGHT

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_PRIVILEGED

com.google.android.c2dm.permission.RECEIVE

com.zxc.gofinder.permission.C2D_MESSAGE