General

  • Target

    43E09CA77087934DE2B7375B630D6546E590BB8C3E0C6EEE12BC20692C8EB0D4.apk

  • Size

    45.7MB

  • MD5

    8ff85b787083e5cb194b83856a47311c

  • SHA1

    0c95b85e5bb5837da28795782b7140eb700182a5

  • SHA256

    43e09ca77087934de2b7375b630d6546e590bb8c3e0c6eee12bc20692c8eb0d4

  • SHA512

    d0f10e53ecdb688c9486bf0d2e43b1873ff895459b38d760fa3a38db33eb08bcd78dc5c829b4bdcb2e33665e6b133ce20f1a0bc4732e40e190d5acd6a2960846

  • SSDEEP

    786432:U8iqQxeN2qkp82jY4YGk6HsfEJohNgGqRO1zQhSflla8xQX4U9X78PnZmXG5qbbX:VibxeN2qSL3PGE+AGqE16S4X4U9oPZMF

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 2 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 5 IoCs

Files

  • 43E09CA77087934DE2B7375B630D6546E590BB8C3E0C6EEE12BC20692C8EB0D4.apk
    .apk android arch:arm64 arch:arm

    com.xsw.gps

    com.lewei.multiple.main.HomeActivity


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


Android Permissions

43E09CA77087934DE2B7375B630D6546E590BB8C3E0C6EEE12BC20692C8EB0D4.apk

Permissions

.MAPS_RECEIVE

android.permission.INTERNET

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE