Resubmissions

08/09/2024, 09:45

240908-lrkywsyfml 6

08/09/2024, 09:44

240908-lqz2esyfkm 6

General

  • Target

    小红书-yyb.apk

  • Size

    27.6MB

  • MD5

    18944c5650aa5c064fff9013b0356777

  • SHA1

    eee7d784c103ed91a98202366393bae511f6329e

  • SHA256

    2931a6f7876c08c4a261d594f319d3f70e808518b64f6e875149c5131832d47d

  • SHA512

    3070aba2b120b0eee81fba7a6b1e93c3b2df5a00ba11de009f8fb33548daf7d4c5e8fe12eb94e1b0b776beb9c1a01faf9ff8a8af9b00a22b5475195e86e24c9d

  • SSDEEP

    393216:DMuEOuPoMQFpi+ECajZqgEJCe4zWnAUqx3pNfJ5zBomJVITnaVvUE0i0mnhxwyy:VEOZi+ECFgEJaCAUqx3p7d3vVF0mnTwl

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 6 IoCs
  • Requests dangerous framework permissions 19 IoCs

Files

  • 小红书-yyb.apk
    .apk android arch:arm64 arch:arm

    com.tencent.android.qqdownloader

    com.tencent.pangu.link.SplashActivity


  • EmptyRes1.apk
    .apk android

    com.midas.emptyresfirst


Android Permissions

小红书-yyb.apk

Permissions

com.android.permission.GET_INSTALLED_APPS

com.tencent.android.qqdownloader.component_security

com.tencent.android.qqdownloader.permission.XGPUSH_RECEIVE

com.tencent.android.qqdownloader.theme.permission

oicq.wlogin_sdk.permission.WloginProvider.READ

oicq.wlogin_sdk.permission.WloginProvider.WRITE

com.qq.AppService.permission.out.IPC_SERVICE

com.qq.superuser.READ_PERMISSION

com.qq.AppService.permission.out.CACHE_READ_PERMISSION

com.qq.AppService.permission.out.CACHE_WRITE_PERMISSION

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

cn.nubia.launcher.permission.READ_SETTINGS

cn.nubia.launcher.permission.WRITE_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.BROADCAST_STICKY

android.permission.BATTERY_STATS

android.permission.INTERNET

android.permission.SET_WALLPAPER

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.RESTART_PACKAGES

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_PACKAGE_SIZE

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_COARSE_LOCATION

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_EXTERNAL_STORAGE

com.tencent.permission.VIRUS_SCAN