General

  • Target

    king-mc-2.8.7.apk

  • Size

    18.4MB

  • MD5

    ef71d393018a1a19220006f0be35c992

  • SHA1

    b3c2cec367f7a8632af4bd6c49f5806f16bc93a5

  • SHA256

    0341e96681f853171f01aa7ad17dcf252dd57853d2c52a7c10128113259e61ba

  • SHA512

    dcb05a6ee68df9fb0793daae92b59bde11549a125d351196b905b9db1d57f10c6a83188115a94386ec2422691efbba287245999db261281142894d84a6148507

  • SSDEEP

    393216:5B7cmJJlEpioJUq7w3v4JVz5RXBG2js5IyiNPZ4J/ng0bhhJlrafj92lIM8:7cmJJldq03Wz3XBGYsDoM5bplra+IM8

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 54 IoCs

Files

  • king-mc-2.8.7.apk
    .apk android arch:arm64 arch:arm

    com.code.seconding

    com.hj.assistpro.activity.WelcomeActivity


  • mcore.jar
    .apk android arch:arm64 arch:arm arch:x86

    com.excelliance.kxqp.platform


  • mcore2.jar
    .apk android arch:arm64 arch:arm

    com.waxmoon.ma.gp


Android Permissions

king-mc-2.8.7.apk

Permissions

android.permission.RECORD_AUDIO

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.READ_LOGS

com.android.vending.BILLING

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

com.android.vending.BILLING

android.permission.ACCESS_WIFI_STATE

android.permission.BACKUP

android.permission.ACCOUNT_MANAGER

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.google.android.gms.permission.AD_ID_NOTIFICATION

com.google.android.googleapps.permission.GOOGLE_AUTH

com.google.android.googleapps.permission.GOOGLE_AUTH.OTHER_SERVICES

com.google.android.googleapps.permission.GOOGLE_AUTH.YouTubeUser

com.google.android.googleapps.permission.GOOGLE_AUTH.adsense

com.google.android.googleapps.permission.GOOGLE_AUTH.adwords

com.google.android.googleapps.permission.GOOGLE_AUTH.ah

com.google.android.googleapps.permission.GOOGLE_AUTH.blogger

com.google.android.googleapps.permission.GOOGLE_AUTH.cl

com.google.android.googleapps.permission.GOOGLE_AUTH.cp

com.google.android.googleapps.permission.GOOGLE_AUTH.dodgeball

com.google.android.googleapps.permission.GOOGLE_AUTH.finance

com.google.android.googleapps.permission.GOOGLE_AUTH.gbase

com.google.android.googleapps.permission.GOOGLE_AUTH.grandcentral

com.google.android.googleapps.permission.GOOGLE_AUTH.groups2

com.google.android.googleapps.permission.GOOGLE_AUTH.health

com.google.android.googleapps.permission.GOOGLE_AUTH.ig

com.google.android.googleapps.permission.GOOGLE_AUTH.jotspot

com.google.android.googleapps.permission.GOOGLE_AUTH.knol

com.google.android.googleapps.permission.GOOGLE_AUTH.lh2

com.google.android.googleapps.permission.GOOGLE_AUTH.local

com.google.android.googleapps.permission.GOOGLE_AUTH.mail