General

  • Target

    Friendlyexchanges_696F87_hsz.apk

  • Size

    82.6MB

  • MD5

    7c6565f8560f84c336e983ef5837cf9d

  • SHA1

    fcc3fd40755b6e87467aee23b98f620113cc78e1

  • SHA256

    3fbb1d23b9b3f5c178292f315adc1cf03320aeed5388e51afd28a5f9f65a7973

  • SHA512

    52aafcb628bf3db514422ce8e56ab0d0da4d1fcff072cd899cf1d0938171627d8deb89108a913f0f746570d045c3b6989d436574cd54f3f5f0c46de46f7cc210

  • SSDEEP

    1572864:QrekSQ83z1/M7Q7na8uKMnYjXPvYnYB2CH59HrFlE0OVs:QreHQ8V9O8uKNXPApo59HZ7OVs

Score
10/10

Malware Config

Signatures

  • Android Triada payload 1 IoCs
  • Triada family
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 23 IoCs

Files

  • Friendlyexchanges_696F87_hsz.apk
    .apk android arch:arm64 arch:arm

    com.haoyunlai.app

    com.haoyunlai.app.Main


Android Permissions

Friendlyexchanges_696F87_hsz.apk

Permissions

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.haoyunlai.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.REORDER_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.INTERNET

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.POST_NOTIFICATIONS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.VIBRATE

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MEDIA_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FOREGROUND_SERVICE_LOCATION

android.permission.GET_TASKS

android.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.MANAGE_OWN_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_PROFILE

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.RECORD_AUDIO

android.permission.SCHEDULE_EXACT_ALARM

android.permission.USE_CREDENTIALS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.READ_MEDIA_VISUAL_USER_SELECTED

android.permission.WRITE_SYNC_SETTINGS

android.permission.REQUEST_INSTALL_PACKAGES