General

  • Target

    289d589b3de665464190264d55d1943eaac7a5bedbd0cdf934bf7ea5b0041e26.zip

  • Size

    4.4MB

  • MD5

    bd2a51a9529ec4a5e2c0c6db56c83309

  • SHA1

    3a03dffd40078d667d3f98fb1ffb7a28d84f57fd

  • SHA256

    289d589b3de665464190264d55d1943eaac7a5bedbd0cdf934bf7ea5b0041e26

  • SHA512

    bb3cbe976cd540a218d1b262940b82bc18c0c4223904d039ab37c4ebd07b1ddc8b8fde9b8cbdc388db47e2cc84a25bdd64fe05acb6e58215a5d312b63f208370

  • SSDEEP

    98304:uWfx+F8u5Tz5Dyxhqr5R1hEGTtsCeZ/BjaMB:uWfx+F8u5TzhxKGTo/BjaMB

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 2 IoCs
  • Requests dangerous framework permissions 6 IoCs

Files

  • 289d589b3de665464190264d55d1943eaac7a5bedbd0cdf934bf7ea5b0041e26.zip
    .zip

    Password: infected

  • 28c11bb998bf8c023a212c6518b4f8219c8583c2e79fc87d76be6fcad51b522f.apk
    .apk android

    extend.dress.since

    com.iqiyi.i18n.MainActivity