001e064b934d34a1124a5edc60eb8e96d15aa5607

Sharing

Copy URL Twitter E-mail

General

Target
001e064b934d34a1124a5edc60eb8e96d15aa5607
Size 2.8MB
Sample260517-wtsfvsfx2n
SHA256 59066d7e7b5bceb81d7e660780abe8fdaa4ab1ffa056f75fb951fd9b98a422ab
MD5 e011c23b7b19985957935748306514cd
SHA1 603526e7030897df2fbff1d62196720bb50e3a3d
SHA512 ea22451b416d990d6c02942fb7cfb39d438af8c54c37660603877d2ca089a59fbd97c71be1284a79bb5a09dfa5aaa1296b31b93900544ed4a4b066ac4e0c81fd
SSDEEP 49152:WAKgzYEk0LjlQj/Eb91BRhzwwnUDxsgbfo1qcN9RHuDRN7hPLpNDRsLCZFyLaEOW:WAHQ0LjlXbbB3wwUCgzcBu/7ZLpNDC2O
TLSH
T154D5010266D5943AD0BEE4378E57422074085E86E19B9D1756F7F11FFEB3A8813CEAC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
001e064b934d34a1124a5edc60eb8e96d15aa5607

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
001e064b934d34a1124a5edc60eb8e96d15aa5607

File Explorer

001e064b934d34a1124a5edc60eb8e96d15aa5607

.apk 2.8MB

001e064b934d34a1124a5edc60eb8e96d15aa5607

SHA256 59066d7e7b5bceb81d7e660780abe8fdaa4ab1ffa056f75fb951fd9b98a422ab
MD5 e011c23b7b19985957935748306514cd
SHA1 603526e7030897df2fbff1d62196720bb50e3a3d
SHA512 ea22451b416d990d6c02942fb7cfb39d438af8c54c37660603877d2ca089a59fbd97c71be1284a79bb5a09dfa5aaa1296b31b93900544ed4a4b066ac4e0c81fd
SSDEEP 49152:WAKgzYEk0LjlQj/Eb91BRhzwwnUDxsgbfo1qcN9RHuDRN7hPLpNDRsLCZFyLaEOW:WAHQ0LjlXbbB3wwUCgzcBu/7ZLpNDC2O
TLSH
T154D5010266D5943AD0BEE4378E57422074085E86E19B9D1756F7F11FFEB3A8813CEAC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a8287a0b114f0483d8d453967c68099f8cd68c0f

Digest Algorithm

sha1

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=web2mi-android-trainticket,OU=web2mi-android,O=web2mi,L=nanjing,ST=jiangsu,C=CN

Chains

Jan 1, 0001

battymole.trainticket

.a.SplashView

android.intent.action.MAIN android.intent.action.VIEW

.v.LoginView

.v.MainView

.v.PersonalTicketAboutView

.v.AboutView

.v.QueryTicketView

.v.StationView

.v.QueryTicketResultView

.v.TrainStopView

.v.FilterOptionStraightView

.v.BookView

.v.AddPassengerView

.v.AddNewPassengerView

.v.PreView

.v.BankListView

.v.CMBInsidePayView

.v.CCBInsidePayView

.v.CCBMobileCodeView

.v.ABCInsidePayView

.v.ABCMobileCodeView

.v.BankPayTipsView

.v.BankPayWebView

.v.PayFinishView

.v.Web2miExtWebView

.v.QueryOrderListView

.v.QueryOrderTicketView

.v.RefundView

.v.QueryOrderSettingView

.v.ResignQueryTicketView

.v.ResignBookView

.v.NotCompOrderView

.v.SystemSettingView

.v.DelayCheckView

.v.PersonalInfoView

.v.ModifyLoginPwdView

.v.PassengerListView

.v.PassengerDetailView

.v.PassengerModifyView

.v.QuickBuyView

.v.QueryTicketDateView

.v.QueryOrderSelectTicketView

.v.OrderTraceView

.v.RefundResultView

.v.QuickBuySelectTrainView

.v.QuickBuySelectSeatView

.v.QuickBuyListView

.v.FavBuyView

.v.RandCodeView

.v.RandCodeWebView

.v.NotifyManagementView

.v.TravelAndDiscoverView

.v.ExtListView

.v.MessageCenterView

.v.OfflineOrderListView

.v.OfflineOrderTicketView

.v.SelectNetServerView

.v.TaskAndRewardView

.v.TaskRewardDetailView

.v.TaskRewardFinishView

.v.EditMobileView

.v.EditEmailView

.v.CheckMobileCodeView

.v.QueryTicketDetailView

.v.AppPayView

.v.QuickBuyLocalView

.v.LoginUserView

.v.RegisterMobileCodeView

.v.LoginWebView

.v.SetNotifyTimeView

.v.CustomerServiceCenterView

.v.DelayCheckResultView

.v.QueryTicketTransferView

.v.FilterOptionTransferView

.v.QueryTicketResultResignView

.v.QuickBuyLocalSettingView

.v.ChooseBedView

.v.ChooseSeatView

.v.SelectTicketTypeView

.v.SelectTransStationView

.v.QuickBuySpeedUpSettingView

.wxapi.WXEntryActivity

.v.QuickBuySpeedUpResultView

.v.ResignTicketSetView

.v.QueryTicketLCView

.v.RegisterViewNew

.v.SelectInfoListView

.v.QuickBuySelectDateView

.v.QuickBuySelectPriSeatView

.v.QueryTicketStopsView

.v.QueryTicketExtQueryView

.v.ExtQueryDetailView

.v.WeChatOtherPayView

.v.FavTrainListView

.v.QuickBuyPayView

.v.QuickBuyPrePayResultView

.v.WebLoginMobileCheckView

.v.QuickBuyModifyView

.v.QuickBuyPrePayDescView

Android Permissions

001e064b934d34a1124a5edc60eb8e96d15aa5607

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.WAKE_LOCK