02a2ae627ecb1330363ba9d403f980413e4c02cc241cda3dcd3c9bc6d6a3c2e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a2ae627ecb1330363ba9d403f980413e4c02cc241cda3dcd3c9bc6d6a3c2e2
Size

1.4MB
MD5

fcd27dfc9fceecf13b8d302f22c0fc45
SHA1

3d9c75c8ca41d605b384343c8139a72e06418604
SHA256

02a2ae627ecb1330363ba9d403f980413e4c02cc241cda3dcd3c9bc6d6a3c2e2
SHA512

577efaba89b2b2d6b653ea45960c7b2bfd51d44ad0bafd8ae76e085df78acb0b74fc5f64ec0a5b9cc8b8f3d6b0edc9c88069261d71a859cc0acdd85161a88b69
SSDEEP

24576:ECgsrf0DCnh/FiCNqaxLDHaHKOAUrXM2VTjuhtAILOxUKvF:asrf0AGiBxsmgc2Zjuryx9vF

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

02a2ae627ecb1330363ba9d403f980413e4c02cc241cda3dcd3c9bc6d6a3c2e2
.apk android

com.hekt.izrx.tmet

com.google.search.MainActivity

Activities

com.google.search.MainActivity

android.intent.action.MAIN

com.google.search.AsActivity

android.zyact.showAct

com.zxnet.mobilead.activity.AdActivity

zx.adshow

Permissions

android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.app.action.DEVICE_ADMIN_ENABLE

Receivers

com.google.search.QwReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.zdt.ALARM_ACTION
action.install_finish
action.getapp_start
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tencent.installjar.MyReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

com.poiz.Yer

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

net.suhu.cn.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.net.conn.CONNECTIVITY_CHANGE

com.google.search.MyReceiver

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.google.search.ZxService

action.taskservice

net.suhu.cn.Vpn

adinsert.adshowservice

Android Permissions

02a2ae627ecb1330363ba9d403f980413e4c02cc241cda3dcd3c9bc6d6a3c2e2

Permissions

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.app.action.DEVICE_ADMIN_ENABLE