afff4cb178149cae3e60e5727322b65670c7950340c2988c4c7d64010774ad62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afff4cb178149cae3e60e5727322b65670c7950340c2988c4c7d64010774ad62
Size

1.4MB
MD5

6754de26a1c758a21fc636ba29e44e31
SHA1

96b35dd65f63b8af289c66b21c1f4ec7e6c7ebb0
SHA256

afff4cb178149cae3e60e5727322b65670c7950340c2988c4c7d64010774ad62
SHA512

6ffd5220368f7ba9565389614be28a1ee607b4f3203b0a28e86e79ca584ab82d8bcbdaa8ee2c324ffcd7495ab34b1ed5565d5faa1e96bd7c501e5592473adfbf
SSDEEP

24576:iCgsrf0DCnh/FiCNqaxLDHaHKOAUrXM2VTjuhtAILOxUqSj:Asrf0AGiBxsmgc2Zjuryxsj

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

afff4cb178149cae3e60e5727322b65670c7950340c2988c4c7d64010774ad62
.apk android

com.epgx.ypwy.zkgf

com.google.search.MainActivity

Activities

com.google.search.MainActivity

android.intent.action.MAIN

com.google.search.AsActivity

android.zyact.showAct

com.zxnet.mobilead.activity.AdActivity

zx.adshow

Permissions

android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.app.action.DEVICE_ADMIN_ENABLE

Receivers

com.google.search.QwReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.zdt.ALARM_ACTION
action.install_finish
action.getapp_start
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tencent.installjar.MyReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

com.poiz.Yer

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

net.suhu.cn.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.REBOOT
android.net.conn.CONNECTIVITY_CHANGE

com.google.search.MyReceiver

android.app.action.DEVICE_ADMIN_ENABLED

Services

com.google.search.ZxService

action.taskservice

net.suhu.cn.Vpn

adinsert.adshowservice

Android Permissions

afff4cb178149cae3e60e5727322b65670c7950340c2988c4c7d64010774ad62

Permissions

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.app.action.DEVICE_ADMIN_ENABLE