a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023

General

Target

a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023
Size

1.2MB
MD5

6ee09a9ba698ce8b6c1f3cf933953c2d
SHA1

e95caef1e31220027a83c97fb9246633a123c185
SHA256

a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023
SHA512

79667c93b1111e7a5b4810b6e1e5c23c24f38d703633b63a90cff215828f0fec9e0293b317b7a15154eeb03932b858d53fee810c9aab6c7077db5db105bf67fb
SSDEEP

24576:Mr2jed4HNojV88QtQrqQA6prsYo42U0NDZSyKSEowlLiAdM5QVorL:tojW3t5QA6WYodU0J4yQ/0AdKA6L

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023
.apk android arch:arm

com.ly.jqkb

com.yunchao.ceshi.LaunchActivity

Activities

com.yunchao.ceshi.LaunchActivity

android.intent.action.MAIN

com.common.as.activity.TPActivity

com.common.as.Action.sec_jqkb

Permissions

com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER
com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.mozillaonline.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.EXPAND_STATUS_BAR
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
com.android.launcher.permission.READ_SETTINGS
android.permission.INTERNET
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.BROADCAST_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.VIBRATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE

Receivers

com.cc.pay.msg.SendMsgReceiver

android.intent.action.SENT_SMS_ACTION

com.yunchao.ceshi.service.PkgAddReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.yunchao.ceshi.service.PkgSetupReceiver

android.intent.action.PACKAGE_SETUP

com.mozillaonline.providers.downloads.DownloadReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.common.as.service.SystemReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_SHARED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.net.conn.CONNECTIVITY_CHANGE
com.common.as.Action.df_jqkb

com.cc.sms.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
android.intent.action.BOOT_COMPLETED

aa.ff.FService

android.provider.Telephony.WAP_PUSH_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_RECEIVED_2
android.provider.Telephony.SMS_REJECTED

com.zyypt.video.mpdemo.implbyself.MPDemoReceiver

android.intent.action.BOOT_COMPLETED

Services

com.cc.sms.SmsService

android.intent.action.BOOT_COMPLETED

com.zyypt.video.mpdemo.implbyself.MPDemoService

com.zyypt.video.msgpush.implbyself.MsgPushService

Android Permissions

a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023

Permissions

com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER

com.mozillaonline.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.mozillaonline.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

com.android.launcher.permission.READ_SETTINGS

android.permission.INTERNET

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.ly.jqkb

com.yunchao.ceshi.LaunchActivity

Activities

com.yunchao.ceshi.LaunchActivity

com.common.as.activity.TPActivity

Permissions

Receivers

com.cc.pay.msg.SendMsgReceiver

com.yunchao.ceshi.service.PkgAddReceiver

com.yunchao.ceshi.service.PkgSetupReceiver

com.mozillaonline.providers.downloads.DownloadReceiver

com.common.as.service.SystemReceiver

com.cc.sms.SmsReceiver

aa.ff.FService

com.zyypt.video.mpdemo.implbyself.MPDemoReceiver

Services

com.cc.sms.SmsService

com.zyypt.video.mpdemo.implbyself.MPDemoService

Android Permissions

a5337cba70210098b18ce3c0b269323f638c3a8e8904dd8d10f9081f8029b023