86368e18ef52629e986d3700f9c939e57ea8fa1c2ab7d0f26fa465aa2c080549[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

86368e18ef52629e986d3700f9c939e57ea8fa1c2ab7d0f26fa465aa2c080549.apk.zip
Size

46.8MB
MD5

f9d872c97c449a3df591f52f1262a5a9
SHA1

b2f73573ed2ddedb29320f789b57987aa6344807
SHA256

48eb76a766d8c299144403bdd23ccda293092885ee30d891235ed990b43187f1
SHA512

bdc9550e1fb686eb1d56e934bbd898f14f3f3249eb2b9abcb813aafdb397b92f70ad066cf5e3395640ff263e50f6d3d199cd0b98d9c3eb262e0261c2ef6f4f99
SSDEEP

786432:WQBeTLfnSat6ksTF6Uim6sd+gVi42cbJPTuRphJjb8OoZuhQEME2iUFy0ZIQpFHO:n8HSa6PTCm1d++i42cx0P8hZu29ij0Fu

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

86368e18ef52629e986d3700f9c939e57ea8fa1c2ab7d0f26fa465aa2c080549.apk.zip
.zip

Password: infected
86368e18ef52629e986d3700f9c939e57ea8fa1c2ab7d0f26fa465aa2c080549.apk
.apk android arch:arm64 arch:arm

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.action.PULLUP
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

android.intent.action.MAIN
android.intent.action.VIEW

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

android.intent.action.VIEW

cn.ninegame.gamemanager.activity.MessageBoxActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.activity.OutsideInstallActivity

android.intent.action.VIEW
android.intent.action.INSTALL_PACKAGE
android.intent.action.INSTALL_PACKAGE
android.intent.action.DELETE
android.intent.action.UNINSTALL_PACKAGE

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentResult4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentCreate4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentLog4323

cn.ninegame.accountsdk.app.AccountMainActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

android.intent.action.VIEW
com.tmall.wireless.action.navigator.INTERNAL_NAVIGATION

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.WRITE_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.CAMERA
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS
dianxin.permission.ACCESS_LAUNCHER_DATA
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.READ_APP_BADGE
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
android.permission.RECORD_AUDIO
android.permission.REQUEST_INSTALL_PACKAGES
com.meizu.flyme.push.permission.RECEIVE
cn.ninegame.gamemanager.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
cn.ninegame.gamemanager.permission.C2D_MESSAGE
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.READ_SETTINGS
android.permission.BLUETOOTH_ADMIN
cn.ninegame.gamemanager.permission.PROCESS_PUSH_MSG
cn.ninegame.gamemanager.permission.PUSH_PROVIDER
android.permission.FOREGROUND_SERVICE
com.meizu.flyme.permission.PUSH
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CLEAR_APP_CACHE
android.permission.GET_PACKAGE_SIZE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.CHANGE_NETWORK_STATE
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.FLASHLIGHT
android.permission.CAPTURE_VIDEO_OUTPUT

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.modules.message.BoxMsgNotificationBroadcastReceiver.cancel_by_user

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

cn.ninegame.gamemanager.notifications.push
cn.ninegame.gamemanager.notifications.push.force
cn.ninegame.gamemanager.notifications.push.start.service
cn.ninegame.gamemanager.notifications.showNotification
cn.ninegame.gamemanager.notifications.showPushMessage
cn.ninegame.gamemanager.notifications.checkNetGameGiftTime
cn.ninegame.gamemanager.notifications.showNetGameNotification
cn.ninegame.gamemanager.notifications.GetGiftInfoNotification
cn.ninegame.gamemanager.notifications.reset.interval
cn.ninegame.gamemanager.notifications.syncFollowNotify.login

com.pp.assistant.cockroach.CockroachBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.pp.assistant.cockroach.action.live

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

android.intent.action.USER_PRESENT

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

android.net.wifi.STATE_CHANGE

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.ali.money.shield.alicleanerlib.ScheduleJunkScan

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

cn.ninegame.gamemanager.alarm.action

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.gamemanager.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.agoopush

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.taobao.orange.receiver.OrangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.meizu.flyme.push.intent.PUSH_SYSTEM

com.alv.foun.PhoenixBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.alv.foun.ACTION_WAKE_UP_ALARM

com.ali.user.open.receiver.SessionSyncReceiver

aliuser_sync_session

com.taobao.tao.powermsg.PowerMsgReceiver

TAOBAO_DELAY_START_POWMSG
com.taobao.tao.messagkit.receive

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

cn.ninegame.gamemanager.pullup

com.pp.assistant.cockroach.service.CockroachService

android.view.InputMethod

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.taobao.agoo.TaobaoMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

org.agoo.android.intent.action.RECEIVE

com.taobao.orange.service.OrangeApiService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

com.taobao.accs.intent.action.RECEIVE

anetwork.channel.aidl.NetworkService

anetwork.channel.aidl.IRemoteNetworkGetter

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

org.android.agoo.huawei.HuaweiPushMessageService

com.huawei.push.action.MESSAGING_EVENT

com.alv.foun.service.PhoenixService

android.view.InputMethod
oppo.intent.action.keyguard

com.taobao.trtc.accs.TrtcAccsService

com.taobao.accs.intent.action.RECEIVE

com.alibaba.security.rp.service.DynamicRPJsbridgeService

RP

com.alibaba.security.rp.service.RPService

com.alibaba.intent.action.AIDL_IRPSERVICE

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

ActionService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.accs.intent.action.RECEIVE

com.taobao.tao.powermsg.outter.PowerMsg4WXService

powermsg
AlibabaSans102-Bd.ttf
MFQiHei_score.ttf
NumberBold.ttf
SVGAnimCode.java
SVGCommonCode.java
SVGLayoutCode.java
SVGLoaderTep.java
SVGNinePatchCode.java
SVGTag.java
ag_sdk_cbg_root.cer
com.tencent.open.config.json
danmu_like.json
data.json
diam1.png
.png
diam2.png
.png
faceContinuity.bin
fdmodel.bin
fish.png
.png
frag.sh
geo_global_ca.cer
grs_sdk_global_route_config_apptouchupdatesdk.json
grs_sdk_global_route_config_opendevicesdk.json
grs_sdk_global_route_config_opensdkService.json
grs_sdk_global_route_config_updatesdk.json
grs_sdk_server_config.json
grs_sp.bks
h5_qr_back.png
.png
hianalytics_njjn
hmsincas.bks
hmsrootcas.bks
img_0.png
.png
img_1.png
.png
img_2.png
.png
img_3.png
.png
img_4.png
.png
img_5.png
.png
index.umd.js
.js
ldClassifier.bin
ldmodel.bin
libwbsafeedit
.elf linux arm
libwbsafeedit_64
.elf linux aarch64
libwbsafeedit_x86
.elf linux x86
libwbsafeedit_x86_64
.elf linux x64
like_sel.png
.png
like_text_img.png
.png
liked_text_img.png
.png
live_stream_fans_badge_anim.json
live_stream_live_state_orange.json
live_stream_live_state_white.json
live_stream_pic_live_mic_talking_orange.json
live_stream_pic_live_mic_talking_purple.json
live_stream_video_loading.json
live_stream_video_mic_icon.json
loading.json
loading_refresh_color.json
lucky.png
.png
main.dx
ng_bar_community_icon.json
ng_bar_findgame_icon.json
ng_bar_findgame_icon_guide.json
ng_bar_home_icon.json
ng_bar_live_icon.json
ng_bar_live_icon_guide.json
ng_bar_mine_icon.json
ng_comment_grade_full.json
ng_community_zan_animation.json
ng_community_zanjson_bang_img.png
.png
ng_community_zanjson_bg_img.png.png
.png
ng_community_zanjson_tan1_img.png
.png
ng_community_zanjson_tan2_img.png
.png
ng_community_zanjson_xian_img.png.png
.png
ng_community_zanjson_zhen_img.png
.png
ng_draw_down_refresh.json
ng_draw_up_refresh.json
ng_followpage_follow_btn.json
ng_game_video_loading.json
ng_guide_slidetoleft.json
ng_guide_slidetoleft_bg.png
.png
ng_icon_live_mic_white_36.json
ng_icon_live_mic_white_48.json
ng_like_discovery_like.png
.png
ng_like_guide_icon.json
ng_like_mascot.json
ng_like_text.png
.png
ng_list_til_icon_live.json
ng_live_emoji.json
ng_live_lucky_draw.json
ng_live_video_label_orange.json
ng_live_video_label_orange_forindex.json
ng_live_video_label_white.json
ng_loading_grey_s.json
ng_navbar_download_icon.json
ng_navbar_download_icon_white.json
ng_page_loading.json
ng_pic_live_mic_talking_orange.json
ng_pic_live_mic_talking_purple.json
ng_screenflash_btn_arrow.json
ng_shortvideo_like_yx.json
ng_shortvideo_lottie_comment_emoji_fly.json
ng_shortvideo_playloading.json
ng_video_guild_finger_img.png
.png
ng_video_guild_text_img.png
.png
ng_video_like_icon_bg.png
.png
ng_video_page_follow_btn.json
ng_video_share_icon_bg.png
.png
ng_video_share_icon_wechat.json
pkgcache_basic.db
platformProtocol.html
.html
popup.html
.html
publish_list_article.png
.png
publish_list_post.png
.png
publish_list_video.png
.png
recommend_selected_content_more.json
redbag.png
.png
sysconfig
template_list.json
updatesdkcas.bks
userProtocol.html
.html
vertex.sh
windmill.worker.js
.js

Sharing

General

Malware Config

Signatures

Files

Password: infected

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

cn.ninegame.gamemanager.activity.MessageBoxActivity

cn.ninegame.gamemanager.activity.OutsideInstallActivity

com.tencent.tauth.AuthActivity

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

cn.ninegame.accountsdk.app.AccountMainActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

Permissions

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

com.pp.assistant.cockroach.CockroachBroadcastReceiver

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.taobao.orange.receiver.OrangeReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.alv.foun.PhoenixBroadcastReceiver

com.ali.user.open.receiver.SessionSyncReceiver

com.taobao.tao.powermsg.PowerMsgReceiver

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

com.pp.assistant.cockroach.service.CockroachService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.ChannelService

org.android.agoo.accs.AgooService

com.taobao.agoo.TaobaoMessageIntentReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

anetwork.channel.aidl.NetworkService

com.huawei.hms.support.api.push.service.HmsMsgService

org.android.agoo.huawei.HuaweiPushMessageService

com.alv.foun.service.PhoenixService

com.taobao.trtc.accs.TrtcAccsService

com.alibaba.security.rp.service.DynamicRPJsbridgeService

com.alibaba.security.rp.service.RPService

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.tao.powermsg.outter.PowerMsg4WXService