d21c5541a67a1e5486335a826d0d0b1fcdf28f481ee3ffac6917c3bbc4289c5c[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

d21c5541a67a1e5486335a826d0d0b1fcdf28f481ee3ffac6917c3bbc4289c5c.apk.zip
Size

27.9MB
MD5

39a6b5d188bdc4962e7e549aec39f468
SHA1

674af3c753c52f3b6172f62a7a5b4474a87910a2
SHA256

352b9538dae7c6c4bdd81a1ec57c9e2691ccd4616b4f42f6372bf8076df8d6cb
SHA512

d64750d8be25ec3477bf7a8ed442c96dc0c1d688b9efee4139e8c645cc4ff9d4bb70e00b60d55e223641118fe3a90b5d716ae7b9e9ba4df47bd4be8f62a39a1a
SSDEEP

786432:U7nlu9tLmWj9hD1tqe9/jyZvwLjOnelD8SRNIbC:U7lu9tLt9hV5PRljzIbC

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA

Files

d21c5541a67a1e5486335a826d0d0b1fcdf28f481ee3ffac6917c3bbc4289c5c.apk.zip
.zip

Password: infected
d21c5541a67a1e5486335a826d0d0b1fcdf28f481ee3ffac6917c3bbc4289c5c.apk
.apk android arch:arm

com.zikang.quickcheckcicada

com.zhikang.quickcheckcicada.handset.StartActivity

Activities

com.zhikang.quickcheckcicada.handset.StartActivity

android.intent.action.MAIN

Permissions

android.hardware.usb.accessory
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.READ_LOGS
android.permission.KILL_BACKGROUND_PROCESSES

Receivers

com.zhikang.quickcheckcicada.handset.receiver.AutoStartBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.zhikang.quickcheckcicada.handset.receiver.AutoStartBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

Services

com.taobao.sophix.aidl.DownloadService

com.taobao.hotfix.action
CustomIndex
DVDirectory.cfg
DVHotMap.cfg
DVHotcity.cfg
DVIndoor.cfg
DVSDirectory.cfg
DVStreet.cfg
DVVersion.cfg
Icon_bus_station.png
.png
Icon_end.png
.png
Icon_line_node.png
.png
Icon_mark1.png
.png
Icon_mark10.png
.png
Icon_mark2.png
.png
Icon_mark3.png
.png
Icon_mark4.png
.png
Icon_mark5.png
.png
Icon_mark6.png
.png
Icon_mark7.png
.png
Icon_mark8.png
.png
Icon_mark9.png
.png
Icon_road_nofocus.png
.png
Icon_road_yellow_arrow.png
.png
Icon_start.png
.png
Icon_subway_station.png
.png
Icon_walk_route.png
.png
ResPackIndoorMap.sdkrs
SourceHanSansCN-Regular.otf
baseindoormap.sty
bus.sty
car.sty
cycle.sty
icon_scale.9.png
.png
lineDashTexture.png
.png
logo_h.png
.png
logo_l.png
.png
main_bottombtn_down.9.png
.png
main_bottombtn_up.9.png
.png
main_icon_zoomin.png
.png
main_icon_zoomin_dis.png
.png
main_icon_zoomout.png
.png
main_icon_zoomout_dis.png
.png
main_topbtn_down.9.png
.png
main_topbtn_up.9.png
.png
map.sdkrs
map.sty
map1.sdkrs
reduct.sdkrs
reduct.sty
street.sty
traffic.sdkrs
traffic.sty
wear_zoom_in.png
.png
wear_zoom_in_pressed.png
.png
wear_zoom_out_pressed.png
.png
wear_zoon_out.png
.png

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.zikang.quickcheckcicada

com.zhikang.quickcheckcicada.handset.StartActivity

Activities

com.zhikang.quickcheckcicada.handset.StartActivity

Permissions

Receivers

com.zhikang.quickcheckcicada.handset.receiver.AutoStartBroadcastReceiver

com.zhikang.quickcheckcicada.handset.receiver.AutoStartBroadcastReceiver

Services

com.taobao.sophix.aidl.DownloadService