897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e[.]apk[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk.zip
Size

38.9MB
MD5

d31194ef2ffe53db10b4ebdb39c6f54e
SHA1

6b6ca7147f437be3a25cb4eafabbbbc730ee8516
SHA256

5a2e74acc2e1add7f2a21a6ff7bc102d88bb507ad700ba23f311c0dcec5686d2
SHA512

11734c356a976d56518a46b3214a76fe1432f6cc2f4277d868ab082474f67eec5a03ddaccec5f9912edf2b0b51226a3461dfb5eb1b7802e72483d67885097c11
SSDEEP

786432:1V+jEX/fTusj6Z9iW90Tr6f9sU9hMpNFsV4aHmM3R4F5N24aj4v31gkhxrC:ZwZ2rc6UbwNSVTliJnajqddC

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk.zip
.zip

Password: infected
897e3aa8c9a007103334b42f35eef2a859f68281eb35176572be0fcd8193ea4e.apk
.apk android arch:arm64 arch:arm

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.action.PULLUP
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

android.intent.action.MAIN
android.intent.action.VIEW

cn.ninegame.gamemanager.activity.MessageBoxActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

android.intent.action.VIEW

cn.ninegame.gamemanager.activity.OutsideInstallActivity

android.intent.action.VIEW
android.intent.action.INSTALL_PACKAGE
android.intent.action.INSTALL_PACKAGE
android.intent.action.DELETE
android.intent.action.UNINSTALL_PACKAGE

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentResult4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentCreate4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentLog4323

cn.ninegame.accountsdk.app.AccountMainActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

android.intent.action.VIEW
com.tmall.wireless.action.navigator.INTERNAL_NAVIGATION

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.WRITE_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CAMERA
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS
dianxin.permission.ACCESS_LAUNCHER_DATA
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.READ_APP_BADGE
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
android.permission.RECORD_AUDIO
android.permission.REQUEST_INSTALL_PACKAGES
com.meizu.flyme.push.permission.RECEIVE
cn.ninegame.gamemanager.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
cn.ninegame.gamemanager.permission.C2D_MESSAGE
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.READ_SETTINGS
cn.ninegame.gamemanager.permission.PROCESS_PUSH_MSG
cn.ninegame.gamemanager.permission.PUSH_PROVIDER
android.permission.FOREGROUND_SERVICE
com.meizu.flyme.permission.PUSH
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CLEAR_APP_CACHE
android.permission.GET_PACKAGE_SIZE
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.FLASHLIGHT
android.permission.CAPTURE_VIDEO_OUTPUT
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
cn.cyberidentity.certification.AUTH

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.modules.message.BoxMsgNotificationBroadcastReceiver.cancel_by_user

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

cn.ninegame.gamemanager.notifications.push
cn.ninegame.gamemanager.notifications.push.force
cn.ninegame.gamemanager.notifications.push.start.service
cn.ninegame.gamemanager.notifications.showNotification
cn.ninegame.gamemanager.notifications.showPushMessage
cn.ninegame.gamemanager.notifications.checkNetGameGiftTime
cn.ninegame.gamemanager.notifications.showNetGameNotification
cn.ninegame.gamemanager.notifications.GetGiftInfoNotification
cn.ninegame.gamemanager.notifications.reset.interval
cn.ninegame.gamemanager.notifications.syncFollowNotify.login

com.pp.assistant.cockroach.CockroachBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.pp.assistant.cockroach.action.live

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

android.intent.action.USER_PRESENT

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

android.net.wifi.STATE_CHANGE

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.ali.money.shield.alicleanerlib.ScheduleJunkScan

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

cn.ninegame.gamemanager.alarm.action

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.gamemanager.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.agoopush

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.taobao.orange.receiver.OrangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.meizu.flyme.push.intent.PUSH_SYSTEM

com.alv.foun.PhoenixBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.alv.foun.ACTION_WAKE_UP_ALARM

com.ali.user.open.receiver.SessionSyncReceiver

aliuser_sync_session

com.taobao.tao.powermsg.PowerMsgReceiver

TAOBAO_DELAY_START_POWMSG
com.taobao.tao.messagkit.receive

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

cn.ninegame.gamemanager.pullup

com.pp.assistant.cockroach.service.CockroachService

android.view.InputMethod

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.taobao.agoo.TaobaoMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

org.agoo.android.intent.action.RECEIVE

com.taobao.orange.service.OrangeApiService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

com.taobao.accs.intent.action.RECEIVE

com.r2.diablo.middleware.core.splitinstall.remote.SplitInstallService

com.r2.diablo.middleware.android.play.core.splitinstall.BIND_SPLIT_INSTALL_SERVICE

anetwork.channel.aidl.NetworkService

anetwork.channel.aidl.IRemoteNetworkGetter

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

org.android.agoo.huawei.HuaweiPushMessageService

com.huawei.push.action.MESSAGING_EVENT

com.alv.foun.service.PhoenixService

android.view.InputMethod
oppo.intent.action.keyguard

com.taobao.trtc.accs.TrtcAccsService

com.taobao.accs.intent.action.RECEIVE

com.alibaba.security.rp.service.DynamicRPJsbridgeService

RP

com.alibaba.security.rp.service.RPService

com.alibaba.intent.action.AIDL_IRPSERVICE

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

ActionService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.accs.intent.action.RECEIVE

com.taobao.tao.powermsg.outter.PowerMsg4WXService

powermsg
AlibabaSans102-Bd.ttf
MFQiHei_score.ttf
NumberBold.ttf
acceleration_entrance.json
ag_sdk_cbg_root.cer
base.app.cpu.abilist.properties
btn_speeding.json
com.tencent.open.config.json
danmu_like.json
diam1.png
.png
diam2.png
.png
faceContinuity.bin
fdmodel.bin
fish.png
.png
frag.sh
geo_global_ca.cer
grs_sdk_global_route_config_apptouchupdatesdk.json
grs_sdk_global_route_config_opendevicesdk.json
grs_sdk_global_route_config_opensdkService.json
grs_sdk_global_route_config_updatesdk.json
grs_sdk_server_config.json
grs_sp.bks
h5_qr_back.png
.png
hianalytics_njjn
hmsincas.bks
hmsrootcas.bks
img_0.png
.png
img_1.png
.png
img_2.png
.png
img_3.png
.png
img_4.png
.png
img_5.png
.png
index.umd.js
.js
index_new_default_data.json
industrytest-demi-webfont.ttf
ldClassifier.bin
ldmodel.bin
libwbsafeedit
.elf linux arm
libwbsafeedit_64
.elf linux aarch64
libwbsafeedit_x86
.elf linux x86
libwbsafeedit_x86_64
.elf linux x64
like_sel.png
.png
like_text_img.png
.png
liked_text_img.png
.png
live_stream_fans_badge_anim.json
live_stream_goods_popup_anim.json
live_stream_goods_popup_img_0.png
.png
live_stream_goods_shop_anim.json
live_stream_goods_shop_img_0.png
.png
live_stream_goods_shop_img_1.png
.png
live_stream_goods_shop_img_2.png
.png
live_stream_goods_shop_img_3.png
.png
live_stream_goods_shop_img_4.png
.png
live_stream_goods_shop_img_5.png
.png
live_stream_goods_shop_img_6.png
.png
live_stream_guide_vod_flip_anim.json
live_stream_guide_vod_like_anim.json
live_stream_live_state_orange.json
live_stream_live_state_white.json
live_stream_pic_live_mic_talking_orange.json
live_stream_pic_live_mic_talking_purple.json
live_stream_video_loading.json
live_stream_video_mic_icon.json
live_stream_vod_follow.json
live_stream_vod_like.json
live_stream_vod_like_img_0.png
.png
live_stream_vod_user_head_living.json
loading.json
loading_refresh_color.json
lucky.png
.png
main.dx
middleware_7.9.9.2_7.9.9.2.json
ng_bar_community_icon.json
ng_bar_findgame_icon.json
ng_bar_findgame_icon_guide.json
ng_bar_home_icon.json
ng_bar_live_icon.json
ng_bar_live_icon_guide.json
ng_bar_mine_icon.json
ng_bar_speed_icon.json
ng_bar_speed_icon_guide.json
ng_comment_grade_full.json
ng_community_zan_animation.json
ng_community_zanjson_bang_img.png
.png
ng_community_zanjson_bg_img.png.png
.png
ng_community_zanjson_tan1_img.png
.png
ng_community_zanjson_tan2_img.png
.png
ng_community_zanjson_xian_img.png.png
.png
ng_community_zanjson_zhen_img.png
.png
ng_draw_down_refresh.json
ng_draw_up_refresh.json
ng_followpage_follow_btn.json
ng_game_video_loading.json
ng_guide_slidetoleft.json
ng_guide_slidetoleft_bg.png
.png
ng_like_discovery_like.png
.png
ng_like_guide_icon.json
ng_like_mascot.json
ng_like_text.png
.png
ng_list_til_icon_live.json
ng_live_emoji.json
ng_live_lucky_draw.json
ng_live_video_label_orange.json
ng_live_video_label_orange_forindex.json
ng_live_video_label_white.json
ng_loading_grey_s.json
ng_navbar_download_icon.json
ng_navbar_download_icon_white.json
ng_page_loading.json
ng_res_splash_guide_breath_light.json
ng_res_splash_guide_click_bg.json
ng_res_splash_guide_click_finger.json
ng_res_splash_guide_grow.json
ng_screenflash_btn_arrow.json
ng_shortvideo_like_yx.json
ng_shortvideo_lottie_comment_emoji_fly.json
ng_shortvideo_playloading.json
ng_video_guild_finger_img.png
.png
ng_video_guild_text_img.png
.png
ng_video_like_icon_bg.png
.png
ng_video_page_follow_btn.json
ng_video_share_icon_bg.png
.png
ng_video_share_icon_wechat.json
oneprivacy.json
pkgcache_basic.db
platformProtocol.html
.html
presetTemplateInfos.json
publish_list_article.png
.png
publish_list_post.png
.png
publish_list_video.png
.png
recommend_selected_content_more.json
redbag.png
.png
speedup_accelerator.json
sysconfig
template_list.json
updatesdkcas.bks
userProtocol.html
.html
vertex.sh
windmill.worker.js
.js

Sharing

General

Malware Config

Signatures

Files

Password: infected

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

cn.ninegame.gamemanager.activity.MessageBoxActivity

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

cn.ninegame.gamemanager.activity.OutsideInstallActivity

com.tencent.tauth.AuthActivity

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

cn.ninegame.accountsdk.app.AccountMainActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

Permissions

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

com.pp.assistant.cockroach.CockroachBroadcastReceiver

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.taobao.orange.receiver.OrangeReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.alv.foun.PhoenixBroadcastReceiver

com.ali.user.open.receiver.SessionSyncReceiver

com.taobao.tao.powermsg.PowerMsgReceiver

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

com.pp.assistant.cockroach.service.CockroachService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.ChannelService

org.android.agoo.accs.AgooService

com.taobao.agoo.TaobaoMessageIntentReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

com.r2.diablo.middleware.core.splitinstall.remote.SplitInstallService

anetwork.channel.aidl.NetworkService

com.huawei.hms.support.api.push.service.HmsMsgService

org.android.agoo.huawei.HuaweiPushMessageService

com.alv.foun.service.PhoenixService

com.taobao.trtc.accs.TrtcAccsService

com.alibaba.security.rp.service.DynamicRPJsbridgeService

com.alibaba.security.rp.service.RPService

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.tao.powermsg.outter.PowerMsg4WXService