72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9

General

Target

72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9
Size

8.9MB
MD5

1ea776f41a594d4103e799ccc7848367
SHA1

798fac6f6f606e6c87b6c4a14f75803ea4b3a0a1
SHA256

72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9
SHA512

31bb11f7b930b4399b62780d64353e8f833f99fcd98cd5f4a4d283dccbcac3c6a4a871a3c838b636ee8002348327fbfc8b98269061fde700d22307b33e97252c
SSDEEP

196608:arN/rfkE8UYi7Vgw/4My/6DaaiOpWNa0E/r0hm5x8uyYilbHXTmK:ar1rfkPUYi7VJ4l6DaBc0ar0MpyYixHJ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9
.apk android arch:x64 arch:arm64 arch:x86 arch:mips64 arch:arm arch:mips

com.zigurat.macanband

com.zigurat.macanband.MainActivity

Activities

com.zigurat.macanband.MainActivity

android.intent.action.MAIN
android.intent.action.SEARCH
android.intent.action.VIEW

com.zigurat.macanband.RssActivity

com.zigurat.macanband.RssActivity

com.zigurat.macanband.ListActivity

com.zigurat.macanband.ListActivity

com.zigurat.macanband.SearchActivity

com.zigurat.macanband.SearchActivity

com.zigurat.macanband.PageActivity

com.zigurat.macanband.PageActivity

com.zigurat.macanband.WebActivity

com.zigurat.macanband.WebActivity

com.zigurat.macanband.HtmlActivity

com.zigurat.macanband.HtmlActivity

com.zigurat.macanband.BookmarksActivity

com.zigurat.macanband.BookmarksActivity

com.zigurat.macanband.SettingActivity

com.zigurat.macanband.SettingActivity

com.zigurat.macanband.UpdateActivity

com.zigurat.macanband.UpdateActivity

com.zigurat.macanband.AudioPlayer

com.zigurat.macanband.AudioPlayer

com.zigurat.macanband.JoAppVideoPlayer

com.zigurat.macanband.JoAppVideoPlayer

com.zigurat.macanband.ImageViewActivity

com.zigurat.macanband.ImageViewActivity

com.zigurat.macanband.GalleryActivity

com.zigurat.macanband.GalleryActivity

com.zigurat.macanband.PayActivity

com.zigurat.macanband.PayActivity

com.zigurat.macanband.PayActivityHP

com.zigurat.macanband.PayActivityHP

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_PHONE_STATE

Receivers

co.ronash.pushe.receiver.UpdateReceiver

android.intent.action.PACKAGE_REPLACED

co.ronash.pushe.receiver.BootAndScreenReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

co.ronash.pushe.receiver.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

co.ronash.pushe.receiver.AddReceiver

com.evernote.android.job.ADD_JOB_CREATOR

co.ronash.pushe.receiver.AppChangeReceiver

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_FULLY_REMOVED

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.zigurat.macanband.MyPushListener

co.ronash.pushe.RECEIVE

co.ronash.pushe.service.ScreenStateService

co.ronash.pushe.service.ScreenStateService

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

co.ronash.pushe.fcm.FcmService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

ir.adad.notification.notification.AdadNotificationActionIntentService

ir.adad.notification.actions.adad_notification_action.click
ir.adad.notification.actions.adad_notification_action.delete

Android Permissions

72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files

com.zigurat.macanband

com.zigurat.macanband.MainActivity

Activities

com.zigurat.macanband.MainActivity

com.zigurat.macanband.RssActivity

com.zigurat.macanband.ListActivity

com.zigurat.macanband.SearchActivity

com.zigurat.macanband.PageActivity

com.zigurat.macanband.WebActivity

com.zigurat.macanband.HtmlActivity

com.zigurat.macanband.BookmarksActivity

com.zigurat.macanband.SettingActivity

com.zigurat.macanband.UpdateActivity

com.zigurat.macanband.AudioPlayer

com.zigurat.macanband.JoAppVideoPlayer

com.zigurat.macanband.ImageViewActivity

com.zigurat.macanband.GalleryActivity

com.zigurat.macanband.PayActivity

com.zigurat.macanband.PayActivityHP

Permissions

Receivers

co.ronash.pushe.receiver.UpdateReceiver

co.ronash.pushe.receiver.BootAndScreenReceiver

co.ronash.pushe.receiver.ConnectivityReceiver

co.ronash.pushe.receiver.AddReceiver

co.ronash.pushe.receiver.AppChangeReceiver

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.zigurat.macanband.MyPushListener

co.ronash.pushe.service.ScreenStateService

com.evernote.android.job.gcm.PlatformGcmService

co.ronash.pushe.fcm.FcmService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

ir.adad.notification.notification.AdadNotificationActionIntentService

Android Permissions

72a74cea4ede79a6c16228662044f77dad7fc7f820e857acfe08af06c7dca9d9