756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7

General

Target

756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7
Size

14.5MB
MD5

3da1ae0a456b51fd4274566a913ddad6
SHA1

ba4f9fe3575ee01a083383c51d9f7fb0f11ca641
SHA256

756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7
SHA512

623ee5dcf23aa8a8dee1ad58e0e2103d4aa8960ead456ddf3d877ed49b5c400148430fa3f4bc0ba8b639e7a77fc210f5492c9839d35268b3b9c3b9b683683aad
SSDEEP

196608:9cm6ukTi+bASTMBBU/0pPNtaOJ+2mGJsamXOc/SszWM6al5+ndF5JPcOCB8A12L1:mTupjU/Ilta+E1/tqXafGFDPcOCJf8SI

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7
.apk android arch:arm

wb.gc.ggbond.bblm

wb.gc.candymeng.SplashActivity

Activities

wb.gc.candymeng.SplashActivity

android.intent.action.MAIN

wb.gc.candymeng.WeChatIAP

android.intent.action.VIEW

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.CHINAMOBILE_OMS_GAME

mm.purchasesdk.iapservice.BillingLayoutActivity

wb.gc.ggbond.bblm.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR_IAP
safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.google.purchase.ModuleInit

android.net.conn.CONNECTIVITY_CHANGE

com.google.purchase.Alarmreceiver

com.google.purchase.alarm.action

com.google.purchase.SmsEventReceiver

android.provider.Telephony.SMS_RECEIVED
com.google.purchase.SMS_SENT

com.google.psoffers.PsReceiver

com.google.Ps.Download

com.google.purchase.RepeatReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

cn.play.dserv.DsReceiver

cn.play.dservice
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.google.extra.remind.RemindReceiver

android.net.wifi.STATE_CHANGE
com.Remind.alarm.enable
com.Remind.alarm.repeat

com.tencent.mm.sdk.plugin.MMPluginOAuth$Receiver

com.tencent.mm.sdk.plugin.Intent.ACTION_RESPONSE

com.tencent.mm.sdk.channel.MMessage$Receiver

com.tencent.mm.sdk.channel.Intent.ACTION_MESSAGE

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

Services

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

wb.gc.ggbond.bblm.unicom.wostore.unipay.securityserviceframework

mm.purchasesdk.iapservice.PurchaseService

wb.gc.ggbond.bblm.purchaseservice.BIND

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

wb.gc.ggbond.bblm

wb.gc.candymeng.SplashActivity

Activities

wb.gc.candymeng.SplashActivity

wb.gc.candymeng.WeChatIAP

cn.cmgame.billing.api.GameOpenActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

Permissions

Receivers

com.google.purchase.ModuleInit

com.google.purchase.Alarmreceiver

com.google.purchase.SmsEventReceiver

com.google.psoffers.PsReceiver

com.google.purchase.RepeatReceiver

cn.play.dserv.DsReceiver

com.google.extra.remind.RemindReceiver

com.tencent.mm.sdk.plugin.MMPluginOAuth$Receiver

com.tencent.mm.sdk.channel.MMessage$Receiver

safiap.framework.CheckUpdateReceiver

Services

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

com.unicom.resourcepro

Android Permissions

756089fbfc694337de89c1346a55a056a9dfcf3b150e0a1e687a2757e687c9a7