75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e

General

Target

75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e
Size

5.0MB
MD5

5a1201789efc2a3f059f9218732b7beb
SHA1

68e9daec1e1c262e3b13b01ac883f53f512feedb
SHA256

75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e
SHA512

87dca7b18a6d88ef5974fe1c519841ad48f6a09ea5c7b105a14827809b033ce1edb1faf9dea1c88d721c56a695b1b103ba34ce5da33e23dffde4254271343fe0
SSDEEP

98304:asVnanCy55PfclWxQstY9ZJMLcCMZo12uNvQUVHvxKvh1P57cR8CXL7yQBz9Onrb:HGLfMVs8nJv7cRdyQCpgno

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e
.apk android arch:arm

com.fenbi.android.servant

.activity.portal.WelcomeActivity

Activities

.activity.portal.WelcomeActivity

android.intent.action.MAIN
android.intent.action.VIEW

.activity.portal.UniHomeActivity

android.intent.action.VIEW

.activity.portal.GZHomeActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.READ_CONTACTS
android.permission.WAKE_LOCK
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION

Receivers

com.fenbi.android.common.misc.GlobalReceiver

android.net.conn.CONNECTIVITY_CHANGE

.notify.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

.alarm.AlarmReceiver

android.intent.action.BOOT_COMPLETED
com.fenbi.android.servant.alarm.Fire

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

Services

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE
20121018133442msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
plugin-deploy.jar
.apk android

Android Permissions

75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e

Permissions

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

Sharing

General

Malware Config

Signatures

Files

com.fenbi.android.servant

.activity.portal.WelcomeActivity

Activities

.activity.portal.WelcomeActivity

.activity.portal.UniHomeActivity

.activity.portal.GZHomeActivity

Permissions

Receivers

com.fenbi.android.common.misc.GlobalReceiver

.notify.PushMessageReceiver

.alarm.AlarmReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

Services

com.baidu.android.pushservice.PushService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

75744255a7f26005f3465a17a1db86bb8ad785c1ea44a9a76980d0511d2ceb8e