General

  • Target

    7dec74be86d1952ddb9e0d19d8e17da6c5eb2beee4b1e029b847c13e6a77a05b

  • Size

    18.8MB

  • MD5

    33a9bb88b6a88d4f28f29dc47442ec3f

  • SHA1

    271647b62805404a9debe495a32d6b2079d43f78

  • SHA256

    7dec74be86d1952ddb9e0d19d8e17da6c5eb2beee4b1e029b847c13e6a77a05b

  • SHA512

    2e5137596562a816de187c74bd6e7177c0b1c8eacf76a6875dc933b559cfdc44e81e75897f99bfbc1a0feeda4eeb001df0fadb0530611c0de9c542431944ede9

  • SSDEEP

    393216:bxAJ8FlsYD+f3qq0ES0HmGvzz/v75FKvfhK4z/D7mp0MU+hf4q:yJ84Ye33H8izz/zPglz/GaGH

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 7dec74be86d1952ddb9e0d19d8e17da6c5eb2beee4b1e029b847c13e6a77a05b
    .apk android arch:arm

    com.xunxin.calendarAlarm

    com.xunxin.calendarAlarm.MainActivity


  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android arch:arm64 arch:arm

Android Permissions

7dec74be86d1952ddb9e0d19d8e17da6c5eb2beee4b1e029b847c13e6a77a05b

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.REQUEST_INSTALL_PACKAGES

com.xunxin.calendarAlarm.permission.MIPUSH_RECEIVE

android.permission.VIBRATE

com.meizu.flyme.push.permission.RECEIVE

com.xunxin.calendarAlarm.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.xunxin.calendarAlarm.permission.C2D_MESSAGE

com.xunxin.calendarAlarm.permission.MIPUSH_RECEIVE

android.permission.READ_PHONE_STATE

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_EXTERNAL_STORAGE

com.xunxin.calendarAlarm.permission.PROCESS_PUSH_MSG

com.xunxin.calendarAlarm.permission.PUSH_PROVIDER

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA