7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b

General

Target

7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b
Size

4.9MB
MD5

d732e823b0e5b2c6922f2f828be6c4c2
SHA1

42735d99fda82a672024269785ca4d7e5665de27
SHA256

7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b
SHA512

8592f9e6a1bf7041b2569e01cf7521fcaf7d79d1045ac05b2e77bc3ae61a5c9330dd62ed53c723816b32f6dd6a785175136a796dcaee0bfa3d72530268569858
SSDEEP

98304:uAj6IUDaZX1zRr7ykdlHOrwqRQ/ydaMwafNHzH/NTTeX+ij:uw6JGZFHYjPdSUdzH/h6X5j

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b
.apk android arch:arm

com.jianwan.qmxyjfsb.mly

com.jianwan.h5.SplashActivity

Activities

com.jianwan.h5.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.wancms.sdk.ui.WeChatPayActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.shengpay.express.smc.ExpressSmcClientActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.MODE_WORLD_READABLE
android.permission.RECEIVE_SMS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

com.wancms.sdk.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

Services

com.snowfish.a.a.s.ABGSvc

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

android.intent.action.RESPOND_VIA_MESSAGE
res.bin
.apk android

Android Permissions

7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MODE_WORLD_READABLE

android.permission.RECEIVE_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.jianwan.qmxyjfsb.mly

com.jianwan.h5.SplashActivity

Activities

com.jianwan.h5.SplashActivity

com.tencent.tauth.AuthActivity

com.wancms.sdk.ui.WeChatPayActivity

com.shengpay.express.smc.ExpressSmcClientActivity

Permissions

Receivers

com.wancms.sdk.AppRegister

Services

com.snowfish.a.a.s.ABGSvc

com.wancms.sdk.WancmsSDKAppService

Android Permissions

7de12be62c33ee3ee8c9a33e40137ad7c4f3f377a8c3d50c36332f3cb41a827b