7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec

General

Target

7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec
Size

25.1MB
MD5

aa923c45b42f4b64147ef550d1d293e7
SHA1

2b82b4c9029e251e530d012d2c5f0ca20e5f4a80
SHA256

7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec
SHA512

157167effacee81b71effe52c96815ef1f10255d6b92815eaf161288a381996216bb1d20ececc7b6e53d141b1baf215a6459b508cd9e43848b6432e2ea42e73e
SSDEEP

393216:nscdMaHTMLK9KiTTjNBcXN0Gh70w0PbN56jJ8FsbUoN6fYXxys1RpVaIvzIb:sgMxmTBBcd5hf0TkJDwEXss7vaIvzM

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec
.apk android arch:arm arch:mips arch:x86

com.lion.market

com.lion.market.app.InitiateActivity

Activities

com.lion.market.app.InitiateActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.lion.market.app.community.post.CommunityPostMediaActivity

android.intent.action.VIEW

com.lion.market.app.login.auth.AuthAccountAuthorizationActivity

ccpay.account.authorization.com.lion.market

com.lion.market.app.login.auth.OuterGameLoginActivity

ccpay.account.authorization.com.lion.market

com.lion.market.app.login.auth.OuterGotoYXHYMainActivity

ccpay.account.authorization.com.lion.market

com.lion.market.app.user.wallet.QQPayActivity

android.intent.action.VIEW

com.lion.market.app.SchemeActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.lion.market.app.user.MyVideoActivity

com.lion.gotoMyVideo

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

com.ledong.lib.leto.main.FunctionActivity

android.intent.action.VIEW

Permissions

android.permission.KILL_BACKGROUND_PROCESSES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.EXPAND_STATUS_BAR
com.lion.market.permission.JPUSH_MESSAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.CHANGE_NETWORK_STATE
android.permission.FLASHLIGHT
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.USE_CREDENTIALS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.PACKAGE_USAGE_STATS
android.permission.BROADCAST_STICKY
android.permission.EXPAND_STATUS_BAR
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.READ_LOGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.REORDER_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.NETWORK_STACK
android.permission.ACCESS_BACKGROUND_LOCATION

Receivers

com.lion.market.receives.PackageInstalledReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_FIRST_LAUNCH

com.lion.market.push.MyReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.UNREGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.ACTION_RICHPUSH_CALLBACK
cn.jpush.android.intent.CONNECTION

com.lion.market.receives.NotificationActionReceiver

com.lion.market.receives.NotificationActionReceiver.action

com.lion.market.receives.VideoRecordReceiver

com.lion.video.home.press.action
com.lion.video.back.action

com.lion.market.receives.H5OrderParamsReceiver

com.lion.market.receives.H5OrderParamsReceiver

com.lion.market.receives.MainProcessReceiver

com.lion.market.receives.MainProcessReceiver

com.lion.market.network.download.DownloadReceiver

com.lion.market.network.download.DownloadReceiver

com.lion.market.receives.UcDownloadReceiver

com.ucmobile.download.listener

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.mgc.leto.game.base.service.LetoPackageAddReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

Services

com.lion.market.service.InstallAccessibilityService

android.accessibilityservice.AccessibilityService

com.lion.market.service.MyVpnService

android.net.VpnService

com.talkingdata.sdk.TDAntiCheatingService

com.talkingdata.sdk.TDAntiCheatingService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService
bdxadsdk.jar
.apk android

Android Permissions

7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.EXPAND_STATUS_BAR

com.lion.market.permission.JPUSH_MESSAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.FLASHLIGHT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.RECORD_AUDIO

android.permission.RECORD_VIDEO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.USE_CREDENTIALS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.PACKAGE_USAGE_STATS

android.permission.BROADCAST_STICKY

android.permission.EXPAND_STATUS_BAR

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

com.lion.market

com.lion.market.app.InitiateActivity

Activities

com.lion.market.app.InitiateActivity

com.lion.market.app.community.post.CommunityPostMediaActivity

com.lion.market.app.login.auth.AuthAccountAuthorizationActivity

com.lion.market.app.login.auth.OuterGameLoginActivity

com.lion.market.app.login.auth.OuterGotoYXHYMainActivity

com.lion.market.app.user.wallet.QQPayActivity

com.lion.market.app.SchemeActivity

com.tencent.tauth.AuthActivity

com.lion.market.app.user.MyVideoActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

cn.jpush.android.ui.PushActivity

com.ledong.lib.leto.main.FunctionActivity

Permissions

Receivers

com.lion.market.receives.PackageInstalledReceiver

com.lion.market.push.MyReceiver

com.lion.market.receives.NotificationActionReceiver

com.lion.market.receives.VideoRecordReceiver

com.lion.market.receives.H5OrderParamsReceiver

com.lion.market.receives.MainProcessReceiver

com.lion.market.network.download.DownloadReceiver

com.lion.market.receives.UcDownloadReceiver

cn.jpush.android.service.PushReceiver

com.mgc.leto.game.base.service.LetoPackageAddReceiver

Services

com.lion.market.service.InstallAccessibilityService

com.lion.market.service.MyVpnService

com.talkingdata.sdk.TDAntiCheatingService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

Android Permissions

7f40d5068d6f3ec9b2b7dc9f453203478a05ec49f3270229c62cfe594d7fbcec