8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd

General

Target

8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd
Size

6.0MB
MD5

f98a258bb4126046748c499933dbbf21
SHA1

172e8b6cbc3bd2dd97c81c71536e52bd0132c668
SHA256

8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd
SHA512

ee3723067ddeb300d058f2900ab3c432d091ad6518d0c2737d15dda995ea762f47b5fda9354f86bc6fa9baa8f7f77ca542f3b4832166a14cebfaf428475a021b
SSDEEP

196608:v08ndkr6zVubCk10It7sV8cT3ufXoMtMmDtuciy:88dBcWk15s+cSw8MmDtuciy

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd
.apk android arch:arm arch:x64

com.qianlima.yfb

com.qianlima.yfb.ui.AppStartActivity

Activities

com.qianlima.yfb.ui.AppStartActivity

android.intent.action.MAIN
android.app.action.VIEW

com.qianlima.yfb.wxapi.WXPayEntryActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
getui.permission.GetuiService.com.qianlima.yfb
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.qianlima.yfb.permission.MIPUSH_RECEIVE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.REQUEST_INSTALL_PACKAGES
com.qianlima.yfb.permission.PROCESS_PUSH_MSG
com.meizu.flyme.push.permission.RECEIVE
com.qianlima.yfb.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
com.qianlima.yfb.permission.C2D_MESSAGE
android.permission.READ_LOGS

Receivers

com.qianlima.yfb.service.AppStartReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.qianlima.yfb.push.xiaomi.XiaomiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.qianlima.yfb.push.huawei.HuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.intent.action.PUSH_DELAY_NOTIFY

com.qianlima.yfb.push.huawei.HuaweiPushReceiverEx

com.huawei.android.push.intent.CLICK
com.huawei.android.push.intent.OPENED
com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH_STATE

com.qianlima.yfb.push.meizu.MeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

Services

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.coloros.mcssdk.PushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

Android Permissions

8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd

Permissions

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

getui.permission.GetuiService.com.qianlima.yfb

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.qianlima.yfb.permission.MIPUSH_RECEIVE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

com.qianlima.yfb.permission.PROCESS_PUSH_MSG

com.meizu.flyme.push.permission.RECEIVE

com.qianlima.yfb.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.qianlima.yfb.permission.C2D_MESSAGE

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

com.qianlima.yfb

com.qianlima.yfb.ui.AppStartActivity

Activities

com.qianlima.yfb.ui.AppStartActivity

com.qianlima.yfb.wxapi.WXPayEntryActivity

Permissions

Receivers

com.qianlima.yfb.service.AppStartReceiver

com.igexin.sdk.PushReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.qianlima.yfb.push.xiaomi.XiaomiPushReceiver

com.qianlima.yfb.push.huawei.HuaweiPushReceiver

com.qianlima.yfb.push.huawei.HuaweiPushReceiverEx

com.qianlima.yfb.push.meizu.MeizuPushReceiver

com.meizu.cloud.pushsdk.SystemReceiver

Services

com.igexin.sdk.PushService

com.coloros.mcssdk.PushService

Android Permissions

8a9a91610bb6134baf8bfd6b8b05c18ecca4128f51e19d26e956f9e9b356c4cd