93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891

General

Target

93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891
Size

28.0MB
MD5

1ee6a30174bc28617eff5f8800de5750
SHA1

565cc3dfe2982ae86ba44230b397ba163e2505b4
SHA256

93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891
SHA512

2e3f7de6fd6131e4adca50ff76a3031dc7742f0dbabcd81a6be5e22cd126753fb27f7601c94b948d6563e5358b2f20ff19b897788afc6fd9472ba1b2aa79b8e4
SSDEEP

786432:68abZJB5r59M5/15eHVKCwTPg0l6C8OyG/NDa:+ZJfrfga1KCwTo0l6MT1a

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
sample	upx

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891
.apk android arch:arm

com.szrh.zzxzcqsj.mi

cn.cmgame.billing.api.GameOpenActivity

Activities

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

android.intent.action.MAIN

com.google.sdk.GeneralActivity

android.intent.action.VIEW

com.yzn.vnhw.vllfug.a.a.d.b

com_yzn_vnhw.activity

cn.egame.terminal.sdk.EgameCoreActivity

android.intent.action.MAIN

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.MAIN
android.intent.action.CHINAMOBILE_OMS_GAME

Permissions

android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SEND_SMS
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.READ_SMS
com.android.launcher.permission.INSTALL_SHORTCUT
com.xiaomi.sdk.permission.PAYMENT
android.permission.READ_CONTACTS
android.permission.CHANGE_NETWORK_STATE
com.android.launcher.permission.WRITE_SETTINGS
android.permission.RECEIVE_SMS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_FINAL_LOCATION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.android.launcher.permission.READ_SETTINGS
android.permission.CALL_PHONE
android.permission.GET_PACKAGE_SIZE

Receivers

com.google.sdk.SMSReceiver

android.provider.Telephony.SMS_RECEIVED

com.unicom.xiaowo.SecurityReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
com.unicom.xiaowo.security.RECEIVER_CMD

com.google.sdk.PPSReceiver

android.intent.action.PPS
android.net.wifi.STATE_CHANGED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.yzn.vnhw.vllfug.a.a.d.c

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

com.mt.app.MtReceiver

android.intent.action.SIM_STATE_CHANGED
com.mt.intent.aciton.MtReceiver

cn.egame.terminal.sdk.EgameCoreReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
cn.egame.terminal.sdk.RECEIVER_CMD

Services

com.yzn.vnhw.vllfug.a.a.d.d

com_yzn_vnhw.service

com.yzn.vnhw.vllfug.a.a.d.e

com_yzn_vnhw.wservice

com.yzn.vnhw.vllfug.a.a.d.a

com_yzn_vnhw.iservice

cn.egame.terminal.sdk.EgameCoreService

cn.egame.terminal.sdk.SERVICE_CMD
MiGameCenterSDKService.apk
.apk android arch:arm arch:arm64

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.actlayout.ViewForChooseAccountType

Activities

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_LOGIN

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_QUICK_LOGIN

com.xiaomi.passport.ui.WelcomeActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_WELCOME

com.xiaomi.passport.ui.NotificationActivity

com.xiaomi.account.action.NOTIFICATION

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_REG

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_AREA_CODE

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.account.action.XIAOMI_ACCOUNT_UNACTIVATED

com.xiaomi.passport.ui.LicenseActivity

com.xiaomi.account.action.VIEW_LICENSE

Permissions

android.permission.INTERNET
android.permission.READ_LOGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.CHANGE_WIFI_STATE
com.xiaomi.channel.GAME_SERVICE_PERMISSION
com.xiaomi.gamecenter.sdk.service.permission.MIPUSH_RECEIVE
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CALL_PHONE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
com.xiaomi.permission.CLOUD_MANAGER
android.permission.CAMERA
android.permission.ACCESS_COARSE_LOCATION
com.xiaomi.xmsf.permission.PAYMENT
android.permission.BLUETOOTH
android.permission.ACCESS_FINE_LOCATION

Receivers

com.xiaomi.gamecenter.sdk.service.GlobalReceiver

com.xiaomi.gamecenter.sdk.report
android.accounts.LOGIN_ACCOUNTS_CHANGED
com.xiaomi.gamecenter.sdk.updatesdk
com.xiaomi.gamecenter.sdk.activity.msg
com.xiaomi.gamecenter.sdk.report.jarinit

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

Services

com.xiaomi.gamecenter.sdk.Service4SDK

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowService

com.xiaomi.gamecenter.sdk.float

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowActService

com.xiaomi.gamecenter.sdk.float.act

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowConfigService

com.xiaomi.gamecenter.sdk.service.float.config

com.xiaomi.licensinglibrary.LicenseService

com.xiaomi.licensinglibrary.authfileinfo

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.accounts.AccountAuthenticator

com.xiaomi.payment.PaymentService

miuipub.intent.action.PAYMENT
unicom_channel_resource.dat
.apk android

com.xiaowo.resourcepro
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891

Permissions

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_SMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.READ_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.xiaomi.sdk.permission.PAYMENT

android.permission.READ_CONTACTS

android.permission.CHANGE_NETWORK_STATE

com.android.launcher.permission.WRITE_SETTINGS

android.permission.RECEIVE_SMS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINAL_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.android.launcher.permission.READ_SETTINGS

android.permission.CALL_PHONE

android.permission.GET_PACKAGE_SIZE

Sharing

General

Malware Config

Signatures

Files

com.szrh.zzxzcqsj.mi

cn.cmgame.billing.api.GameOpenActivity

Activities

cn.cmgame2_0.launch_model.shortcut.main.MiguHomeActivity

com.google.sdk.GeneralActivity

com.yzn.vnhw.vllfug.a.a.d.b

cn.egame.terminal.sdk.EgameCoreActivity

cn.cmgame.billing.api.GameOpenActivity

Permissions

Receivers

com.google.sdk.SMSReceiver

com.unicom.xiaowo.SecurityReceiver

com.google.sdk.PPSReceiver

com.yzn.vnhw.vllfug.a.a.d.c

com.mt.app.MtReceiver

cn.egame.terminal.sdk.EgameCoreReceiver

Services

com.yzn.vnhw.vllfug.a.a.d.d

com.yzn.vnhw.vllfug.a.a.d.e

com.yzn.vnhw.vllfug.a.a.d.a

cn.egame.terminal.sdk.EgameCoreService

com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.ui.actlayout.ViewForChooseAccountType

Activities

com.xiaomi.passport.ui.LoginActivity

com.xiaomi.passport.ui.QuickLoginActivity

com.xiaomi.passport.ui.WelcomeActivity

com.xiaomi.passport.ui.NotificationActivity

com.xiaomi.passport.ui.RegisterAccountActivity

com.xiaomi.passport.ui.AreaCodePickerActivity

com.xiaomi.passport.ui.AccountUnactivatedActivity

com.xiaomi.passport.ui.LicenseActivity

Permissions

Receivers

com.xiaomi.gamecenter.sdk.service.GlobalReceiver

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

Services

com.xiaomi.gamecenter.sdk.Service4SDK

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowService

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowActService

com.xiaomi.gamecenter.sdk.ui.mifloat.MiFloatWindowConfigService

com.xiaomi.licensinglibrary.LicenseService

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.payment.PaymentService

com.xiaowo.resourcepro

com.unicom.resourcepro

Android Permissions

93aa53fb384f4bf24535facdaa017e1a8b7359c3556fd2e3fb0dceec76b58891