94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac

General

Target

94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac
Size

18.5MB
MD5

107d073bb37245e3cf0201e2c7db21a2
SHA1

424ed1b6385cebc4f3d80d1047fd5c8e087732e9
SHA256

94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac
SHA512

809b6a38eba0794f3c4d0fdd6be972abca159200c14b3dd350e6c1465aa2f165ae832a553d1a156869321181317b494ecf75b6fffd9706cbbae6ecdbda0b1b80
SSDEEP

393216:x9sVmZO6hstVQq9hlUpmOURPrJHwGJ4S/PNXoJxCxTWZopYeCTbP1qJ7XRQvyu6j:EVmMTnhlWmOarJHRGmPNXoJxKPm4J7Xp

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac
.apk android arch:arm arch:x86

com.yangsu.mall

com.yangsu.mall.activity.SplashActivity

Activities

com.yangsu.mall.activity.SplashActivity

android.intent.action.MAIN

com.mob.tools.MobUIShell

android.intent.action.VIEW

com.yangsu.mall.message.MsgMainActivity

android.intent.action.VIEW

com.yangsu.mall.rong.activity.ConversationListActivity

android.intent.action.VIEW

com.yangsu.mall.rong.activity.ConversationActivity

android.intent.action.VIEW

com.yangsu.mall.rong.activity.SubConversationListActivity

android.intent.action.VIEW

com.yangsu.mall.ygame.GameContentActivity

android.intent.action.VIEW

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.MultiVideoCallActivity

io.rong.intent.action.voip.MULTIVIDEO

io.rong.imkit.SingleCallActivity

io.rong.intent.action.voip.SINGLEVIDEO
io.rong.intent.action.voip.SINGLEAUDIO

io.rong.imkit.MultiAudioCallActivity

io.rong.intent.action.voip.MULTIAUDIO

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_CONFIGURATION
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.READ_LOGS
android.permission.CHANGE_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.BROADCAST_STICKY
android.permission.READ_EXTERNAL_STORAGE
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.GET_ACCOUNTS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.PROCESS_OUTGOING_CALLS

Receivers

com.yangsu.mall.receivers.DownloadVersionReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.yangsu.mall.rong.SealNotificationReceiver

io.rong.push.intent.MESSAGE_ARRIVED
io.rong.push.intent.MI_MESSAGE_ARRIVED
io.rong.push.intent.MESSAGE_CLICKED
io.rong.push.intent.MI_MESSAGE_CLICKED

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.yangsu.mall.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

io.rong.imkit.RongCallReceiver

io.rong.intent.action.UI_READY
io.rong.intent.action.SDK_INIT
io.rong.intent.action.SDK_CONNECTED

io.rong.push.PushReceiver

io.rong.push.intent.action.HEART_BEAT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.umeng.message.UmengService

com.yangsu.mall.intent.action.START
com.yangsu.mall.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.unregistercallback.action
com.umeng.message.message.handler.action
com.umeng.message.autoupdate.handler.action

Android Permissions

94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.READ_LOGS

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.BROADCAST_STICKY

android.permission.READ_EXTERNAL_STORAGE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.PROCESS_OUTGOING_CALLS

Sharing

General

Malware Config

Signatures

Files

com.yangsu.mall

com.yangsu.mall.activity.SplashActivity

Activities

com.yangsu.mall.activity.SplashActivity

com.mob.tools.MobUIShell

com.yangsu.mall.message.MsgMainActivity

com.yangsu.mall.rong.activity.ConversationListActivity

com.yangsu.mall.rong.activity.ConversationActivity

com.yangsu.mall.rong.activity.SubConversationListActivity

com.yangsu.mall.ygame.GameContentActivity

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.MultiVideoCallActivity

io.rong.imkit.SingleCallActivity

io.rong.imkit.MultiAudioCallActivity

Permissions

Receivers

com.yangsu.mall.receivers.DownloadVersionReceiver

com.yangsu.mall.rong.SealNotificationReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

io.rong.imkit.RongCallReceiver

io.rong.push.PushReceiver

Services

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

Android Permissions

94fc0cae8be175f1d457215b714885a1f046c0d23bd9f5d6ef3a9685d688aeac