99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0

Sharing

Copy URL Twitter E-mail

General

Target

99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0
Size

15.3MB
MD5

77380210e33860e11357856df87ed452
SHA1

8c7fc9466452c75e3650e13c68d27e4fe8cabbcc
SHA256

99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0
SHA512

1c5d2b1185a93b1294438f275a6435acd9553c16ae066cf2d9351f9961ba8d41b005c9287ccc8fdcf06457cac0438275af338fde0546c4a58872e8e344753b29
SSDEEP

393216:0tPLXLC54d6NAwpss5fw5Y4k+bD3MkuXpqrdiyuklOlUa:WPLXD6uwms5fw5hru5SiZklUr

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0
.apk android arch:arm arch:mips64 arch:x64 arch:x86 arch:mips arch:arm64

com.kingsoft.email

com.kingsoft.circle.CircleActivity

Activities

com.kingsoft.wpsaccount.view.WPSAccountActivity

android.intent.action.VIEW

com.kingsoft.email.activity.ComposeActivityEmail

android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
com.android.email.intent.action.REPLY
android.intent.action.SEND
android.nfc.action.NDEF_DISCOVERED

com.kingsoft.email.activity.EventViewer

android.intent.action.VIEW

com.kingsoft.email2.ui.MailboxSelectionActivityEmail

android.appwidget.action.APPWIDGET_CONFIGURE

com.kingsoft.mail.ui.MailboxSelectionActivity

android.appwidget.action.APPWIDGET_CONFIGURE

com.kingsoft.email2.ui.CreateShortcutActivityEmail

android.intent.action.CREATE_SHORTCUT

com.kingsoft.email2.ui.MailActivityEmail

android.intent.action.VIEW
android.intent.action.SEARCH

com.kingsoft.email.activity.setup.AccountSetupBasics

com.kingsoft.email.CREATE_ACCOUNT

com.kingsoft.email.activity.setup.AccountSetupList

com.kingsoft.email.CREATE_ACCOUNT

com.kingsoft.email.activity.setup.AccountSettings

com.kingsoft.email.activity.setup.ACCOUNT_MANAGER_ENTRY
android.intent.action.EDIT
android.intent.action.MANAGE_NETWORK_USAGE

com.kingsoft.email.provider.FolderPickerActivity

android.intent.action.EDIT

com.kingsoft.mail.browse.EmlViewerActivity

android.intent.action.VIEW

com.kingsoft.exchange.EasCertificateRequestor

com.android.emailcommon.REQUEST_CERT

com.kingsoft.exchange.SettingsRedirector

android.intent.action.MANAGE_NETWORK_USAGE

com.kingsoft.pushmessage.NotifyDialogActivity

com.kingsoft.pushmessage.NotifyDialogActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.kingsoft.dynamicloader.proxy.DLActivityProxy

com.ryg.dynamicload.proxy.activity.VIEW

com.kingsoft.dynamicloader.proxy.DLFragmentActivityProxy

com.ryg.dynamicload.proxy.fragmentactivity.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_PROFILE
android.permission.NFC
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_LOGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.MANAGE_DOCUMENTS
android.permission.READ_EXTERNAL_STORAGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.kingsoft.email.permission.READ_ATTACHMENT
android.permission.USE_CREDENTIALS
com.kingsoft.email.permission.ACCESS_PROVIDER
com.kingsoft.email.permission.MIPUSH_RECEIVE

Receivers

com.kingsoft.promotion.PromotionBroadCastReceiver

com.kingsoft.email.PROMOTION_RECEIVER

com.kingsoft.email.NotificationController$NotificationBroadcastReceiver

notification_cancelled

com.kingsoft.email.service.MailSendProgressManager$NotificationCancelReceiver

progress_cancelled

com.kingsoft.email.provider.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.kingsoft.mail.ACTION_NOTIFY_DATASET_CHANGED
com.kingsoft.mail.ACTION_UPDATE_WIDGET
com.kingsoft.mail.ACTION_VALIDATE_ALL_WIDGETS

com.kingsoft.email.service.ImapPushService$NetworkStatusBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.kingsoft.email.service.EmailUpgradeBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.kingsoft.email.service.EmailBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
android.accounts.LOGIN_ACCOUNTS_CHANGED
com.kingsoft.email.action.SILENCE_SETTING_CHANGED
com.kingsoft.email.action.PROCESS_EMAIL
com.kingsoft.email.action.ACTION_SET_ALARM_TIME
com.kingsoft.email.action.ACTION_CANCEL_DELAY
com.kingsoft.email.action.ACTION_DELAY_ALARM
com.kingsoft.email.action.ACTION_BILL_ALARM
com.kingsoft.email.action.ACTION_RECOGNIZE_ALARM
com.android.mail.action.update_notification
android.provider.Telephony.SECRET_CODE

com.kingsoft.email.SecurityPolicy$PolicyAdmin

android.app.action.DEVICE_ADMIN_ENABLED

com.kingsoft.email.statistics.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.kingsoft.mail.mipush.EmailPushNetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.kingsoft.pushmessage.MIReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.kingsoft.email.service.ContactSyncCloudReceiver

com.kingsoft.email.CONTACT_SYNC_CLOUD_RECEIVER

Services

com.kingsoft.email.service.Pop3AuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.service.ImapAuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.service.Pop3SyncAdapterService

android.content.SyncAdapter

com.kingsoft.email.service.LegacyImapSyncAdapterService

android.content.SyncAdapter

com.kingsoft.email.service.PolicyService

com.kingsoft.email.POLICY_INTENT

com.kingsoft.email.service.AccountService

com.kingsoft.email.ACCOUNT_INTENT

com.kingsoft.email.service.ImapService

com.android.email.IMAP_INTENT

com.kingsoft.email.service.Pop3Service

com.android.email.POP3_INTENT

com.kingsoft.email.service.EasAuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.service.EasTestAuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.service.EasAuthenticatorServiceAlternate

android.accounts.AccountAuthenticator

com.kingsoft.email.service.LegacyImapAuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.service.LegacyEasAuthenticatorService

android.accounts.AccountAuthenticator

com.kingsoft.email.EmailIntentService

android.intent.action.LOCALE_CHANGED
com.android.mail.action.RESEND_NOTIFICATIONS
com.android.mail.action.CLEAR_NEW_MAIL_NOTIFICATIONS

com.kingsoft.mail.NotificationActionIntentService

com.android.mail.action.notification.MARK_ALARM
com.android.mail.action.notification.MARK_READ_ALL
com.android.mail.action.notification.MARK_READ
com.android.mail.action.notification.ARCHIVE
com.android.mail.action.notification.DELETE
com.android.mail.action.notification.UNDO
com.android.mail.action.notification.DESTRUCT
com.android.mail.action.notification.UNDO_TIMEOUT
com.android.mail.action.notification.REPLY
com.android.mail.action.notification.REPLY_ALL
com.android.mail.action.notification.FORWARD
com.android.mail.action.notification.RESEND
com.android.mail.action.notification.NO_RESEND
com.kingsoft.email.action.DEALY_EMAIL
com.kingsoft.email.action.CANCEL_EMAIL
com.kingsoft.email.action.CANCEL_BILL_ALARM
com.kingsoft.email.action.CANCEL_RECOGNIZE_ALARM

com.kingsoft.exchange.service.EmailSyncAdapterService

android.content.SyncAdapter
com.kingsoft.email.EXCHANGE_INTENT

com.kingsoft.exchange.service.ContactsSyncAdapterService

android.content.SyncAdapter

com.kingsoft.exchange.service.CalendarSyncAdapterService

android.content.SyncAdapter

com.kingsoft.pushmessage.NotifyService

com.kingsoft.pushmessage.NotifyService

com.kingsoft.email.service.ContactSyncCloudService

com.kingsoft.email.CONTACT_SYNC_CLOUD_SERVICE

com.kingsoft.email.service.CheckSendingMailStateService

com.kingsoft.email.action.CHECK_SENDING_STATE

Android Permissions

99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.READ_PROFILE

android.permission.NFC

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.MANAGE_DOCUMENTS

android.permission.READ_EXTERNAL_STORAGE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.kingsoft.email.permission.READ_ATTACHMENT

android.permission.USE_CREDENTIALS

com.kingsoft.email.permission.ACCESS_PROVIDER

com.kingsoft.email.permission.MIPUSH_RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.kingsoft.email

com.kingsoft.circle.CircleActivity

Activities

com.kingsoft.wpsaccount.view.WPSAccountActivity

com.kingsoft.email.activity.ComposeActivityEmail

com.kingsoft.email.activity.EventViewer

com.kingsoft.email2.ui.MailboxSelectionActivityEmail

com.kingsoft.mail.ui.MailboxSelectionActivity

com.kingsoft.email2.ui.CreateShortcutActivityEmail

com.kingsoft.email2.ui.MailActivityEmail

com.kingsoft.email.activity.setup.AccountSetupBasics

com.kingsoft.email.activity.setup.AccountSetupList

com.kingsoft.email.activity.setup.AccountSettings

com.kingsoft.email.provider.FolderPickerActivity

com.kingsoft.mail.browse.EmlViewerActivity

com.kingsoft.exchange.EasCertificateRequestor

com.kingsoft.exchange.SettingsRedirector

com.kingsoft.pushmessage.NotifyDialogActivity

com.tencent.tauth.AuthActivity

com.kingsoft.dynamicloader.proxy.DLActivityProxy

com.kingsoft.dynamicloader.proxy.DLFragmentActivityProxy

Permissions

Receivers

com.kingsoft.promotion.PromotionBroadCastReceiver

com.kingsoft.email.NotificationController$NotificationBroadcastReceiver

com.kingsoft.email.service.MailSendProgressManager$NotificationCancelReceiver

com.kingsoft.email.provider.WidgetProvider

com.kingsoft.email.service.ImapPushService$NetworkStatusBroadcastReceiver

com.kingsoft.email.service.EmailUpgradeBroadcastReceiver

com.kingsoft.email.service.EmailBroadcastReceiver

com.kingsoft.email.SecurityPolicy$PolicyAdmin

com.kingsoft.email.statistics.DownloadCompleteReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.kingsoft.mail.mipush.EmailPushNetworkReceiver

com.kingsoft.pushmessage.MIReceiver

com.kingsoft.email.service.ContactSyncCloudReceiver

Services

com.kingsoft.email.service.Pop3AuthenticatorService

com.kingsoft.email.service.ImapAuthenticatorService

com.kingsoft.email.service.Pop3SyncAdapterService

com.kingsoft.email.service.LegacyImapSyncAdapterService

com.kingsoft.email.service.PolicyService

com.kingsoft.email.service.AccountService

com.kingsoft.email.service.ImapService

com.kingsoft.email.service.Pop3Service

com.kingsoft.email.service.EasAuthenticatorService

com.kingsoft.email.service.EasTestAuthenticatorService

com.kingsoft.email.service.EasAuthenticatorServiceAlternate

com.kingsoft.email.service.LegacyImapAuthenticatorService

com.kingsoft.email.service.LegacyEasAuthenticatorService

com.kingsoft.email.EmailIntentService

com.kingsoft.mail.NotificationActionIntentService

com.kingsoft.exchange.service.EmailSyncAdapterService

com.kingsoft.exchange.service.ContactsSyncAdapterService

com.kingsoft.exchange.service.CalendarSyncAdapterService

com.kingsoft.pushmessage.NotifyService

com.kingsoft.email.service.ContactSyncCloudService

com.kingsoft.email.service.CheckSendingMailStateService

Android Permissions

99670f3479a3565e50dd2c7106e5ff9205f0b805f96bd90db02593de126d1ad0