a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd

General

Target

a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd
Size

5.6MB
MD5

f9223450820c14e044249e16a5c9443b
SHA1

fe7f58ba9ae3da2f1794d399e4d897c34a04fcbf
SHA256

a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd
SHA512

3839b3e1faf8322e7204800383c2bbdf1e71bcaf4005075ca3867bec380dab9a08a291ec27e5c94e4aee1f97357c2c4c945b12777b197fa4fc8a853640792fa6
SSDEEP

98304:mbzBU25Cp4Vz+X+2Q+z/K9gSjPlmDWTd9zIvruq5LyFy6tk/8fP6VbX3pyh:mbzBU25CpGk+2QeKeRDGyRyFEZbX3Yh

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd
.apk android arch:arm arch:mips arch:x86

com.gf.guessphrase.fcktccy

.Dlwx_GuessPhraseActivity

Activities

.Dlwx_GuessPhraseActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.RESTART_PACKAGES
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS

Receivers

dianjie.cn.Kcng

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

com.tencent.qiyiwc.net.GFCCY

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

com.myp.cy.net.GFBD

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

Services

Android Permissions

a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.RESTART_PACKAGES

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

com.gf.guessphrase.fcktccy

.Dlwx_GuessPhraseActivity

Activities

.Dlwx_GuessPhraseActivity

Permissions

Receivers

dianjie.cn.Kcng

com.tencent.qiyiwc.net.GFCCY

com.myp.cy.net.GFBD

Services

Android Permissions

a0fdbb2126254c9a60ccef6d1dbbd378633c876606cb2df47c76a703d7f23edd