flytrap | a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c

General

Target
a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c
Size 14.9MB
Sample231220-nffadagdd3
SHA256 a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c
MD5 2a78c75d625b52367c89008c518fc675
SHA1 75aeb3e85a00b69e180e171199afc68e78bc3a89
SHA512 2be93837fc2ef1b2f7aaa74e7ec63cb1926bc326e4599b39c247b361e4f9cb8393473c8b7b3ac20783acd7712625c3ff5bb9c4cc5b573f28e286dc0cd35724f1
SSDEEP 393216:C57MBN9Nk2sweGoU1r5PRpWfhbmDQT3MVRkySO072Vs5obNn:K4BNT3s0oU1r5PLDDnhS5Yn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

flytrap

Malware Config

Signatures

Flytrap family
flytrap

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c

.apk 14.9MB

a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c

SHA256 a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c
MD5 2a78c75d625b52367c89008c518fc675
SHA1 75aeb3e85a00b69e180e171199afc68e78bc3a89
SHA512 2be93837fc2ef1b2f7aaa74e7ec63cb1926bc326e4599b39c247b361e4f9cb8393473c8b7b3ac20783acd7712625c3ff5bb9c4cc5b573f28e286dc0cd35724f1
SSDEEP 393216:C57MBN9Nk2sweGoU1r5PRpWfhbmDQT3MVRkySO072Vs5obNn:K4BNT3s0oU1r5PLDDnhS5Yn
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.ningm.nmxstxt

com.joyreading.app.wxapi.WXEntryActivity

com.joyreading.app.BaseActivity

com.joyreading.app.RankActivity

com.joyreading.app.CategoryActivity

com.joyreading.app.ReadNewActivity

com.joyreading.app.BookDetailNativeActivity

com.joyreading.app.CardListNativeActivity

com.joyreading.app.CategoryDetailActivity

com.joyreading.app.SimpleWebviewActivity

com.joyreading.app.MembershipActivity

com.joyreading.app.StartActivity

android.intent.action.MAIN

com.joyreading.app.RechargeForMembershipActivity

com.joyreading.app.RechargeHistoryActivity

com.joyreading.app.UserHelpActivity

com.joyreading.app.FeedbackActivity

com.joyreading.app.AboutUsActivity

com.joyreading.app.ReadFlavorActivity

com.joyreading.app.ReadHistoryActivity

com.joyreading.app.MembershipNativeActivity

com.joyreading.app.LoginActivity

com.joyreading.app.MainActivity

com.joyreading.app.BookDetailWebActivity

com.joyreading.app.CardListActivity

com.joyreading.app.ContentListActivity

com.joyreading.app.BookShelfManageActivity

com.joyreading.app.BookShelfManageAlertActivity

com.app.ui.activity.NewTabActivity

com.app.ui.activity.UpdateActivity

com.app.ui.activity.Update1Activity

com.app.ui.activity.WebViewActivity

com.app.ui.activity.PictureActivity

com.app.ui.activity.BottomTabPictureActivity

com.app.ui.activity.BigPictureActivity

com.app.ui.activity.SearchScreenshotActivity

com.app.ui.activity.HistoryActivity

com.app.ui.activity.HuaYingUpdateActivity

com.app.ui.activity.SportsNewsActivity

com.app.ui.activity.SportsNavTabActivity

pub.devrel.easypermissions.AppSettingsDialogHolderActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

com.ningm.nmxstxt.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Sharing

General

Malware Config

Signatures

File Explorer

a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c

com.joyreading.app.wxapi.WXEntryActivity

com.joyreading.app.BaseActivity

com.joyreading.app.RankActivity

com.joyreading.app.CategoryActivity

com.joyreading.app.ReadNewActivity

com.joyreading.app.BookDetailNativeActivity

com.joyreading.app.CardListNativeActivity

com.joyreading.app.CategoryDetailActivity

com.joyreading.app.SimpleWebviewActivity

com.joyreading.app.MembershipActivity

com.joyreading.app.StartActivity

com.joyreading.app.RechargeForMembershipActivity

com.joyreading.app.RechargeHistoryActivity

com.joyreading.app.UserHelpActivity

com.joyreading.app.FeedbackActivity

com.joyreading.app.AboutUsActivity

com.joyreading.app.ReadFlavorActivity

com.joyreading.app.ReadHistoryActivity

com.joyreading.app.MembershipNativeActivity

com.joyreading.app.LoginActivity

com.joyreading.app.MainActivity

com.joyreading.app.BookDetailWebActivity

com.joyreading.app.CardListActivity

com.joyreading.app.ContentListActivity

com.joyreading.app.BookShelfManageActivity

com.joyreading.app.BookShelfManageAlertActivity

com.app.ui.activity.NewTabActivity

com.app.ui.activity.UpdateActivity

com.app.ui.activity.Update1Activity

com.app.ui.activity.WebViewActivity

com.app.ui.activity.PictureActivity

com.app.ui.activity.BottomTabPictureActivity

com.app.ui.activity.BigPictureActivity

com.app.ui.activity.SearchScreenshotActivity

com.app.ui.activity.HistoryActivity

com.app.ui.activity.HuaYingUpdateActivity

com.app.ui.activity.SportsNewsActivity

com.app.ui.activity.SportsNavTabActivity

pub.devrel.easypermissions.AppSettingsDialogHolderActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.king.app.updater.service.DownloadService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.internal.AccsJobService

com.taobao.accs.ChannelService$KernelService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.message.UmengDownloadResourceService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

com.umeng.message.NotificationProxyBroadcastReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

android.support.v4.content.FileProvider

com.king.app.updater.provider.AppUpdaterFileProvider

com.umeng.message.provider.MessageProvider

com.liulishuo.okdownload.OkDownloadProvider

cn.jpush.android.service.DataProvider

cn.jpush.android.service.DownloadProvider

Android Permissions

a9ea47477a7cf6bc70f8cbb5a2f453f876585201bb053813f641088198f1470c