d9664a1e3b6cb0300b5512548d9aeb42

General

Target

d9664a1e3b6cb0300b5512548d9aeb42
Size

25.2MB
MD5

d9664a1e3b6cb0300b5512548d9aeb42
SHA1

9eb637bf3ebc53a2af10e3e0ede7457023511c46
SHA256

ead2c07d2e1ef772e70ea66807251415d5642a3f244439bd837736f456db33d5
SHA512

3715f782f2dc38b5251b0a0c8f16c1210eebf9971ebb61a6c09a43fa9d393223e0ba6e9081faeb445019ed4d56454675bae5d0b4cbdd09bf075d55fa56a440d7
SSDEEP

786432:WxlbcGb1njjLAnvcSWIJ4r6PjUCUwNb4tDax2zAdHHV:WxlXbl/bcJ4mIDax28dH1

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

d9664a1e3b6cb0300b5512548d9aeb42
.apk android arch:arm

com.blackbean.cnmeach01

.activity.WelcomeActivity

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

.activity.WelcomeActivity

android.intent.action.MAIN

.activity.GetFreeGoldActivity

android.intent.action.VIEW

Permissions

android.permission.READ_LOGS
android.permission.ACCESS_MOCK_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.RESTART_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.DISABLE_KEYGUARD
android.permission.VIBRATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CHANGE_WIFI_STATE
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.INTERNET
android.permission.REORDER_TASKS
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN

Receivers

.net.connection.AppUpdataReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

Services
UPPayPluginEx.apk
.apk android arch:arm

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.webkit.permission.PLUGIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN
alipay_plugin_20120428msp.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

Android Permissions

d9664a1e3b6cb0300b5512548d9aeb42

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_MOCK_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.RESTART_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.INTERNET

android.permission.REORDER_TASKS

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

Sharing

General

Malware Config

Signatures

Files

com.blackbean.cnmeach01

.activity.WelcomeActivity

Activities

com.tencent.tauth.AuthActivity

.activity.WelcomeActivity

.activity.GetFreeGoldActivity

Permissions

Receivers

.net.connection.AppUpdataReceiver

Services

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

Permissions

Services

com.UCMobile.PayPlugin.PayPluginService

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

d9664a1e3b6cb0300b5512548d9aeb42