a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9

General

Target

a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9
Size

14.5MB
MD5

c8b96c9dee8b3b79e34f5bdd91ca52d3
SHA1

a9b586d50e6875d09c5c99ab9e1bb14f998f4d10
SHA256

a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9
SHA512

d82996c84e0fa70ee063ecc06040a9cbfafa46282e4d66f33b5565e9c9fd61919cffcd89f631b3cf86ac069c3fa68d5198588a5859d6ba805c8fcbcb7507537e
SSDEEP

393216:Fh4v9XHpw9ryUzRDqg4HfJoDdh05QZh9I4:F2B0ryUNDzu4GX4

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA

Files

a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9
.apk android arch:arm

com.qiyi.video

com.qiyi.video.StartActivity

Activities

org.qiyi.android.video.activitys.QimoHelpActivity

org.qiyi.android.video.activitys.QimoHelpActivity

com.qiyi.video.StartActivity

android.intent.action.MAIN

org.qiyi.android.video.MainActivity

android.intent.action.VIEW

org.qiyi.android.video.ui.account.PhoneAccountActivity

android.intent.action.qiyivideo.phone.account

org.iqiyi.video.activity.PlayerActivity

android.intent.action.qiyivideo.player
android.intent.action.qiyivideo.player
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.iqiyi.sso.sdk.ui.SleepyAccountAuthenticatorActivity

android.accounts.AccountAuthenticator

com.iqiyi.sso.sdk.ui.UidActivity

android.intent.action.iqiyi.sso

org.qiyi.android.video.ppq.activitys.CloudActivity

notification_action

org.qiyi.android.video.music.MusicTopMainActivity

android.intent.action.VIEW

org.qiyi.android.tickets.activitys.TKInvokeActivity

org.qiyi.android.tickets.recivers.TKInvokeReciver.com.qiyi.video
android.intent.action.VIEW

Permissions

android.permission.WRITE_MEDIA_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.CHANGE_CONFIGURATION
android.permission.WAKE_LOCK
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DISABLE_KEYGUARD
com.qiyi.video.permission.MIPUSH_RECEIVE
android.permission.CAMERA
android.permission.INTERACT_ACROSS_USERS_FULL

Receivers

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

org.qiyi.android.commonphonepad.pushmessage.xiaomi.XiaoMiPushMessageReceive

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

org.qiyi.android.commonphonepad.receiver.StartPlayActivityReceiver

android.intent.action.qiyivideo.mp4player

org.qiyi.android.commonphonepad.receiver.StartPlayerFromWeixinReceiver

android.intent.action.qiyivideo.startplayerfromhtmlweixin

org.qiyi.android.commonphonepad.receiver.StartPlayerFromThirdEntranceReceiver

android.intent.action.qiyivideo.startplayerfromThirdEntrance

org.qiyi.android.commonphonepad.receiver.QiMoBordcast

android.net.conn.CONNECTIVITY_CHANGE

org.qiyi.android.commonphonepad.receiver.NetworkChangeBroadcast

android.net.conn.CONNECTIVITY_CHANGE
android.alarm.happen

org.qiyi.android.video.ppq.activitys.ui.upload.UploadVideoNotificationReceiver

notification_action

Services

org.qiyi.android.commonphonepad.pushmessage.PushMessageService

com.qiyi.video.DownloadService

org.openudid.OpenUDID_service

org.openudid.GETUDID

com.iqiyi.video.download.service.RemoteDownloadService

com.iqiyi.video.download.service.P2PServiceAIDL.com.qiyi.video
com.iqiyi.video.download.service.DownloadServiceAIDL.com.qiyi.video

com.iqiyi.sso.sdk.service.SleepyAccountsService

android.accounts.AccountAuthenticator

com.iqiyi.video.upload.ppq.service.UploadService

com.iqiyi.video.upload.ppq.service.IUploadService
plugin-deploy.jar
.apk android
tv.pps.bi.biplugin.apk
.apk android

tv.pps.bi.biplugin

tv.pps.bi.biplugin.MainActivity

Activities

tv.pps.bi.biplugin.MainActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS

Services

tv.pps.bi.task.ListenService

tv.pps.bi.activity

Android Permissions

a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9

Permissions

android.permission.WRITE_MEDIA_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DISABLE_KEYGUARD

com.qiyi.video.permission.MIPUSH_RECEIVE

android.permission.CAMERA

android.permission.INTERACT_ACROSS_USERS_FULL

Sharing

General

Malware Config

Signatures

Files

com.qiyi.video

com.qiyi.video.StartActivity

Activities

org.qiyi.android.video.activitys.QimoHelpActivity

com.qiyi.video.StartActivity

org.qiyi.android.video.MainActivity

org.qiyi.android.video.ui.account.PhoneAccountActivity

org.iqiyi.video.activity.PlayerActivity

com.iqiyi.sso.sdk.ui.SleepyAccountAuthenticatorActivity

com.iqiyi.sso.sdk.ui.UidActivity

org.qiyi.android.video.ppq.activitys.CloudActivity

org.qiyi.android.video.music.MusicTopMainActivity

org.qiyi.android.tickets.activitys.TKInvokeActivity

Permissions

Receivers

com.xiaomi.push.service.receivers.PingReceiver

org.qiyi.android.commonphonepad.pushmessage.xiaomi.XiaoMiPushMessageReceive

org.qiyi.android.commonphonepad.receiver.StartPlayActivityReceiver

org.qiyi.android.commonphonepad.receiver.StartPlayerFromWeixinReceiver

org.qiyi.android.commonphonepad.receiver.StartPlayerFromThirdEntranceReceiver

org.qiyi.android.commonphonepad.receiver.QiMoBordcast

org.qiyi.android.commonphonepad.receiver.NetworkChangeBroadcast

org.qiyi.android.video.ppq.activitys.ui.upload.UploadVideoNotificationReceiver

Services

org.qiyi.android.commonphonepad.pushmessage.PushMessageService

org.openudid.OpenUDID_service

com.iqiyi.video.download.service.RemoteDownloadService

com.iqiyi.sso.sdk.service.SleepyAccountsService

com.iqiyi.video.upload.ppq.service.UploadService

tv.pps.bi.biplugin

tv.pps.bi.biplugin.MainActivity

Activities

tv.pps.bi.biplugin.MainActivity

Permissions

Services

tv.pps.bi.task.ListenService

Android Permissions

a1e4bd496042b8feea723cb162880ba1e26e90ab586970967497bc3b222202d9