01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1

General

Target

01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1
Size

20.5MB
MD5

e56408f4c96f9189fe5959e9a36aa661
SHA1

a1162316b3a7327692e6d6117f0db2ebf5c4ade6
SHA256

01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1
SHA512

84eeefca83531d640ca7a0784f994751b8e9404da4deb57e434334f2d2cccdcd4dc576dcdf5e2edfcf6bfd914656e84e5bc823857a56add188b784ff448df671
SSDEEP

393216:ErUkekpbEkWEOvLchLQIBuHoUwti3JkqHtiYJk1ttiSCJkfTtiCMJkZz:ETeKEhzclQIBuHzwtqtatXxtb

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1
.apk android arch:arm arch:mips arch:x86

com.zxh.soj

com.zxh.soj.activites.home.MainActivity

Activities

com.zxh.soj.activites.home.MainActivity

android.intent.action.MAIN

com.zxh.soj.activites.home.MainMenu

android.intent.action.VIEW

com.zxh.soj.chat.UserSingleChatActivity

com.zxh.soj.chat.UserSingleChatActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_GPS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.CAMERA
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECEIVE_SMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_USER_PRESENT
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.authentication.HW_ACCESS_AUTH_SERVICE

Receivers

com.zxh.soj.reciver.OffLinePushReciver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.media.RINGER_MODE_CHANGED
zxh.offline.notify.MSG
zxh.user.killapp

com.zxh.soj.service.AutoService

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF

com.zxh.soj.reciver.SessionReciver

com.farsunset.cim.CONNECTION_CLOSED
com.farsunset.cim.CONNECTION_FAILED
com.farsunset.cim.UNCAUGHT_EXCEPTION
com.farsunset.cim.CONNECTION_SUCCESS
com.farsunset.cim.SENT_SUCCESS
android.intent.action.PACKAGE_RESTARTED

com.zxh.common.receiver.CustomCIMMessageReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.farsunset.cim.MESSAGE_RECEIVED
com.farsunset.cim.SENT_FAILED
com.farsunset.cim.SENT_SUCCESS
com.farsunset.cim.CONNECTION_CLOSED
com.farsunset.cim.CONNECTION_FAILED
com.farsunset.cim.CONNECTION_SUCCESS
com.farsunset.cim.REPLY_RECEIVED
com.farsunset.cim.CONNECTION_STATUS

Services

com.farsunset.cim.client.android.CIMPushService

com.farsunset.cim.client.android.CIMPushService
ServiceSaved.apk
.apk android

com.soj.saveservice

com.service.saved.Main

Activities

com.service.saved.Main

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.service.saved.BBReceiver

android.intent.action.QUICKBOOT_POWERON
android.intent.action.BOOT_COMPLETED

Services

com.service.saved.Service1

com.service.saved.Service1

Android Permissions

01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_GPS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECEIVE_SMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.authentication.HW_ACCESS_AUTH_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.zxh.soj

com.zxh.soj.activites.home.MainActivity

Activities

com.zxh.soj.activites.home.MainActivity

com.zxh.soj.activites.home.MainMenu

com.zxh.soj.chat.UserSingleChatActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.zxh.soj.reciver.OffLinePushReciver

com.zxh.soj.service.AutoService

com.zxh.soj.reciver.SessionReciver

com.zxh.common.receiver.CustomCIMMessageReceiver

Services

com.farsunset.cim.client.android.CIMPushService

com.soj.saveservice

com.service.saved.Main

Activities

com.service.saved.Main

Permissions

Receivers

com.service.saved.BBReceiver

Services

com.service.saved.Service1

Android Permissions

01a1492e78e87933c9073a11b181d579c84f2eec4a476d8759a1dd802214b6d1