01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20

General

Target

01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20
Size

6.3MB
MD5

8a864a4ee280010cd8ce1321a2fb5a20
SHA1

73c85e341f83f723d7c70962eac8d64ed601c13d
SHA256

01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20
SHA512

d6c7c5436ba1c34f7a616265cf65c4f3f9c90ee1464998554c7720ebd722492df3e68ed853f3c49aaf964c599f8a44ef14e6cec8212da379935f5ce60b4f16a1
SSDEEP

98304:DdT+9FMEQqza7h3knLswm0tRxN5IGnUnPnsEqZwUI8hBxM8J/FVg8Fi8J/FVg8Mi:EoEQEGh3kowm0xpUf5q1rnpTP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20
.apk android arch:arm arch:x86

com.yaochufa.app

com.yaochufa.app.AppStart

Activities

com.yaochufa.app.AppStart

android.intent.action.MAIN
android.intent.action.VIEW

com.yaochufa.app.ThemeDetiaActivity

android.intent.action.view.promotion

com.yaochufa.app.MyTabActivity

android.intent.action.view.promotion

com.yaochufa.app.NewHotialDetialActivity

android.intent.action.view.promotion

com.yaochufa.app.ProductSearchActivity

android.intent.action.view.promotion

com.yaochufa.app.TAGActivity

android.intent.action.view.promotion

com.yaochufa.app.PropertyActivity

android.intent.action.view.promotion

com.yaochufa.app.BannerWebViewActivity

android.intent.action.view.promotion

com.yaochufa.app.NewListPerWeekActivity

android.intent.action.view.promotion

com.yaochufa.app.PanicbuyingActivity

android.intent.action.view.promotion

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

com.yaochufa.app.RichProductDetailActivity

android.intent.action.view.promotion

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_GPS
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.RECEIVE_USER_PRESENT
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
org.simalliance.openmobileapi.SMARTCARD
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_SETTINGS
com.yaochufa.app.permission.MIPUSH_RECEIVE

Receivers

com.yaochufa.app.broadcast.NetworkStatusReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.yaochufa.app.broadcast.MiPushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.yaochufa.app.broadcast.AutoWakeReceiver

com.yaochufa.app.action.wakeup
android.intent.action.BOOT_COMPLETED

Services
alipay_msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_GPS

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.RECEIVE_USER_PRESENT

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

org.simalliance.openmobileapi.SMARTCARD

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_SETTINGS

com.yaochufa.app.permission.MIPUSH_RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.yaochufa.app

com.yaochufa.app.AppStart

Activities

com.yaochufa.app.AppStart

com.yaochufa.app.ThemeDetiaActivity

com.yaochufa.app.MyTabActivity

com.yaochufa.app.NewHotialDetialActivity

com.yaochufa.app.ProductSearchActivity

com.yaochufa.app.TAGActivity

com.yaochufa.app.PropertyActivity

com.yaochufa.app.BannerWebViewActivity

com.yaochufa.app.NewListPerWeekActivity

com.yaochufa.app.PanicbuyingActivity

cn.sharesdk.framework.ShareSDKUIShell

com.yaochufa.app.RichProductDetailActivity

Permissions

Receivers

com.yaochufa.app.broadcast.NetworkStatusReceiver

com.yaochufa.app.broadcast.MiPushMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.yaochufa.app.broadcast.AutoWakeReceiver

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

01421f3783276a525f1a5b8b87de98acf83381e141acfa6702477536b37eaf20