01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3

General

Target

01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3
Size

7.9MB
MD5

f019520616bbad5f4a4768158a04d235
SHA1

4f981f23d7b4fc3146ffeaa68c9b832e43162da8
SHA256

01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3
SHA512

67fec256702334535114bd24e4cfb24c90af7594b4c40edaddc6f5e74c315840ddb0f26281fff25dbce97c737dd93838f21e1eb2dce8122efe4b6f02d02eee41
SSDEEP

196608:C8unVDpX5P64bBCNaspkBWBcXMEF+4s3IX:2VDn64kasSWsywX

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA

Files

01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3
.apk android arch:arm arch:mips

com.netease.railwayticket

.activity.SplashActivity

Activities

.activity.MainActivity2

android.intent.action.VIEW

.activity.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

.activity.NTESLoginActivity

android.intent.action.VIEW

.activity.AwardListActivity

android.intent.action.VIEW

.activity.CouponListActivity

android.intent.action.VIEW

.activity.ShareNewActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.netease.airticket.activity.AirTicketBuyActivity

android.intent.action.VIEW

com.netease.airticket.activity.AirSpecialTicketActivity

android.intent.action.VIEW

com.netease.airticket.activity.AirStationResutlActivity

android.intent.action.VIEW

com.netease.airticket.activity.AirOrderListActivity

android.intent.action.VIEW

com.netease.airticket.activity.AirOrderDetailActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CALL_PHONE
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_SETTINGS
com.netease.railwayticket.permission.MIPUSH_RECEIVE
com.netease.railwayticket.permission.PUSH_CENTER

Receivers

.receiver.AlarmReceiver

com.netease.alarmAtEighteen
com.netease.alarmTen
com.netease.alarmFive

.receiver.WXRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

.receiver.YXRegister

im.yixin.sdk.api.Intent.ACTION_REFRESH_YXAPP

com.netease.railwayticket.receiver.PushMessageReceiver

com.netease.railwayticket.pushcenter.intent.RECEIVER

com.netease.pushcenter.travel.host.service.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.netease.ticket.pushcenter.ACTION_TRIGGER
android.intent.action.PACKAGE_REMOVED

com.netease.pushcenter.travel.xiaomi.XiaomiMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

Services

com.netease.pushcenter.travel.host.service.PushService

com.netease.ticket.pushcenter.ACTION_BOOT
huoche-1.0.17-release.apk
.apk android

com.netease.huoche

com.netease.huoche.activity.MainActivity2

Activities

com.netease.huoche.activity.MainActivity2

android.intent.action.MAIN
android.intent.action.VIEW

com.netease.huoche.activity.SplashActivity

android.intent.action.VIEW

com.netease.huoche.activity.StationListActivity

android.intent.action.MAIN

com.netease.huoche.activity.DateActivity

android.intent.action.MAIN

com.netease.huoche.activity.TrainbyStation12306Activity

android.intent.action.VIEW

com.netease.huoche.activity.TrainBuyActivity

android.intent.action.VIEW

com.netease.huoche.activity.TrainGrabActivity

android.intent.action.VIEW

com.netease.huoche.activity.NTESLoginActivity

android.intent.action.VIEW

com.netease.huoche.activity.AddContactActivity

android.intent.action.MAIN

com.netease.huoche.activity.PassengerManageActivity

android.intent.action.MAIN

com.netease.huoche.activity.PhoneVerifyActivity

android.intent.action.MAIN

com.netease.huoche.activity.OrderListTrainActivity

android.intent.action.VIEW

com.netease.huoche.activity.GrabLoginActivity

android.intent.action.VIEW

com.netease.huoche.activity.AddGrabActivity

android.intent.action.VIEW

.activity.CouponListActivity

android.intent.action.VIEW

com.netease.huoche.activity.OrderGrabDetailActivity

android.intent.action.VIEW

Permissions

android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CALL_PHONE
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_SETTINGS

Receivers

com.netease.huoche.receiver.AlarmReceiver

com.netease.alarmAtEighteen
com.netease.alarmTen
com.netease.alarmFive
ntesfeedback-1.3.2-release.apk
.apk android

com.common.ntesfeedback

.activities.ServiceActivity

Activities

.activities.ServiceActivity

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.READ_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CALL_PHONE
android.permission.GET_TASKS

Android Permissions

01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3

Permissions

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_SETTINGS

com.netease.railwayticket.permission.MIPUSH_RECEIVE

com.netease.railwayticket.permission.PUSH_CENTER

Sharing

General

Malware Config

Signatures

Files

com.netease.railwayticket

.activity.SplashActivity

Activities

.activity.MainActivity2

.activity.SplashActivity

.activity.NTESLoginActivity

.activity.AwardListActivity

.activity.CouponListActivity

.activity.ShareNewActivity

com.netease.airticket.activity.AirTicketBuyActivity

com.netease.airticket.activity.AirSpecialTicketActivity

com.netease.airticket.activity.AirStationResutlActivity

com.netease.airticket.activity.AirOrderListActivity

com.netease.airticket.activity.AirOrderDetailActivity

Permissions

Receivers

.receiver.AlarmReceiver

.receiver.WXRegister

.receiver.YXRegister

com.netease.railwayticket.receiver.PushMessageReceiver

com.netease.pushcenter.travel.host.service.PushServiceReceiver

com.netease.pushcenter.travel.xiaomi.XiaomiMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

Services

com.netease.pushcenter.travel.host.service.PushService

com.netease.huoche

com.netease.huoche.activity.MainActivity2

Activities

com.netease.huoche.activity.MainActivity2

com.netease.huoche.activity.SplashActivity

com.netease.huoche.activity.StationListActivity

com.netease.huoche.activity.DateActivity

com.netease.huoche.activity.TrainbyStation12306Activity

com.netease.huoche.activity.TrainBuyActivity

com.netease.huoche.activity.TrainGrabActivity

com.netease.huoche.activity.NTESLoginActivity

com.netease.huoche.activity.AddContactActivity

com.netease.huoche.activity.PassengerManageActivity

com.netease.huoche.activity.PhoneVerifyActivity

com.netease.huoche.activity.OrderListTrainActivity

com.netease.huoche.activity.GrabLoginActivity

com.netease.huoche.activity.AddGrabActivity

.activity.CouponListActivity

com.netease.huoche.activity.OrderGrabDetailActivity

Permissions

Receivers

com.netease.huoche.receiver.AlarmReceiver

com.common.ntesfeedback

.activities.ServiceActivity

Activities

.activities.ServiceActivity

Permissions

Android Permissions

01ade8734943be043cce1c2bb4e340f75c05265e73edae37573d2cb707f531b3