06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9

Sharing

Copy URL

Twitter E-mail

General

Target

06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9
Size

21.8MB
MD5

f7f9c9f3f6d8d93b120dfef013379729
SHA1

6340920ba033f34fbfdd198cd76670e47baf9a7f
SHA256

06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9
SHA512

bcb4481d6dd04ed0b95727d21dd59a72cb0d915bb188ac907ae459ba9b68a22f64ed84172b716ce460effff9d78f07771e7722d4f80f96b6f6b009026c142f80
SSDEEP

393216:XQ3MGKNL8BLh3xVPl21DXR/OOjA1FfdADS0lrCK/yP9pxGcKo70VVpZ0S3fI4ZMD:XVnF8BV3xZlqRLQbav/WScsVVpZ0SQ4C

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR

Files

06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9
.apk android arch:arm

com.xiaoenai.app

com.xiaoenai.app.classes.startup.LauncherActivity

Activities

com.xiaoenai.app.classes.startup.LauncherActivity

android.intent.action.MAIN

com.xiaoenai.app.classes.common.webview.WebViewActivity

android.intent.action.VIEW

com.xiaoenai.app.classes.chat.history.ChatHistoryActivity

com.xiaoenai.history.edit.dataAction
com.xiaoenai.history.edit.editDataAction

com.xiaoenai.app.classes.auth.XeaAuthActivity

com.xiaoenai.auth

com.mob.tools.MobUIShell

android.intent.action.VIEW

com.alibaba.nb.android.trade.ui.activity.AliTradeWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.nb.android.trade.ui.activity.AliTradeNativeTaobaoClientActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
android.permission.CAMERA
android.permission.REORDER_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BLUETOOTH
android.permission.WRITE_SETTINGS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.UPDATE_APP_OPS_STATS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.DISABLE_KEYGUARD
android.permission.READ_LOGS
com.xiaoenai.app.permission.RECEIVE_PERMISSION
com.xiaoenai.app.permission.MIPUSH_RECEIVE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.NFC
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_SETTINGS
android.permission.RUN_INSTRUMENTATION

Receivers

com.qihoo.util.CommonReceiver

com.qihoo.commonreceiver.ARRIVED
com.qihoo.commonreceiver.CLEARED

com.xiaoenai.app.service.ProtectReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PHONE_STATE
android.net.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE

com.xiaoenai.app.service.RemindReceiver

com.xiaoenai.app.REMIND_REWARD
com.xiaoenai.app.REMIND_ANNIVERSARY
com.xiaoenai.app.REMIND_MENSES
com.xiaoenai.app.REMIND_MALL

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.xiaoenai.app.service.MiPushMsgReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.igexin.sdk.PushReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

Services

com.qihoo.util.CommonService

com.qihoo.commonservice.SERVICE

com.xiaoenai.app.service.MessageService

com.xiaoenai.intent.action.RESTART_SERVICE

com.xiaoenai.app.service.DownloadService

com.xiaoenai.service.DOWNLOAD

com.xiaoenai.app.download.services.DownloadService

com.xiaoenai.app.download.ACTION_IDownloadService

com.baidu.location.f

com.baidu.location.service_v2.2

com.xiaoenai.app.utils.OpenUDID_service

org.openudid.GETUDID

com.alimama.mobile.sdk.shell.DownloadingService

com.alimama.mobile.sdk.download.action
CommonPlugin-4.4.apk
.apk android

com.taobao.munion.plugin.cm

com.taobao.test.MainActivity

Activities

com.taobao.test.MainActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.CALL_PHONE
FeedPlugin-2.6.apk
.apk android

com.alimama.mobile.sdk.feed

com.taobao.test.FeedMainActivity

Activities

com.taobao.test.FeedMainActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_CONFIGURATION
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.CALL_PHONE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.VIBRATE
FrameworkPlugin-3.3.apk
.apk android

com.taobao.munion.plugin.framework

Android Permissions

06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.REORDER_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.UPDATE_APP_OPS_STATS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DISABLE_KEYGUARD

android.permission.READ_LOGS

com.xiaoenai.app.permission.RECEIVE_PERMISSION

com.xiaoenai.app.permission.MIPUSH_RECEIVE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.NFC

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.READ_SETTINGS

android.permission.RUN_INSTRUMENTATION

Sharing

General

Malware Config

Signatures

Files

com.xiaoenai.app

com.xiaoenai.app.classes.startup.LauncherActivity

Activities

com.xiaoenai.app.classes.startup.LauncherActivity

com.xiaoenai.app.classes.common.webview.WebViewActivity

com.xiaoenai.app.classes.chat.history.ChatHistoryActivity

com.xiaoenai.app.classes.auth.XeaAuthActivity

com.mob.tools.MobUIShell

com.alibaba.nb.android.trade.ui.activity.AliTradeWebViewActivity

com.alibaba.nb.android.trade.ui.activity.AliTradeNativeTaobaoClientActivity

Permissions

Receivers

com.qihoo.util.CommonReceiver

com.xiaoenai.app.service.ProtectReceiver

com.xiaoenai.app.service.RemindReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.xiaoenai.app.service.MiPushMsgReceiver

com.igexin.sdk.PushReceiver

Services

com.qihoo.util.CommonService

com.xiaoenai.app.service.MessageService

com.xiaoenai.app.service.DownloadService

com.xiaoenai.app.download.services.DownloadService

com.baidu.location.f

com.xiaoenai.app.utils.OpenUDID_service

com.alimama.mobile.sdk.shell.DownloadingService

com.taobao.munion.plugin.cm

com.taobao.test.MainActivity

Activities

com.taobao.test.MainActivity

Permissions

com.alimama.mobile.sdk.feed

com.taobao.test.FeedMainActivity

Activities

com.taobao.test.FeedMainActivity

Permissions

com.taobao.munion.plugin.framework

Android Permissions

06591b134aeffee6c3ec68860db4ac75fadf2d2bee18fa5338ed2ffd688728d9