0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5

General

Target

0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5
Size

7.5MB
MD5

6472d934d1df1f2fa22878cae5052211
SHA1

bbd1482073c7d7cb63ba3f4d60e51629e565d741
SHA256

0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5
SHA512

11845293beac45fab7d1a050cae6c35e4885a1e4fdab626745e64deb929a794562321f07890f40d06bec7f051054f12e6ec04baa1d43718f5efe515d3e06f5cc
SSDEEP

196608:/GUKfYIEev3b7VGa4oOt1UYXnM+mSuvUD4:OXfY1IHJ4oOtSgnM+mBUs

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5
.apk android arch:x86 arch:arm

com.dewmobile.kuaiya.play

com.dewmobile.kuaiya.activity.DmStartupActivity

Activities

com.dewmobile.kuaiya.activity.DmStartupActivity

android.intent.action.MAIN
com.dewmobile.kuaiya.notice.action
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
com.mediatek.hotknot.action.MESSAGE_DISCOVERED
android.intent.action.VIEW

com.dewmobile.kuaiya.activity.exchange.ExchangeActivity

android.intent.action.SEND
android.intent.action.SENDTO

com.dewmobile.kuaiya.gallery.GalleryActivity

android.intent.action.VIEW

com.dewmobile.kuaiya.activity.MainActivity

com.dewmobile.maintab

com.dewmobile.kuaiya.activity.DmAudioPlayerActivity

com.dewmobile.kuaiya.media_player_action

com.mob.tools.MobUIShell

android.intent.action.VIEW

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.INTERNET
com.android.launcher.permission.READ_SETTINGS
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RAISED_THREAD_PRIORITY
android.permission.PERMISSION_NAME
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BROADCAST_STICKY
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.WRITE_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.HOTKNOT
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.dewmobile.wificlient.service.ConnectivityChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.dewmobile.kuaiya.sensor.DmNetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ACTION_SHUTDOWN

com.dewmobile.kuaiya.sensor.DmPackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.dewmobile.kuaiya.sensor.DmEmptyReceiver

android.intent.action.USER_PRESENT
com.dewmobile.kuaiya.action.download

com.easemob.chat.StartServiceReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.dewmobile.kuaiya.receiver.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.dewmobile.kuaiya.receiver.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.dewmobile.kuaiya.receiver.DmNotificationOperationReceiver

com.dewmobile.notification.delete_action

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.appsflyer.AppsFlyerLib

android.intent.action.PACKAGE_REMOVED

Services

com.dewmobile.wificlient.service.WiFiService

com.dewmobile.wificlient.service.WiFiService.main
com.dewmobile.wificlient.service.WiFiService.check
com.dewmobile.wificlient.service.WiFiService.protal

com.dewmobile.kuaiya.mediaex.DmAudioPlayerService

com.dewmobile.mediaplayer.action.service

com.dewmobile.library.plugin.service.DmPluginSdkService

com.dewmobile.library.plugin.service.DmPluginSdkService

com.dewmobile.kuaiya.service.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.dewmobile.kuaiya.service.AutoInstallService

android.accessibilityservice.AccessibilityService

com.mobvista.msdk.shell.MVService

com.mobvista.msdk.download.action

Android Permissions

0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RAISED_THREAD_PRIORITY

android.permission.PERMISSION_NAME

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BROADCAST_STICKY

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.WRITE_SETTINGS

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.HOTKNOT

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.dewmobile.kuaiya.play

com.dewmobile.kuaiya.activity.DmStartupActivity

Activities

com.dewmobile.kuaiya.activity.DmStartupActivity

com.dewmobile.kuaiya.activity.exchange.ExchangeActivity

com.dewmobile.kuaiya.gallery.GalleryActivity

com.dewmobile.kuaiya.activity.MainActivity

com.dewmobile.kuaiya.activity.DmAudioPlayerActivity

com.mob.tools.MobUIShell

Permissions

Receivers

com.dewmobile.wificlient.service.ConnectivityChangeReceiver

com.dewmobile.kuaiya.sensor.DmNetworkStateReceiver

com.dewmobile.kuaiya.sensor.DmPackageReceiver

com.dewmobile.kuaiya.sensor.DmEmptyReceiver

com.easemob.chat.StartServiceReceiver

com.dewmobile.kuaiya.receiver.SmsReceiver

com.dewmobile.kuaiya.receiver.MmsReceiver

com.dewmobile.kuaiya.receiver.DmNotificationOperationReceiver

com.appsflyer.MultipleInstallBroadcastReceiver

com.appsflyer.AppsFlyerLib

Services

com.dewmobile.wificlient.service.WiFiService

com.dewmobile.kuaiya.mediaex.DmAudioPlayerService

com.dewmobile.library.plugin.service.DmPluginSdkService

com.dewmobile.kuaiya.service.HeadlessSmsSendService

com.dewmobile.kuaiya.service.AutoInstallService

com.mobvista.msdk.shell.MVService

Android Permissions

0893365aadeea9c78b2e0c4548f9cae224a45c5d497efe25516e02651b6121a5