13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669

General

Target

13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669
Size

10.3MB
MD5

99ce1876af88ab99aecf65f1a1575c3b
SHA1

6834cedc4c3f32e52dbd3ff8af260149c099ab61
SHA256

13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669
SHA512

0d876c79048d6a0b8e5883e60ecf0babac5ffab4edb0bddbeb8ded6ea8eff0ba07b643b3bc71da2ec02d8aca629d405dec8e2107c993974a8ff566acf03177fc
SSDEEP

196608:bjgKzT5TzmD0+Lo3kIJnVZ1LEog59eSCJgwk9TmsoKyb6NMPK7dCfEI6:bj35r+LSxTse9JNkR1Jy2Ne9fq

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669
.apk android arch:arm arch:mips arch:x86

com.smi.wcloud

com.smi.wcloud.MainActivity

Activities

com.smi.wcloud.MainActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.smi.wcloud.login.LoginActivity

android.intent.action.MAIN

com.smi.wcloud.login.BindMobileActivity

android.intent.action.MAIN

com.smi.wcloud.main.MoreBlocksActivity

android.intent.action.MAIN

com.smi.wcloud.ui.NetSpeedActivity

android.intent.action.MAIN

com.smi.wcloud.who_am_i.WhoAmIActivity

android.intent.action.MAIN

com.smi.wcloud.ui.ModifyUserInfoActivity

android.intent.action.MAIN

com.smi.wcloud.ui.ModifyPasswordActivity

android.intent.action.MAIN

com.smi.wcloud.phonegap.WebViewActivity

android.intent.action.MAIN

com.smi.wcloud.phonegap.PhoneGapActivity

android.intent.action.MAIN

com.smi.wcloud.feedback.FeedbackActivity

android.intent.action.MAIN

com.smi.wcloud.feedback.FeedbackDetailActivity

android.intent.action.MAIN

com.smi.wcloud.feedback.NewFeedbackActivity

android.intent.action.MAIN

com.smi.wcloud.protect.AccountProtectActivity

android.intent.action.MAIN

com.smi.wcloud.protect.VerifyIdentityActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.NetdiskActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.ReadonlyActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.EditableListActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.FileDetailActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.DirSelectActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.UploadActivity

android.intent.action.MAIN

com.smi.wcloud.netdisk.UploadTaskActivity

android.intent.action.MAIN

com.smi.android.VideoCapture

android.intent.action.MAIN

com.qrcode.ZxingMainActivity

android.intent.action.MAIN

com.smi.wcloud.bridge.BridgeAcitivty

android.intent.action.MAIN

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

cn.albatross.cpslite.session.HttpRate.HttpRateUi

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.VIBRATE
android.permission.CAMERA
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.RECEIVE_SMS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION
android.permission.BROADCAST_STICKY
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_COARSE_UPDATES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.BAIDU_LOCATION_SERVICE

Receivers

com.smi.wcloud.UpdateHelper

android.intent.action.DOWNLOAD_COMPLETE

com.smi.wcloud.BaiduPushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
android.intent.action.MEDIA_MOUNTED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

cn.albatross.anchovy.receiver.Receiver

cn.albatross.anchovy.ANCHOVY_ACTION
android.intent.action.TIME_SET
android.provider.Telephony.SMS_RECEIVED
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_INSTALL

Services

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.action.PUSH_SERVICE
ptcard27.apk
.apk android

com.unicom.ptcard

.activities.login.Login

Activities

.activities.login.Login

android.intent.action.MAIN

Permissions

android.permission.NFC
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.READ_SMS
UPPayPluginEx.apk
.apk android arch:arm arch:mips arch:x86

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player
android.webkit.permission.PLUGIN

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN
alipay_plugin v3.5.4.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.VIBRATE

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.BAIDU_LOCATION_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.smi.wcloud

com.smi.wcloud.MainActivity

Activities

com.smi.wcloud.MainActivity

com.smi.wcloud.login.LoginActivity

com.smi.wcloud.login.BindMobileActivity

com.smi.wcloud.main.MoreBlocksActivity

com.smi.wcloud.ui.NetSpeedActivity

com.smi.wcloud.who_am_i.WhoAmIActivity

com.smi.wcloud.ui.ModifyUserInfoActivity

com.smi.wcloud.ui.ModifyPasswordActivity

com.smi.wcloud.phonegap.WebViewActivity

com.smi.wcloud.phonegap.PhoneGapActivity

com.smi.wcloud.feedback.FeedbackActivity

com.smi.wcloud.feedback.FeedbackDetailActivity

com.smi.wcloud.feedback.NewFeedbackActivity

com.smi.wcloud.protect.AccountProtectActivity

com.smi.wcloud.protect.VerifyIdentityActivity

com.smi.wcloud.netdisk.NetdiskActivity

com.smi.wcloud.netdisk.ReadonlyActivity

com.smi.wcloud.netdisk.EditableListActivity

com.smi.wcloud.netdisk.FileDetailActivity

com.smi.wcloud.netdisk.DirSelectActivity

com.smi.wcloud.netdisk.UploadActivity

com.smi.wcloud.netdisk.UploadTaskActivity

com.smi.android.VideoCapture

com.qrcode.ZxingMainActivity

com.smi.wcloud.bridge.BridgeAcitivty

cn.sharesdk.framework.ShareSDKUIShell

cn.albatross.cpslite.session.HttpRate.HttpRateUi

Permissions

Receivers

com.smi.wcloud.UpdateHelper

com.smi.wcloud.BaiduPushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

cn.albatross.anchovy.receiver.Receiver

Services

com.baidu.android.pushservice.PushService

com.unicom.ptcard

.activities.login.Login

Activities

.activities.login.Login

Permissions

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

Permissions

Services

com.UCMobile.PayPlugin.PayPluginService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

13def3538eee90a90c6a3d9d11783efd5500f80a3623e4bcbd5e3847c6e92669