26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c

Sharing

Copy URL

Twitter E-mail

General

Target

26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c
Size

21.2MB
MD5

79c1464d5159abf04a498a7f094a0d2d
SHA1

7847a9bc4eb8a6e4d2bc9646b6c4aa8ca9f873d9
SHA256

26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c
SHA512

2b4a289e9e1b7c6db56c9f50eb75132d161648a96ff9e8dd069a9c217f7a3b6c260898275871165e7a4bfdc788a7abe8860dbee9372d17a37fe96477248045f7
SSDEEP

393216:lpTKL7eV0cm2PKm31pEIZ42+tR/XYgPTMCjy7Om67IB/uGjlS7fYIbh:lA6m2Cm3TEImRpXYgQCjQ6IB/5jlSTYc

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Office document contains embedded OLE objects 1 IoCs

Detected embedded OLE objects in Office documents.

resource	yara_rule
sample	office_ole_embedded

Files

26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c
.apk android

cn.wps.moffice_eng

cn.wps.moffice.documentmanager.PreStartActivity

Activities

cn.wps.moffice.documentmanager.PreStartActivity2

android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT

cn.wps.moffice.documentmanager.PreStartActivity

android.intent.action.MAIN
android.intent.action.VIEW

cn.wps.moffice.common.chart.edit.ChartEditorActivity

android.intent.action.VIEW

cn.wps.moffice.common.chart.insert.InsertChartActivity

android.intent.action.VIEW

cn.wps.moffice.documentmanager.PreFileSelectorActivity

android.intent.action.GET_CONTENT

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.NFC

Receivers

cn.wps.widget.MofficeAppWidgetProvider_4x2

android.appwidget.action.APPWIDGET_UPDATE
cn.wps.widget.NEWFILE
cn.wps.widget.OPEN
cn.wps.widget.NEXT
cn.wps.widget.PREV
ACTION_APP_WIDGET_RELOAD
ACTION_APP_WIDGET_REQUEST_HISTORY_UPDATE

Services

cn.wps.moffice.homemanager.fileroaming.service.WPSQingService

cn.wps.moffice.qing.service

cn.wps.moffice.service.impl.MOfficeService

cn.wps.moffice.service.OfficeService

cn.wps.moffice.spreadsheet.secondary.impl.service.SSRemoteServiceImpl

cn.wps.moffice.secondary.service.ssremoteservice
cn.wps.moffice.secondary.service.ssregistservice

cn.wps.moffice.presentation.autotest.impl.service.PPTRemoteServiceImpl

cn.wps.moffice.presentation.autotest.impl.service.pptremoteservice
cn.wps.moffice.presentation.autotest.impl.service.pptregistservice
dex_cloud.jar
.apk android
dex_cloudservice.jar
.apk android
dex_evernote.jar
.apk android
dex_pdf.jar
.apk android
dex_pivottable.jar
.apk android
dex_presentation.jar
.apk android
dex_spreadsheet.jar
.apk android
dex_writer.jar
.apk android
dex_writerHtml.jar
.apk android

Android Permissions

26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.NFC

Sharing

General

Malware Config

Signatures

Files

cn.wps.moffice_eng

cn.wps.moffice.documentmanager.PreStartActivity

Activities

cn.wps.moffice.documentmanager.PreStartActivity2

cn.wps.moffice.documentmanager.PreStartActivity

cn.wps.moffice.common.chart.edit.ChartEditorActivity

cn.wps.moffice.common.chart.insert.InsertChartActivity

cn.wps.moffice.documentmanager.PreFileSelectorActivity

Permissions

Receivers

cn.wps.widget.MofficeAppWidgetProvider_4x2

Services

cn.wps.moffice.homemanager.fileroaming.service.WPSQingService

cn.wps.moffice.service.impl.MOfficeService

cn.wps.moffice.spreadsheet.secondary.impl.service.SSRemoteServiceImpl

cn.wps.moffice.presentation.autotest.impl.service.PPTRemoteServiceImpl

Android Permissions

26f0a871a41cfcee2f865f443d8ae9974c2bac1828c2e1adec0d69d0ca97b05c