General

  • Target

    1c41420fc016cd09d9027f2c9815ffc72a031c04f230fd947c693de93c657c8c

  • Size

    7.3MB

  • MD5

    a76282c32a0e7c1d558bbe662c6115b3

  • SHA1

    e1fa30f201b3f2e64cec0286ef4d9e293b7616b8

  • SHA256

    1c41420fc016cd09d9027f2c9815ffc72a031c04f230fd947c693de93c657c8c

  • SHA512

    b2c755644e521fade29ff1c41e5e68cf89412a911b7469d45abc6897030a6f6d16773cb4e590fa95dccc16a135f4942239004c2140d8ea1bb13f4da69c10b129

  • SSDEEP

    196608:/WPINlpIRmFvSx9WIJGFXsR+YvZhUPSQoMoQ:/WFavSx9rj1hUPlhZ

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 1c41420fc016cd09d9027f2c9815ffc72a031c04f230fd947c693de93c657c8c
    .apk android arch:arm arch:mips arch:x86

    com.unionpay

    com.unionpay.activity.UPActivityWelcome


  • agent.apk
    .apk android

    com.skms.android.agent


Android Permissions

1c41420fc016cd09d9027f2c9815ffc72a031c04f230fd947c693de93c657c8c

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

com.nxp.nfceeapi.SMARTCARD

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_MOCK_LOCATION

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_GPS

android.permission.WRITE_SETTINGS

com.unionpay.permission.MIPUSH_RECEIVE

com.unionpay.permission.CONTROL_RECEIVE

com.unionpay.permission.VID_CHANGED