1c77e1d438bbe8a587e02aa169f6e488ae77746f959fad8251cc50e5adba646c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c77e1d438bbe8a587e02aa169f6e488ae77746f959fad8251cc50e5adba646c
Size

6.1MB
MD5

b2f4d7d5bbc82289e04ec396901bbdfc
SHA1

6e83c5c1da6748e0155dbe011e61a1895e40f3a4
SHA256

1c77e1d438bbe8a587e02aa169f6e488ae77746f959fad8251cc50e5adba646c
SHA512

791f1d44f37e6f5352de819b87b3da80f5fa4421de6a7e6522c055f185f6a51996233667586f9fb8c266da26a58fa20716080ced6727997cd354db74053cceaa
SSDEEP

98304:x//X5BIKIg3T0XAN3YtzAqTM/8LNNo2S63m9K4A+z9Mk/1lrQiCNqaZnGJv1WihS:x5BNIGopZtZNxS6354P3/1upn+EihS

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

1c77e1d438bbe8a587e02aa169f6e488ae77746f959fad8251cc50e5adba646c
.apk android arch:arm

com.sand.bus.activity

.StartApp_Activity

Activities

.StartApp_Activity

android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE

Receivers

com.sand.sandlife.sandbao.paySPS

comsandbus

Services
sandpay.apk
.apk android arch:arm

com.sand.spsdock

com.sand.spsdock.RXSPSEntry

Activities

com.sand.spsdock.RXSPSEntry

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Services

.SpsDock

com.sand.spsdock.SpsDock
unionpay.apk
.apk android arch:arm

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.webkit.permission.PLUGIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN

Android Permissions

1c77e1d438bbe8a587e02aa169f6e488ae77746f959fad8251cc50e5adba646c

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE