28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd

General

Target

28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd
Size

7.5MB
MD5

fd8ac4771e2f9704a4ad63ae837311ea
SHA1

ffbd10f4cfc6cba803d91556626ef31c1a612f82
SHA256

28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd
SHA512

5d115b7016db8f96a0beef0c689cc0f537af191e33308a2bb2acd0aca547177c4577ba82af7ef1c816540ec64cf696f6d0b5aad72d6da50dc3b369f309553c5c
SSDEEP

196608:s3b8YggobXipLdIBGAQVN7VH3cX3Xj/n68cHXCVU:2Nq+N7VHMX7O

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd
.apk android arch:arm arch:mips arch:x86

com.hzpz.edu.stu

com.hzpz.edu.stu.activity.LoadingActivity

Activities

mm.purchasesdk.iapservice.BillingLayoutActivity

com.hzpz.edu.stu.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR_IAP
safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

com.baidu.frontia.activity.share.FrontiaQQFriendShareReceiverActivity

android.intent.action.VIEW

com.igexin.sdk.SdkActivity

com.igexin.action.popupact.com.hzpz.edu.stu

com.hzpz.edu.stu.activity.LoadingActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BAIDU_LOCATION_SERVICE
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.RECEIVE_USER_PRESENT
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SENDTO
android.permission.BROADCAST_WAP_PUSH
android.permission.RECEIVE_MMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION

Receivers

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK
com.baidu.android.pushservice.action.frontia.user

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.hzpz.edu.stu.push.MyMessageReceiver

com.baidu.android.pushservice.action.MESSAGE
com.baidu.android.pushservice.action.RECEIVE
com.baidu.android.pushservice.action.notification.CLICK

.service.SMSreceiver

android.provider.Telephony.SMS_RECEIVED

com.hzpz.edu.stu.receive.GexinSdkMsgReceiver

com.igexin.sdk.action.EfCjvNihz26yERXwKZK9s5

com.hzpz.edu.stu.receive.DoTaskSuccessReceiver

com.hzpz.edu.stu.activity.DOTASKSUCCESS

com.igexin.sdk.coordinator.NotificationCenterAIDLReceiver

com.igexin.sdk.action.refreshls

com.igexin.sdk.SdkReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

sdk.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.hzpz.pay.service.SmsPushReceiver

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.WAP_PUSH_RECEIVED

com.hzpz.pay.service.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

mm.purchasesdk.iapservice.PurchaseService

com.aspire.purchaseservice.BIND
com.hzpz.edu.stu.purchaseservice.BIND
android.intent.action.MAIN

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE

com.baidu.location.f

com.baidu.location.service_v2.4
plugin-deploy.jar
.apk android

Android Permissions

28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BAIDU_LOCATION_SERVICE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.RECEIVE_USER_PRESENT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SENDTO

android.permission.BROADCAST_WAP_PUSH

android.permission.RECEIVE_MMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files

com.hzpz.edu.stu

com.hzpz.edu.stu.activity.LoadingActivity

Activities

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.baidu.frontia.activity.share.FrontiaQQFriendShareReceiverActivity

com.igexin.sdk.SdkActivity

com.hzpz.edu.stu.activity.LoadingActivity

Permissions

Receivers

safiap.framework.CheckUpdateReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.hzpz.edu.stu.push.MyMessageReceiver

.service.SMSreceiver

com.hzpz.edu.stu.receive.GexinSdkMsgReceiver

com.hzpz.edu.stu.receive.DoTaskSuccessReceiver

com.igexin.sdk.coordinator.NotificationCenterAIDLReceiver

com.igexin.sdk.SdkReceiver

sdk.download.DownloadReceiver

com.hzpz.pay.service.SmsPushReceiver

com.hzpz.pay.service.ConnectivityReceiver

Services

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

com.baidu.location.f

Android Permissions

28b62a8cc56195c10bd93262be36740de86f46c50ea3f94500e873cc643a42bd