29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15

General

Target

29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15
Size

10.2MB
MD5

09decc315b40f739143f9112948283b6
SHA1

aa645a56a67ff3486df5f49e4702302a88d7693f
SHA256

29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15
SHA512

0efb98559c78951d1d64167e190d90c07036cceb5c0e0a0b1cad9b454f365c4b79985063b41e31a56f486560fafb31f862ecf2f2b5819d3ea73a5885b28e7b4d
SSDEEP

196608:oVKx4xnzkQUGcdI/tDjrqESXlFY79a7CPQ4qjPxeRpGGJj5apki1mg3l6qM:oVKs154FY74D4qDx+dj5skitV6D

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15
.apk android arch:arm arch:mips arch:x86

air.GSMobile

.activity.StartActivity

Activities

.activity.StartActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

.activity.WebViewActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_UPDATES
android.permission.WAKE_LOCK
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.CAMERA
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RESTART_PACKAGES
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_USER_PRESENT
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.READ_LOGS

Receivers

.push.PushBroadcastReceiver

android.intent.action.USER_PRESENT
air.GSMobile.action.START

com.vanchu.apps.appwall.VCWInstallReceiver

android.intent.action.PACKAGE_ADDED

com.tencent.android.tpush.XGPushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.tencent.android.tpush.action.SDK
android.intent.action.USER_PRESENT
com.tencent.android.tpush.action.INTERNAL_PUSH_MESSAGE

.push.XGPushReceiver

com.tencent.android.tpush.action.PUSH_MESSAGE
com.tencent.android.tpush.action.FEEDBACK

.download.FileLoadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

Services
TencentUnipay.apk
.apk android arch:arm

com.tencent.unipay

com.tencent.unipay.ui.MidasMainActivity

Activities

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SEND_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Receivers

com.pay.broadcast.APSendSMSReceiver

SENT_SMS_ACTION

com.pay.broadcast.APhfPayDelievedSMSReceiver

DELIVERED_SMS_ACTION

Services

com.tencent.unipay.plug.UnipayPulgService

com.tencen.unipay.plug.UnipayPulgService
alipay_plugin_20120428msp.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

Android Permissions

29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_UPDATES

android.permission.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

air.GSMobile

.activity.StartActivity

Activities

.activity.StartActivity

com.tencent.tauth.AuthActivity

.activity.WebViewActivity

Permissions

Receivers

.push.PushBroadcastReceiver

com.vanchu.apps.appwall.VCWInstallReceiver

com.tencent.android.tpush.XGPushReceiver

.push.XGPushReceiver

.download.FileLoadCompleteReceiver

Services

com.tencent.unipay

com.tencent.unipay.ui.MidasMainActivity

Activities

Permissions

Receivers

com.pay.broadcast.APSendSMSReceiver

com.pay.broadcast.APhfPayDelievedSMSReceiver

Services

com.tencent.unipay.plug.UnipayPulgService

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

29da5697ba060bdd5be4452463c2bad5164bfb30dc09f2778f1049f1e0f08f15