29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a

General

Target

29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a
Size

8.5MB
MD5

ce421136f559a147abab3661d5cd9003
SHA1

59340fbe8075d379fd56d21159cbe02a3ed7f2e7
SHA256

29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a
SHA512

8957baa3e6c590d0b31166807c6a4c4b11ba80359a2807f2f0cac134e5ed4360851b220481e6de6a6e2c2ebdc1f41c694b469dbd1ff5d98239fd3a69a33a6861
SSDEEP

98304:KusfWIj25KYvbsGts+tx0li09sF6As27FqqUTHjJaa480wdv3ezCyT4dxcrWq9GL:KusfWSf+sliNHHpqqmDg9zFuxGrcZ3Xl

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a
.apk android arch:arm

com.iflytek.inputmethod

.WizardActivity

Activities

.download.DownloadActivity

com.iflytek.inputmethod.ACTION_DOWNLOAD_VIEW

.WizardActivity

com.iflytek.inputmethod.loaclskin
android.intent.action.MAIN

.EntryActivity

com.iflytek.inputmethod.action_ime

.setting.FriendShareActivity

com.iflytek.inputmethod.ACTION_SHARE_VIEW

.setting.skin.theme.ThemeRequestActivity

android.intent.action.VIEW

.install.FlyDeliverActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.MAIN

.wxapi.WXEntryActivity

android.intent.action.VIEW

Permissions

android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.INTERNET
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN

Receivers

com.iflytek.inputmethod.codescan.QrCodeShareBoradcastReceiver

com.iflytek.inputmethod.ACTION_RECEIVE_QRCODE

Services

.FlyIME

android.view.InputMethod

.download.DownloadHandlerService

com.iflytek.inputmethod.download.handler_service

Android Permissions

29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a

Permissions

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

Sharing

General

Malware Config

Signatures

Files

com.iflytek.inputmethod

.WizardActivity

Activities

.download.DownloadActivity

.WizardActivity

.EntryActivity

.setting.FriendShareActivity

.setting.skin.theme.ThemeRequestActivity

.install.FlyDeliverActivity

.wxapi.WXEntryActivity

Permissions

Receivers

com.iflytek.inputmethod.codescan.QrCodeShareBoradcastReceiver

Services

.FlyIME

.download.DownloadHandlerService

Android Permissions

29e09258d273898670c870728b6f0a7c22597b0fdc2d3c1f24a9789d230b0e3a