2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214

Sharing

Copy URL

Twitter E-mail

General

Target

2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214
Size

9.5MB
MD5

0af262f6fc42aebeecda60fb7c122f69
SHA1

fc40d2d7463a9dfd811452809ce1e7cd0c52f237
SHA256

2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214
SHA512

b9f0ee4d3df7d9ed217f77b0fe4c9136c632a12fd45c9f6ffd1ed8ca83e2a82e87af4a31e5e30cac1d38a5e58b78e0ce59a0819be3858ec5cedb725694e93c1b
SSDEEP

196608:6tRZUePDDNbvYpFjFJaIkgz8necyzjhNeUZsI8qKXfT+zYYZOZ7FNUV3S5hUKfx:MZUefhgnaIkgzgeLNeUZsJDTEFwZpNU0

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214
.apk android arch:arm arch:x86

com.geili.qhb

com.geili.qhb.activity.FreshStartActivity

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.geili.qhb.activity.FreshStartActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.geili.qhb.activity.MainActivity

android.intent.action.VIEW

com.geili.qhb.activity.FeedBackActivity

android.intent.action.MAIN

com.geili.qhb.activity.GameActivity

android.intent.action.MAIN

com.geili.qhb.activity.UpdateActivity

android.intent.action.MAIN

com.geili.qhb.WxUtility

android.intent.action.MAIN

com.geili.qhb.activity.NativeInterstitialActivity

android.intent.action.MAIN

com.geili.qhb.activity.WxVadHelper

android.intent.action.MAIN

com.geili.qhb.lockscreen.LSCActivity

android.intent.action.MAIN

com.geili.qhb.activity.VIPPayDetailActivity

android.intent.action.VIEW

com.geili.qhb.activity.BrowserActivity

android.intent.action.MAIN

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

Permissions

android.permission.READ_LOGS
android.permission.PACKAGE_USAGE_STATS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.UNINSTALL_SHORTCUT
com.android.launcher3.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.WRITE_SETTINGS
android.permission.MODIFY_AUDIO_SETTINGS
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.geili.internal.MESSAGE
com.geili.locker.SEND_MESSAGES
com.geili.qhb.permission.JPUSH_MESSAGE
com.geili.internal.MESSAGE
com.geili.locker.SEND_MESSAGES
com.geili.qhb.permission.JPUSH_MESSAGE
android.permission.BATTERY_STATS
android.permission.BLUETOOTH
android.permission.CALL_PHONE

Receivers

com.geili.qhb.receiver.LoginReceiver

com.duobao

com.geili.qhb.receiver.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.geili.qhb.lockscreen.LSCReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

com.geili.qhb.lockscreen.InternalMessageReceiver

com.geili.internal.MESSAGE

simcpux.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.geili.qhb.receiver.PushReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.UNREGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.ACTION_RICHPUSH_CALLBACK
cn.jpush.android.intent.CONNECTION
cn.jpush.android.intent.MESSAGE_LINK_ACTIONED

com.geili.qhb.receiver.InstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

com.geili.qhb.service.MyAccessibilityService

android.accessibilityservice.AccessibilityService

com.geili.qhb.lockscreen.LSCNotificationService

android.service.notification.NotificationListenerService

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService
1
.apk android
9
.apk android
gdtadv2.jar
.apk android

Android Permissions

2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214

Permissions

android.permission.READ_LOGS

android.permission.PACKAGE_USAGE_STATS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.UNINSTALL_SHORTCUT

com.android.launcher3.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.WRITE_SETTINGS

android.permission.MODIFY_AUDIO_SETTINGS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.geili.internal.MESSAGE

com.geili.locker.SEND_MESSAGES

com.geili.qhb.permission.JPUSH_MESSAGE

com.geili.internal.MESSAGE

com.geili.locker.SEND_MESSAGES

com.geili.qhb.permission.JPUSH_MESSAGE

android.permission.BATTERY_STATS

android.permission.BLUETOOTH

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

Files

com.geili.qhb

com.geili.qhb.activity.FreshStartActivity

Activities

com.tencent.tauth.AuthActivity

com.geili.qhb.activity.FreshStartActivity

com.geili.qhb.activity.MainActivity

com.geili.qhb.activity.FeedBackActivity

com.geili.qhb.activity.GameActivity

com.geili.qhb.activity.UpdateActivity

com.geili.qhb.WxUtility

com.geili.qhb.activity.NativeInterstitialActivity

com.geili.qhb.activity.WxVadHelper

com.geili.qhb.lockscreen.LSCActivity

com.geili.qhb.activity.VIPPayDetailActivity

com.geili.qhb.activity.BrowserActivity

cn.jpush.android.ui.PushActivity

Permissions

Receivers

com.geili.qhb.receiver.LoginReceiver

com.geili.qhb.receiver.NetworkStateReceiver

com.geili.qhb.lockscreen.LSCReceiver

com.geili.qhb.lockscreen.InternalMessageReceiver

simcpux.AppRegister

cn.jpush.android.service.PushReceiver

com.geili.qhb.receiver.PushReceiver

com.geili.qhb.receiver.InstallReceiver

Services

com.geili.qhb.service.MyAccessibilityService

com.geili.qhb.lockscreen.LSCNotificationService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

Android Permissions

2d35c2e976594c731ad43636db646a2772e443d6eb134d39f7709547699f1214