General

  • Target

    2f22da9c3980e7472752af4d6e9c2c00b29d2e35708fb7697f3a67e9951751e4

  • Size

    5.7MB

  • MD5

    067cfaccb0a786a7d51af7735b87ab12

  • SHA1

    b8172b7d14a36b293002f4d91b69bb678123f36d

  • SHA256

    2f22da9c3980e7472752af4d6e9c2c00b29d2e35708fb7697f3a67e9951751e4

  • SHA512

    04598c593eb140ce006c140c8abb3280aac2c205b663f12472cfaf9f690562d06a0b36089e0fb0bf7aa61d87d146df3ad0957b771e25fe8c0ffcf20df6d035ea

  • SSDEEP

    98304:AIF4d/yIRH34SfGYa7DfIcOZsxHKPYl1QvXDfOc+MT45lBJTZr7yn2KIT:Ao4d6mX1fGYagcOZCHXl1GfkMsJhe2Kw

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 28 IoCs

Files

  • 2f22da9c3980e7472752af4d6e9c2c00b29d2e35708fb7697f3a67e9951751e4
    .apk android arch:arm64

    com.excean.gspace.b64

    com.excelliance.kxqp.ui.HelloActivity


  • register.jar
    .apk android

    com.exce.wv

    com.exce.wv.RegisterAcitivity


  • vending.jar
    .apk android

    com.excean.android.vending

    com.excean.android.vending.WebViewActivity


Android Permissions

2f22da9c3980e7472752af4d6e9c2c00b29d2e35708fb7697f3a67e9951751e4

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_APN_SETTINGS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.REORDER_TASKS

android.permission.USE_CREDENTIALS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.DISABLE_KEYGUARD

android.permission.BIND_APPWIDGET

com.android.vending.CHECK_LICENSE

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_EXTERNAL_STORAGE

android.permission.UPDATE_DEVICE_STATS

android.permission.RUN_INSTRUMENTATION

android.permission.WRITE_SECURE_SETTINGS

android.permission.SIGNAL_PERSISTENT_PROCESSES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.actionlauncher.playstore.permission.READ_SETTINGS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.motorola.dlauncher.permission.READ_SETTINGS

com.motorola.mmsp.motoswitch.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.aspire.mm.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.ty.launcher.permission.READ_SETTINGS

com.s.launcher.permission.READ_SETTINGS

com.sonyericsson.homescreen.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.mediatek.launcherplus.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS