3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70

General

Target

3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70
Size

28.7MB
MD5

c0684920ef6c840785d2e61087824ba5
SHA1

212ae449db7ee0b641e92f7950d54eff3a5f033f
SHA256

3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70
SHA512

f306e2043637082d58246cd922caf2e8c80298df94678b140b0d34240f6603928b8e19f4f90b29e594592c5e0c1adadf405de3a75be1769e0b296453cc3ff42d
SSDEEP

786432:hVLBAJYft9GQ0DgBp1AV638cEy3oijntadsxy0LyYdvU0vR6iDm:ZPtk7mpb3M+oiLtamMvOUIRTDm

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70
.apk android arch:arm

com.avatar.kungfufinance

com.avatar.kungfufinance.ui.home.SplashActivity

Activities

com.avatar.kungfufinance.ui.home.SplashActivity

android.intent.action.MAIN

com.avatar.kungfufinance.scheme.SchemeActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.kofuf.money.shares.up.SmartRobotAliasActivity

android.intent.action.MAIN

com.upchina.common.webview.UPWebViewActivity

android.intent.action.MAIN

com.upchina.common.pdf.UPPDFViewerActivity

android.intent.action.MAIN

com.upchina.advisor.activity.AdvisorSpaceActivity

android.intent.action.MAIN

com.upchina.advisor.AdvisorAuthRouter

android.intent.action.MAIN

com.upchina.market.activity.MarketRiseFallActivity

android.intent.action.MAIN

com.upchina.market.activity.MarketBlockActivity

android.intent.action.MAIN

com.upchina.market.activity.MarketMoneyFlowActivity

android.intent.action.MAIN

com.upchina.market.activity.MarketSearchActivity

android.intent.action.MAIN

com.upchina.market.stock.MarketStockActivity

android.intent.action.MAIN

com.upchina.market.l2.activity.MarketL2MainActivity

android.intent.action.MAIN

com.upchina.market.alarm.activity.MarketAlarmMainActivity

android.intent.action.MAIN

com.upchina.market.subject.MarketSubjectChangeActivity

android.intent.action.MAIN

com.upchina.user.activity.UserOrderActivity

android.intent.action.MAIN

com.upchina.user.activity.UserOrderPayActivity

android.intent.action.MAIN

Permissions

android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
getui.permission.GetuiService.com.avatar.kungfufinance
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.EXPAND_STATUS_BAR
android.permission.READ_EXTERNAL_STORAGE
android.permission.CALL_PHONE
android.permission.FLASHLIGHT
android.permission.VIBRATE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_CONTACTS
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
com.avatar.kungfufinance.permission.MIPUSH_RECEIVE

Receivers

com.avatar.kungfufinance.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.avatar.kungfufinance.receiver.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

android.support.v4.media.session.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.netease.nimlib.service.NimReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.kofuf.money.shares.up.SmartRobotBroadcastReceiver

com.upchina.android.smartbot.OPEN_SCENE_ACTION

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

io.rong.push.PushReceiver

io.rong.push.intent.action.HEART_BEAT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

com.avatar.kungfufinance.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

org.android.agoo.huawei.HuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

Services

com.avatar.kungfufinance.audio.MusicService

android.media.browse.MediaBrowserService
android.intent.action.MEDIA_BUTTON

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.upchina.common.upgrade.AppUpgradeLoadService

com.upchina.upgrade.android.ACTION_START_DOWNLOAD
com.upchina.upgrade.android.ACTION_CLICK

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE
com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.XiaomiIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.enablecallback.action
com.umeng.message.disablecallback.action
com.umeng.message.message.handler.action
com.umeng.message.message.sendmessage.action

Android Permissions

3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

getui.permission.GetuiService.com.avatar.kungfufinance

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.VIBRATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.WRITE_SETTINGS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

com.avatar.kungfufinance.permission.MIPUSH_RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.avatar.kungfufinance

com.avatar.kungfufinance.ui.home.SplashActivity

Activities

com.avatar.kungfufinance.ui.home.SplashActivity

com.avatar.kungfufinance.scheme.SchemeActivity

com.tencent.tauth.AuthActivity

com.kofuf.money.shares.up.SmartRobotAliasActivity

com.upchina.common.webview.UPWebViewActivity

com.upchina.common.pdf.UPPDFViewerActivity

com.upchina.advisor.activity.AdvisorSpaceActivity

com.upchina.advisor.AdvisorAuthRouter

com.upchina.market.activity.MarketRiseFallActivity

com.upchina.market.activity.MarketBlockActivity

com.upchina.market.activity.MarketMoneyFlowActivity

com.upchina.market.activity.MarketSearchActivity

com.upchina.market.stock.MarketStockActivity

com.upchina.market.l2.activity.MarketL2MainActivity

com.upchina.market.alarm.activity.MarketAlarmMainActivity

com.upchina.market.subject.MarketSubjectChangeActivity

com.upchina.user.activity.UserOrderActivity

com.upchina.user.activity.UserOrderPayActivity

Permissions

Receivers

com.avatar.kungfufinance.wxapi.AppRegister

com.avatar.kungfufinance.receiver.NetworkChangeReceiver

android.support.v4.media.session.MediaButtonReceiver

com.netease.nimlib.service.NimReceiver

com.kofuf.money.shares.up.SmartRobotBroadcastReceiver

com.igexin.sdk.PushReceiver

com.igexin.download.DownloadReceiver

io.rong.push.PushReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

org.android.agoo.xiaomi.MiPushBroadcastReceiver

org.android.agoo.huawei.HuaweiPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

Services

com.avatar.kungfufinance.audio.MusicService

com.igexin.sdk.PushService

com.upchina.common.upgrade.AppUpgradeLoadService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

Android Permissions

3a2c70a607e27febb60545b405d43539db000647d90a447457cf610467cbcf70