3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041

General

Target

3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041
Size

9.4MB
MD5

80514955e90e46cc1c3f9a0edae3a67e
SHA1

183fb99efa481fbb891e1af2107e735006093451
SHA256

3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041
SHA512

2c70d67c99e5647ed400e8a502dae92ec3ac64ec27c2c6522fc7174f019155d2b5b5c276e1eeadfa3a15e5d69380f1c742637ce3cf90e7d2b100ed5367089da0
SSDEEP

196608:N4ebunUD41/MBMPkxmTLZ5+f1/m2ri8vpAQyxVgsvMjB:N4PUM1/MBrEHG1u23vY3Tvu

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041
.apk android arch:arm arch:mips arch:x86

com.xinmei365.font

com.xinmei365.font.ui.activity.SplashActivity

Activities

com.xinmei365.font.ui.activity.SplashActivity

android.intent.action.MAIN
com.xinmei365.font

com.xinmei365.font.ui.activity.WindowDialogActivity

com.xinmei365.font.windowdialog

com.xinmei365.font.ui.activity.FontPreviewActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.FONT

com.xinmei365.font.socrial.SocialActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.xinmei365.font.ui.activity.WebViewActivity

android.intent.action.MAIN

com.xinmei365.font.ui.activity.FontPushActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.xinmei365.font.ui.launcher.AppLauncherActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.xinmei365.font.ui.activity.AdsBrowserActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.WEB_SEARCH
android.intent.action.WEB_SEARCH
android.intent.action.MEDIA_SEARCH
android.intent.action.VIEW

com.xinmei365.font.ui.activity.AdsMusicActivity

android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.xinmei365.font.ui.activity.AdsAppStoreActivity

android.intent.action.VIEW
android.intent.action.MAIN

com.xinmei365.font.ui.activity.AdsTextActivity

android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.PICK
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.EDIT
android.intent.action.VIEW
android.intent.action.EDIT

com.xinmei365.font.ui.activity.AdsVideoActivity

android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.xinmei365.font.ui.activity.AdsImageActivity

android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.PICK
android.intent.action.VIEW
com.android.camera.action.REVIEW
com.cooliris.media.action.REVIEW
android.intent.action.EDIT
com.android.camera.action.CROP
android.intent.action.SET_WALLPAPER
android.intent.action.ATTACH_DATA

Permissions

android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_UPDATES
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.BROADCAST_STICKY
android.permission.GET_TASKS
android.permission.REORDER_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
getui.permission.GetuiService.com.xinmei365.font
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.google.android.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.yulong.android.launcher3.permission.WRITE_SETTINGS
com.yulong.android.launcher3.permission.READ_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.bbk.launcher2.permission.READ_SETTINGS
com.bbk.launcher2.permission.WRITE_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.PACKAGE_USAGE_STATS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CALL_PHONE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Receivers

com.xinmei365.font.views.FontAppWidget

android.appwidget.action.APPWIDGET_UPDATE

com.xinmei365.font.receiver.FontReceiver

com.ningso.font.action.ONLINEFONTSUCCESS

com.xinmei365.font.receiver.InstallFontApkReceiver

android.intent.action.PACKAGE_ADDED

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.IXHKCUsG4Y9IM9HGbvASB1

com.xinmei365.font.receiver.MessageReceiver

com.igexin.sdk.action.IXHKCUsG4Y9IM9HGbvASB1

com.qisi.koala.receiver.AgentReceiver

android.intent.action.BOOT_COMPLETED

com.upalytics.sdk.BootUpReceiver

android.intent.action.BOOT_COMPLETED

com.upalytics.sdk.PackageInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.ningso.fontad.receiver.PushReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.ningso.fontad.action.ALARM
com.ningso.fontad.action.NOMALSUCCESS
com.ningso.fontad.action.SILENTSUCCESS
com.ningso.fontad.action.FAIL
com.ningso.fontad.action.DOWNLOAD_FINISH
com.ningso.fontad.action.DOWNLOAD_ERROR
com.ningso.fontad.action.UNINSTALLSILENT
com.ningso.fontad.action.OTHER
android.intent.action.PACKAGE_ADDED

com.ningso.fontad.receiver.KeepAlarmLiveReceiver

android.intent.action.USER_PRESENT
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

kdx.kdy.kdz.JJ

android.intent.action.PACKAGE_ADDED

com.framework.admanagersdk.receiver.PowerStatusReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.framework.admanagersdk.receiver.DownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.framework.admanagersdk.receiver.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

Services

com.xinmei365.font.service.MyAccessibilityService

android.accessibilityservice.AccessibilityService
dynamic1100.jar
.apk android
gdtadv2.jar
.apk .ps1 android polyglot

Android Permissions

3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041

Permissions

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_UPDATES

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.BROADCAST_STICKY

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

getui.permission.GetuiService.com.xinmei365.font

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.xinmei365.font

com.xinmei365.font.ui.activity.SplashActivity

Activities

com.xinmei365.font.ui.activity.SplashActivity

com.xinmei365.font.ui.activity.WindowDialogActivity

com.xinmei365.font.ui.activity.FontPreviewActivity

com.xinmei365.font.socrial.SocialActivity

com.xinmei365.font.ui.activity.WebViewActivity

com.xinmei365.font.ui.activity.FontPushActivity

com.tencent.tauth.AuthActivity

com.xinmei365.font.ui.launcher.AppLauncherActivity

com.xinmei365.font.ui.activity.AdsBrowserActivity

com.xinmei365.font.ui.activity.AdsMusicActivity

com.xinmei365.font.ui.activity.AdsAppStoreActivity

com.xinmei365.font.ui.activity.AdsTextActivity

com.xinmei365.font.ui.activity.AdsVideoActivity

com.xinmei365.font.ui.activity.AdsImageActivity

Permissions

Receivers

com.xinmei365.font.views.FontAppWidget

com.xinmei365.font.receiver.FontReceiver

com.xinmei365.font.receiver.InstallFontApkReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.xinmei365.font.receiver.MessageReceiver

com.qisi.koala.receiver.AgentReceiver

com.upalytics.sdk.BootUpReceiver

com.upalytics.sdk.PackageInstallReceiver

com.ningso.fontad.receiver.PushReceiver

com.ningso.fontad.receiver.KeepAlarmLiveReceiver

kdx.kdy.kdz.JJ

com.framework.admanagersdk.receiver.PowerStatusReceiver

com.framework.admanagersdk.receiver.DownloadReceiver

com.framework.admanagersdk.receiver.BootCompletedReceiver

Services

com.xinmei365.font.service.MyAccessibilityService

Android Permissions

3c4202fea0b81fc151941d237c788493673ab0ca1d20d0859bf966f395840041