3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97

General

Target

3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97
Size

23.8MB
MD5

775fff4121112cbd452b9046527c55cd
SHA1

c969f20af2a1b962c2d1b465c6c58e7af6a6522e
SHA256

3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97
SHA512

2817f2e4e560a3b0c60268ea00d43504c4ce61259b3ded1e6eecbcc2c3fb6caab60c2365f6224234b8b8fe97d3b8f8ead78bab4b931818462733406a4b094be9
SSDEEP

393216:D73tlgMhCOJg3dvpTFJ6/5n8+0dVt05UwlKIDD6TA+GcpxPvMXqxlO1:XXg6Fg3dvpT36/5nam5T9DD60+p86xq

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97
.apk android arch:arm

com.mirth.cam.pic

com.poseidon.SplashActivity

Activities

com.poseidon.SplashActivity

android.intent.action.MAIN

com.mirth.campic.camera.CameraActivity

android.media.action.IMAGE_CAPTURE
android.intent.action.MAIN

com.mirth.campic.CampicActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.mirth.event.WebActivity

android.intent.action.VIEW

com.mirth.campic.editor.advance.EditorActivity

android.intent.action.SEND
android.intent.action.EDIT

com.mirth.campic.setting.SettingActivity

Android.intent.action.VIEW

com.mirth.shop.ShopActivity

android.intent.action.MAIN

com.mirth.shop.ManagerActivity

android.intent.action.simple.shop.manager

com.mirth.shop.PreviewActivity

android.intent.action.simple.shopdetail.preview

com.mirth.gallery.ShortCutEmptyActivity

android.intent.action.MAIN

com.cloudtech.ads.view.InnerWebLandingActivity

com.cloudtech.action.InnerWebLanding

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.mirth.gallery.GalleryActivity

android.intent.action.PICK
android.intent.action.GET_CONTENT

com.ufotosoft.editor.crop.CropActivity

com_ufotosoft_action_image_fixed_crop

com.ufotosoft.editor.fixedcrop.GuidelineFixedCropActivity

com_ufotosoft_action_guideline_fixed_crop

com.ufotosoft.editor.fixedcrop.GuidelineFixedCropBlurActivity

com_ufotosoft_action_guideline_fixed_crop_blur

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.DISABLE_KEYGUARD
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.huawei.launcher.permission.READ_SETTINGS
com.huawei.launcher.permission.WRITE_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.VIBRATE
com.android.vending.BILLING
android.permission.GET_TASKS
android.permission.ACCESS_FINE_LOCATION
com.ufotosoft.common.push.permission.C2D_MESSAGE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.c2dm.permission.RECEIVE
com.mirth.campic.permission.C2D_MESSAGE

Receivers

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.ANALYTICS_DISPATCH

com.google.android.gms.analytics.CampaignTrackingReceiver

com.android.vending.INSTALL_REFERRER

com.ufotosoft.ad.common.OptimizeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.duapps.ad.base.PackageAddReceiver

android.intent.action.PACKAGE_ADDED

com.intowow.sdk.ScheduleReceiver

com.intowow.sdk.prefetch

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.immediately.daemon.BootCompleteReceiver

android.intent.action.QUICKBOOT_POWERON
android.bluetooth.adapter.action.STATE_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.WALLPAPER_CHANGED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_REPLACED
android.provider.Telephony.SECRET_CODE
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
com.jiubang.alock.ACTION_LOCKER_ACCOUNT_CHANGE
com.jiubang.alocker.theme.change
com.jiubang.alocker.monitor.vip
com.jiubang.alocker.refresh.vip

com.poseidon.AdReceiver

android.intent.action.USER_PRESENT

Services

com.mirth.push.firebase.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.mirth.push.firebase.MyFirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.ufotosoft.common.push.pushCore.FireBasePushInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.RECORD_VIDEO

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.DISABLE_KEYGUARD

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher.permission.READ_SETTINGS

com.huawei.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

com.android.vending.BILLING

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

com.ufotosoft.common.push.permission.C2D_MESSAGE

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.c2dm.permission.RECEIVE

com.mirth.campic.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.mirth.cam.pic

com.poseidon.SplashActivity

Activities

com.poseidon.SplashActivity

com.mirth.campic.camera.CameraActivity

com.mirth.campic.CampicActivity

com.mirth.event.WebActivity

com.mirth.campic.editor.advance.EditorActivity

com.mirth.campic.setting.SettingActivity

com.mirth.shop.ShopActivity

com.mirth.shop.ManagerActivity

com.mirth.shop.PreviewActivity

com.mirth.gallery.ShortCutEmptyActivity

com.cloudtech.ads.view.InnerWebLandingActivity

com.tencent.tauth.AuthActivity

com.mirth.gallery.GalleryActivity

com.ufotosoft.editor.crop.CropActivity

com.ufotosoft.editor.fixedcrop.GuidelineFixedCropActivity

com.ufotosoft.editor.fixedcrop.GuidelineFixedCropBlurActivity

Permissions

Receivers

com.google.android.gms.analytics.AnalyticsReceiver

com.google.android.gms.analytics.CampaignTrackingReceiver

com.ufotosoft.ad.common.OptimizeReceiver

com.duapps.ad.base.PackageAddReceiver

com.intowow.sdk.ScheduleReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.immediately.daemon.BootCompleteReceiver

com.poseidon.AdReceiver

Services

com.mirth.push.firebase.MyFirebaseMessagingService

com.mirth.push.firebase.MyFirebaseInstanceIdService

com.ufotosoft.common.push.pushCore.FireBasePushInstanceIdService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

3edc9cf75f575c3d86b8c7e6189e23fb8eaa5650213bc79f077a0ac22b162d97