4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b

General

Target

4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b
Size

6.5MB
MD5

49bdbcba9a06496fd69ffce97363b4a7
SHA1

703ccb1d84e17fd86ce0de323e8326b3500fd0f3
SHA256

4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b
SHA512

6f915f1cde0864a5848faac37f6c5f4a3f14626e14e1bb1a301a66512b1cb7a55c7ede852edd3c382b310e36e682a33d056bdfdc3e940a86f29d1876f35f488a
SSDEEP

196608:qdhK0gRhH90pa3GNnffZEmHLcgdQy6uJcJ:qdc0gRhH/GNnHCmQgyyRi

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b
.apk android arch:arm

com.tongbu.tui

com.sand.android.pc.ui.market.main.MainActivity_

Activities

com.sand.android.pc.ui.market.main.MainActivity_

android.intent.action.MAIN
android.intent.action.MAIN

com.sand.android.pc.ui.market.detail.AppDetailActivity_

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.BATTERY_STATS
android.permission.DISABLE_KEYGUARD
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.SET_WALLPAPER
android.permission.READ_PROFILE
android.permission.READ_CONTACTS

Receivers

com.sand.android.pc.receiver.AppPackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tongbu.downloads.DownloadReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.sand.android.pc.receiver.UpdateReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.DATE_CHANGED
android.intent.action.PACKAGE_ADDED

com.sand.android.pc.receiver.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.tongbu.tui.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

com.sand.android.pc.ui.market.download.DownloadReceiver_

com.tongbu.downloads.action.DOWNLOAD_NOTIFICATION_CLICKED
com.tongbu.downloads.action.DOWNLOAD_COMPLETE
com.tongbu.downloads.action.DOWNLOAD_URL

Services

com.sand.android.pc.services.EmojiService

com.tongbu.tui.action.start_download
com.tongbu.tui.action.start_import
com.tongbu.tui.action.upload_picture

com.umeng.message.UmengService

com.tongbu.tui.intent.action.START
com.tongbu.tui.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.unregistercallback.action
com.umeng.message.message.handler.action
com.umeng.message.autoupdate.handler.action

com.tongbu.autoinstaller.service.AutoInstallerService

android.accessibilityservice.AccessibilityService

Android Permissions

4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.BATTERY_STATS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.SET_WALLPAPER

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

Sharing

General

Malware Config

Signatures

Files

com.tongbu.tui

com.sand.android.pc.ui.market.main.MainActivity_

Activities

com.sand.android.pc.ui.market.main.MainActivity_

com.sand.android.pc.ui.market.detail.AppDetailActivity_

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.sand.android.pc.receiver.AppPackageReceiver

com.tongbu.downloads.DownloadReceiver

com.sand.android.pc.receiver.UpdateReceiver

com.sand.android.pc.receiver.ConnectionChangeReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

com.sand.android.pc.ui.market.download.DownloadReceiver_

Services

com.sand.android.pc.services.EmojiService

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.tongbu.autoinstaller.service.AutoInstallerService

Android Permissions

4cb408e0b2cc14933c24bf2d098f0d365bc34deae48b5578e19f12cdfb482b2b