Overview

overview

8

Static

static

6

49f3a0424a...f2.apk

android-9-x86

8

BannerPlugin-1.2.apk

android-9-x86

1

BannerPlugin-1.2.apk

android-10-x64

1

BannerPlugin-1.2.apk

android-11-x64

1

CommonPlugin-2.7.apk

android-9-x86

1

CommonPlugin-2.7.apk

android-10-x64

1

CommonPlugin-2.7.apk

android-11-x64

1

ContainerP....1.apk

android-9-x86

1

ContainerP....1.apk

android-10-x64

1

ContainerP....1.apk

android-11-x64

1

FeedPlugin-1.2.apk

android-9-x86

1

FeedPlugin-1.2.apk

android-10-x64

1

FeedPlugin-1.2.apk

android-11-x64

1

FrameworkP....8.apk

android-9-x86

1

FrameworkP....8.apk

android-10-x64

1

FrameworkP....8.apk

android-11-x64

1

TAEPlugin-1.4.apk

android-9-x86

1

TAEPlugin-1.4.apk

android-10-x64

1

__pasys_re...ll.apk

android-9-x86

__pasys_re...ll.apk

android-10-x64

__pasys_re...ll.apk

android-11-x64

__xadsdk__...__.apk

android-9-x86

__xadsdk__...__.apk

android-10-x64

__xadsdk__...__.apk

android-11-x64

gdtadv2.apk

android-9-x86

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

qhad_dynamic1113.apk

android-9-x86

qhad_dynamic1113.apk

android-10-x64

qhad_dynamic1113.apk

android-11-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    49f3a0424a949f0810f3b2ec1a69b4106ca00e4f81e3d340311bf93ef5c8d7f2

  • Size

    6.9MB

  • MD5

    c4b703081db5356033d26ccbd3cc1cba

  • SHA1

    20b17b82560c495d49dec49796d708df3b7bd979

  • SHA256

    49f3a0424a949f0810f3b2ec1a69b4106ca00e4f81e3d340311bf93ef5c8d7f2

  • SHA512

    8aa5996f6c6c7c0b7e5a5e17ec5df1a9c00f8fa8195e010fb87c9aa3ec88b61d7b83bc12b0a092c999be16d344049eb8953ebd6cae33f0ccbb4ec68a74f168ea

  • SSDEEP

    196608:21WqlI3Kp/mJjn7jFMGGSCSUTZC96Va5BlnJTcA:uVlo6sr7jFMbSDUNKua5bN

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 15 IoCs

Files

  • 49f3a0424a949f0810f3b2ec1a69b4106ca00e4f81e3d340311bf93ef5c8d7f2
    .apk android arch:arm

    com.shoujiduoduo.ringtone

    com.shoujiduoduo.ringtone.activity.WelcomeActivity


  • BannerPlugin-1.2.apk
    .apk android

    com.alimama.mobile.sdk.banner

    com.alimama.mobile.plugin.banner.service.MainActivity


  • CommonPlugin-2.7.apk
    .apk android

    com.taobao.munion.plugin.cm

    com.taobao.newxp.view.UMDetail


  • ContainerPlugin-2.1.apk
    .apk android

    com.alimama.mobile.sdk.container


  • FeedPlugin-1.2.apk
    .apk android

    com.alimama.mobile.sdk.feed


  • FrameworkPlugin-2.8.apk
    .apk android

    com.example.bizplugin


  • TAEPlugin-1.4.apk
    .apk android arch:arm arch:x86

    com.alimama.mobile.sdk.tae

    .MainActivity


  • __pasys_remote_offer_wall.jar
    .apk android
  • __xadsdk__remote__final__.jar
    .apk android
  • gdtadv2.jar
    .apk android
  • qhad_dynamic1113.jar
    .apk android

Android Permissions

49f3a0424a949f0810f3b2ec1a69b4106ca00e4f81e3d340311bf93ef5c8d7f2

Permissions

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_LOGS

android.permission.WRITE_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.READ_HISTORY_BOOKMARKS

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

com.shoujiduoduo.ringtone.permission.MIPUSH_RECEIVE