58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e

General

Target

58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e
Size

9.7MB
MD5

16de8cf9a92c087c2c98de97e2c1c5e4
SHA1

c1cf4fa2e693cdb0f42537b6f4ff8ec1585c5179
SHA256

58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e
SHA512

e239eafd324da33b720892c0fa1f410f98aa38953c15ef6bc7d472cf94139a2699fb7a7d3181e680b8ead342498ae14ec96d9189b84878074910f88b5059823e
SSDEEP

196608:usjgnUtM1C7hsgSbTyBPP4sW2r72BLVXRwJd+8nHmIe:usjUc7LSbTUgG72BLVBw+8nHY

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e
.apk android

cn.ffcs.wisdom.edu.fashion

cn.ffcs.wisdom.city.WelcomeActivity

Activities

cn.ffcs.wisdom.city.WelcomeActivity

android.intent.action.MAIN

cn.ffcs.wisdom.city.home.HomePageActivity

android.intent.action.MAIN

cn.ffcs.wisdom.surfingscene.GlobalEyeMain

android.intent.action.MAIN

com.xmobo.pay.launchPay

com.xmobo.pay.launchPay

com.unionpay.upomp.lthj.plugin.ui.SplashActivity

com.unionpay.upomp.lthj.android.plugin.init.test

com.unionpay.upomp.lthj.plugin.ui.IndexActivityGroup

com.unionpay.upomp.lthj.android.plugin.index.test

cn.ffcs.external.traffic.customization.activity.CustomizationSettingActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.CALL_PHONE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FIND_LOCATION
android.permission.READ_CONTACTS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BROADCAST_STICKY
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_GPS

Receivers

cn.ffcs.external.share.yxapi.AppRegister

im.yixin.sdk.api.Intent.ACTION_REFRESH_YXAPP

com.ffcs.android.mc.MCBroadcastReceiver

com.ffcs.android.mc.RECEIVE
com.ffcs.android.mc.APP_START
android.net.conn.CONNECTIVITY_CHANGE
com.ffcs.android.mc.SENT_SMS_ACTION
com.ffcs.android.mc.UP_DATE
com.ffcs.android.mc.SDK_UPDATE
com.ffcs.android.mc.LoadSDK
android.provider.Telephony.SMS_RECEIVED

cn.ffcs.wisdom.city.push.BootCompleteReceiver

android.intent.action.BOOT_COMPLETED

cn.ffcs.wisdom.city.report.ReportReceiver

cn.ffcs.wisdom.edu.fashion.report

cn.ffcs.android.usragent.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

cn.ffcs.wisdom.city.push.NotifyClickReceiver

cn.ffcs.wisdom.edu.fashion.notify

com.umeng.message.RegistrationReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
cn.ffcs.wisdom.edu.fashion.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.ffcs.android.mc.MCCoreService

com.ffcs.android.mc.service.start
com.ffcs.android.mc.service.stop

cn.ffcs.wisdom.city.push.MCIntentService

com.ffcs.android.mc.service.APP_START
com.ffcs.android.mc.RECEIVE
android.net.conn.CONNECTIVITY_CHANGE
com.ffcs.android.mc.SENT_SMS_ACTION
com.ffcs.android.mc.service.NOTIFICATION_CLICK
com.ffcs.android.mc.SDK_UPDATE
com.ffcs.android.mc.LoadSDK

com.umeng.message.UmengService

cn.ffcs.wisdom.edu.fashion.intent.action.START
cn.ffcs.wisdom.edu.fashion.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
alipayplugin.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService
mc.jar
.apk android

Android Permissions

58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FIND_LOCATION

android.permission.READ_CONTACTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.WRITE_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BROADCAST_STICKY

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_GPS

Sharing

General

Malware Config

Signatures

Files

cn.ffcs.wisdom.edu.fashion

cn.ffcs.wisdom.city.WelcomeActivity

Activities

cn.ffcs.wisdom.city.WelcomeActivity

cn.ffcs.wisdom.city.home.HomePageActivity

cn.ffcs.wisdom.surfingscene.GlobalEyeMain

com.xmobo.pay.launchPay

com.unionpay.upomp.lthj.plugin.ui.SplashActivity

com.unionpay.upomp.lthj.plugin.ui.IndexActivityGroup

cn.ffcs.external.traffic.customization.activity.CustomizationSettingActivity

Permissions

Receivers

cn.ffcs.external.share.yxapi.AppRegister

com.ffcs.android.mc.MCBroadcastReceiver

cn.ffcs.wisdom.city.push.BootCompleteReceiver

cn.ffcs.wisdom.city.report.ReportReceiver

cn.ffcs.android.usragent.ConnectionChangeReceiver

cn.ffcs.wisdom.city.push.NotifyClickReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.ffcs.android.mc.MCCoreService

cn.ffcs.wisdom.city.push.MCIntentService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

58dc610cd88a99639e2b7d10a7e648dcd68504b2c7ed3afebac8d66ef56fd55e