512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea

General

Target

512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea
Size

18.8MB
MD5

0eeee0bf7da70796280bd9c012a8c84b
SHA1

d72e2d44149122f8dd9a1fbc5d281ec5857ebe20
SHA256

512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea
SHA512

8892a465a9db15cfc971df2d78589646ef8d0219478de72f004c007f8b526764f753e59c379b6c21ab301b1593300ea258aefa4d6ed317d6f6b62c88e60fa720
SSDEEP

393216:AfLgDCsxrMp+8G96i2qaIChEypqLHO2j6Ch2W6RXzTTdi2A:ATgDC64Nli2Ajy+HOOhIDTho

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea
.apk android arch:x86 arch:arm arch:mips

com.zing.zalo

vn.adflex.sdk.AdFlexSDKActivity

Activities

com.zing.zalo.ui.SplashActivity

android.intent.action.MAIN

com.zing.zalo.ui.ExternalCallSplashActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.zing.zalo.newmediapicker.MediaPickerImageFragmentActivity

com.zing.zalo.intent.action.NEW_PICK_MEDIA

com.zing.zalo.ui.MyInfoActivity

com.zing.zalo.ui.MyInfoActivity

com.zing.zalo.ui.UserDetailsActivity

com.zing.zalo.ui.UserDetailsActivity

com.zing.zalo.ui.MessagePopupActivity

com.zing.zalo.ui.MessagePopupActivityIntent

com.zing.zalo.ui.MessagePopupSMSActivity

com.zing.zalo.ui.MessagePopupSMSActivityIntent

com.zing.zalo.ui.ZaloUserPopupActivity

com.zing.zalo.ui.ZaloUserPopupActivityIntent

com.zing.zalo.ui.RetryMsgPopupActivity

com.zing.zalo.ui.RetryMsgPopupActivity

com.zing.zalo.ui.TempShareViaActivity

android.intent.action.SEND

zm.voip.ui.incall.ZmInCallActivity

zm.voip.phone.action.INCALL

vn.adflex.sdk.AdFlexSDKActivity

android.intent.action.MAIN

Permissions

com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERNET
android.permission.SET_WALLPAPER
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_MOCK_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.BLUETOOTH
android.permission.READ_LOGS
android.permission.BROADCAST_STICKY
android.permission.READ_PROFILE
android.permission.WRITE_CALL_LOG
android.permission.DEVICE_POWER
com.zing.zalo.permission.BIND_ZALO_SERVICE
zing.zalo.permission.ZALO_SERVICE
android.permission.GET_ACCOUNTS
null.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
com.nokia.pushnotifications.permission.RECEIVE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

com.zing.zalo.receiver.RadarBackgroundReceiver

com.zing.zalo.radar.offbackground

com.zing.zalo.receiver.ZaloReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.GTALK_CONNECTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PHONE_STATE
com.zing.zalo.intent.action.START_ZALO_BACKGROUND_SERVICE
com.zing.zalo.browser.action.DOWNLOAD_CANCEL
com.zing.zalo.intent.action.DELETE_NOTIFICATION
android.provider.Telephony.SMS_RECEIVED
android.provider.telephony.SMS_RECEIVED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

com.google.android.gcm.GCMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.nokia.push.PushBroadcastReceiver

com.nokia.pushnotifications.intent.RECEIVE
com.nokia.pushnotifications.intent.REGISTRATION

com.zing.zalo.receiver.VideoCompressReceiver

com.zing.zalo.action.ACTION_UPDATE_VIDEO_PROCESSING

zm.voip.service.DeviceStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
zm.voip.accounts.activate

vn.adflex.sdk.AdFlexBootUpReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_RESTARTED

Services

com.zing.zalo.service.ZaloBackgroundService

com.zing.zalo.intent.action.PICK_SERVICE

zm.voip.service.SipService

zm.voip.service.SipService
zm.voip.service.SipConfiguration

Android Permissions

512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea

Permissions

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.SET_WALLPAPER

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CAMERA

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.BLUETOOTH

android.permission.READ_LOGS

android.permission.BROADCAST_STICKY

android.permission.READ_PROFILE

android.permission.WRITE_CALL_LOG

android.permission.DEVICE_POWER

com.zing.zalo.permission.BIND_ZALO_SERVICE

zing.zalo.permission.ZALO_SERVICE

android.permission.GET_ACCOUNTS

null.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

com.nokia.pushnotifications.permission.RECEIVE

android.permission.FLASHLIGHT

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.zing.zalo

vn.adflex.sdk.AdFlexSDKActivity

Activities

com.zing.zalo.ui.SplashActivity

com.zing.zalo.ui.ExternalCallSplashActivity

com.zing.zalo.newmediapicker.MediaPickerImageFragmentActivity

com.zing.zalo.ui.MyInfoActivity

com.zing.zalo.ui.UserDetailsActivity

com.zing.zalo.ui.MessagePopupActivity

com.zing.zalo.ui.MessagePopupSMSActivity

com.zing.zalo.ui.ZaloUserPopupActivity

com.zing.zalo.ui.RetryMsgPopupActivity

com.zing.zalo.ui.TempShareViaActivity

zm.voip.ui.incall.ZmInCallActivity

vn.adflex.sdk.AdFlexSDKActivity

Permissions

Receivers

com.zing.zalo.receiver.RadarBackgroundReceiver

com.zing.zalo.receiver.ZaloReceiver

com.google.android.gcm.GCMBroadcastReceiver

com.nokia.push.PushBroadcastReceiver

com.zing.zalo.receiver.VideoCompressReceiver

zm.voip.service.DeviceStateReceiver

vn.adflex.sdk.AdFlexBootUpReceiver

Services

com.zing.zalo.service.ZaloBackgroundService

zm.voip.service.SipService

Android Permissions

512f6fbc28aaf8db2533879c41665d8af32c542fddf5c17def6900b06b03d2ea