52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743

General

Target

52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743
Size

16.2MB
MD5

a63bf0ea21b92446f005eca955a4a842
SHA1

aaea7eeee932ac8228f6d1a739cad1c27bcf8ff7
SHA256

52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743
SHA512

74f1ec480d9e9662b7073bb4d21c8d68c043f8970435954b61350193fd64675e744df5ce9e1ebc63d8e468de1bf7b2712b31942e0c7fdba76e18c89d8d25b156
SSDEEP

393216:Kh/z4f6C38SBGkTvqW5/JEWQmzBbnVqJe+eeX/2:6/8f6C3F5LqIxEtmz1nQ/X/2

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by NFC services to bind with the system. Allows apps to interact with NFC hardware.	android.permission.BIND_NFC_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743
.apk android arch:arm arch:x86

com.iss.weifangbank

com.iss.weifangbank.activity.SplashActivity

Activities

com.iss.weifangbank.activity.SplashActivity

android.intent.action.MAIN

com.iss.loghandler.ErrorHandler

android.intent.action.VIEW

com.iss.sdpersonalbank.activity.ICTransferActivity

android.nfc.action.TECH_DISCOVERED

Permissions

android.permission.CAMERA
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_ACCOUNTS
android.permission.BROADCAST_STICKY
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_STORAGE
android.permission.CALL_PHONE
android.permission.GET_TASKS
android.permission.BLUETOOTH
android.permission.NFC
android.permission.FLASHLIGHT
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Receivers

com.gwunited.mobile.platform.receiver.PaymentReceiver

payment.ACTION_REPLENISH
android.net.conn.CONNECTIVITY_CHANGE

Services

com.baidu.location.f

com.baidu.location.service_v2.2

com.iss.sdpersonalbank.service.PreventHijackService

COM.ISS.SDBANK.APPSERVICE

com.gwunited.mobile.platform.PaymentHostApduService

android.nfc.cardemulation.action.HOST_APDU_SERVICE

Android Permissions

52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743

Permissions

android.permission.CAMERA

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.RECORD_VIDEO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_STORAGE

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.NFC

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

Files

com.iss.weifangbank

com.iss.weifangbank.activity.SplashActivity

Activities

com.iss.weifangbank.activity.SplashActivity

com.iss.loghandler.ErrorHandler

com.iss.sdpersonalbank.activity.ICTransferActivity

Permissions

Receivers

com.gwunited.mobile.platform.receiver.PaymentReceiver

Services

com.baidu.location.f

com.iss.sdpersonalbank.service.PreventHijackService

com.gwunited.mobile.platform.PaymentHostApduService

Android Permissions

52fb2674c159fe6f99c427ac1caa98d310167ff444c629035da5e7fd18f3b743