60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7

General

Target

60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7
Size

4.0MB
MD5

7b82bd9ce5006b19a1a6e25e3cf4cb0b
SHA1

b28d44087089e723df24b8dc8b26266d91104a9b
SHA256

60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7
SHA512

b2f7e1eab038baaba259c0a80d69b695cb408335ea483c29a0072ddd17697d1ba61e7659799fb3b34f6220445465233c936c8716643282dead5f2ec06400fd8a
SSDEEP

98304:DPb7lDNXGUGoD6bQcyPxixgZ8ySTXtUnLUz9WY7MVrYNdp+CSjgcH2i5Z+Co+q:zXGbLEcKxxaDtUnLUH7SQdp+CSjvWN+q

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7
.apk android

com.shyz.toutiao

com.shyz.clean.activity.CleanSplashActivity

Activities

com.shyz.clean.activity.CleanSplashActivity

android.intent.action.MAIN

cn.hi321.browser.ui.activities.SplashActivity

android.intent.action.MAIN

cn.hi321.browser.ui.activities.HomeActivity

cn.hi321.browser.action.SHORTCUT
android.intent.action.VIEW
android.intent.action.MAIN

cn.hi321.browser.player.SystemPlayer

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SENDTO
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH

Permissions

android.permission.SYSTEM_ALERT_WINDOW
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.RAISED_THREAD_PRIORITY
android.permission.MODIFY_AUDIO_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_USER_PRESENT
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK

Receivers

com.shyz.clean.server.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.shyz.clean.server.AppStateReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
CLICK_INSTALL_APP_NOTIFY

com.shyz.toutiao.receiver.WebReceiver

android.intent.action.MY_BROADCAST
android.intent.action.START_FLOATSERVICE
android.intent.action.STOP_FLOATSERVICE
android.intent.action.NET_STATIC_CHANGE
android.intent.action.GGTOUTIAO_LAUCHER

cn.hi321.browser.utils.ProxyChangeReceiver

android.intent.action.PROXY_CHANGE

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.shyz.toutiao.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

com.silence.queen.broatcast.QueenReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.SIM_STATE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_TICK
android.intent.action.LOCALE_CHANGED
com.shyz.desktop.action.LOG_STATUS

Services

com.shyz.clean.server.UpdateNoService

com.shyz.clean.server

io.vov.vitamio.VitamioService

io.vov.vitamio.IVitamioService

com.umeng.message.UmengService

com.shyz.toutiao.intent.action.START
com.shyz.toutiao.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.unregistercallback.action
com.umeng.message.message.handler.action
com.umeng.message.autoupdate.handler.action

com.shyz.toutiao.service.BrowserService

com.shyz.toutiao.server

com.silence.queen.service.ActivateReportService

com.shyz.toutiao.action.ActivateReportService
gdtadv2.jar
.apk android

Android Permissions

60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7

Permissions

android.permission.SYSTEM_ALERT_WINDOW

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RAISED_THREAD_PRIORITY

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.READ_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files

com.shyz.toutiao

com.shyz.clean.activity.CleanSplashActivity

Activities

com.shyz.clean.activity.CleanSplashActivity

cn.hi321.browser.ui.activities.SplashActivity

cn.hi321.browser.ui.activities.HomeActivity

cn.hi321.browser.player.SystemPlayer

Permissions

Receivers

com.shyz.clean.server.ConnectionChangeReceiver

com.shyz.clean.server.AppStateReceiver

com.shyz.toutiao.receiver.WebReceiver

cn.hi321.browser.utils.ProxyChangeReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

com.silence.queen.broatcast.QueenReceiver

Services

com.shyz.clean.server.UpdateNoService

io.vov.vitamio.VitamioService

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.shyz.toutiao.service.BrowserService

com.silence.queen.service.ActivateReportService

Android Permissions

60726a7672c4ccdaa037ff0f98940494c66ada1bfa7acbe2d89ff540105b72d7