636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096

General

Target

636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096
Size

10.3MB
MD5

f44a3e60d7fa534c345563c8dd639c7b
SHA1

9f0b803b6841d8f4d88539fe5ba763b2987c7a16
SHA256

636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096
SHA512

a31667dfa8e88a98824b1084d6fd1618ea164349d3bdc9254db24eb4f9bb9a45c381130e60be8010fa3ee2e782f027d0142b721ae9b9273150267fccc053748b
SSDEEP

196608:dGgsxRFu3x0e4ZWnD7iMbrToxu2kG+0hUkqDnkqjcV6Y/cdn41joVqyEZTK:b+Fu3x5T9joYHCEDnkSe6Y0WFLygTK

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096
.apk android arch:arm

com.tyhd.jujitegongdui.egamemod

com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity

Activities

com.gu.game.sdk.function.gamedata.ShortCutActivity

android.intent.action.MAIN

com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity

android.intent.action.MAIN
android.intent.action.CHINAMOBILE_OMS_GAME

mm.purchasesdk.iapservice.BillingLayoutActivity

com.tyhd.jujitegongdui.egamemod.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR_IAP
safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.DISABLE_KEYGUARD

Receivers

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

cn.play.dserv.DsReceiver

cn.play.dservice
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

com.snowfish.a.a.s.ABGSvc

com.snowfish.a.a.s.ABGSvc

mm.purchasesdk.iapservice.PurchaseService

com.tyhd.jujitegongdui.egamemod.purchaseservice.BIND

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.tyhd.jujitegongdui.egame.unicom.wostore.unipay.securityserviceframework
res.bin
.apk android
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.DISABLE_KEYGUARD

Sharing

General

Malware Config

Signatures

Files

com.tyhd.jujitegongdui.egamemod

com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity

Activities

com.gu.game.sdk.function.gamedata.ShortCutActivity

com.snowfish.cn.ganga.offline.helper.SFGameSplashActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

Permissions

Receivers

safiap.framework.CheckUpdateReceiver

cn.play.dserv.DsReceiver

Services

com.snowfish.a.a.s.ABGSvc

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

com.unicom.resourcepro

Android Permissions

636fe8507ada75d5061f6c04c3374fd6303494da7f80ea8cdcf1afb112726096