75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44

General

Target

75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44
Size

6.3MB
MD5

b65aa4064ece5a242818361ac0069d13
SHA1

10f2365ee8d8a4b1dbdcc53597bf05fa821b9fb6
SHA256

75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44
SHA512

e39e77a7f9c5ca4c4d76bbb27579b0cbb576c34a221eb16d3e9990ceefd38a7406394c8036a9d4b33f07abeebf0de07e85d09976ec9ad5b44b7b5150288cb02b
SSDEEP

98304:uAfILeEGRGaWLWpnWVpk0fjSSsbjAnnRBKKI4BHE4NcuN/6Y7tbVXo69F:UZGsamOnYk0ZsbgnRJH/6Y7t5oU

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44
.apk android arch:arm

com.iboxpay.iboxpay

.SplashScreenActivity

Activities

.SplashScreenActivity

android.intent.action.MAIN

.HomeActivity

android.intent.action.VIEW

com.iboxpay.iboxpay.barcode.CaptureActivity

com.iboxpay.iboxpay.barcode

.SuggestionActivity

android.intent.action.VIEW

.ParterRequestAppActivity

COM.IBOXPAY.PARTER.REQUEST.PAYPARAM

.ParterWapActivity

COM.IBOXPAY.IBOXPAY.WUBAIWAN.PAYSTATUS

.QrOrderInfoActivity

COM.IBOXPAY.IBOXPAY_QRPOS.PAYSTATUS

.QrTransOrderInfoActivity

COM.IBOXPAY.IBOXPAY_QRTRANS.PAYSTATUS

com.gewaramoviesdk.pay.OrderSuccessActivity

com.gewara.iBOXPAY.PayStatus

Permissions

android.permission.READ_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.INTERNET
android.permission.RECORD_AUDIO
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Services
UPPayPluginEx.apk
.apk android arch:arm

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.webkit.permission.PLUGIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN

Android Permissions

75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44

Permissions

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

Files

com.iboxpay.iboxpay

.SplashScreenActivity

Activities

.SplashScreenActivity

.HomeActivity

com.iboxpay.iboxpay.barcode.CaptureActivity

.SuggestionActivity

.ParterRequestAppActivity

.ParterWapActivity

.QrOrderInfoActivity

.QrTransOrderInfoActivity

com.gewaramoviesdk.pay.OrderSuccessActivity

Permissions

Services

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

Permissions

Services

com.UCMobile.PayPlugin.PayPluginService

Android Permissions

75bbab7050a6e5ff5a078dbd3c821b8ea68c85ec1fa80ade1b298f753a659e44