78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b

Sharing

Copy URL Twitter E-mail

General

Target

78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b
Size

7.0MB
MD5

fdcdf11a359597c369c9f578798b87a9
SHA1

b4f63eb125f8e24db77c8f82fdea8dea5f9235f4
SHA256

78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b
SHA512

1a86ef93f3711627ee66d4b362d7088cd1598bdce94f5c2662eee3ebfe8a81c2deadc768f4ab4dc02c3a2ee54d9247b6c63d622658f69adc2aa6efa364e23150
SSDEEP

98304:taCyVZyI5+yFK/Ic5lA2Hqs/+8/DmyPNpxl1dIUAh4t4uvv56N1j61ZYe87OAmN3:IXVZyI55rc5lZ9/zvw9j8ZYXj8NES

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b
.apk android arch:arm

com.ldm.pregnant.fortyweeks

com.salmonwing.pregnant.SplashActivity

Activities

com.salmonwing.pregnant.SplashActivity

android.intent.action.MAIN

com.salmonwing.pregnant.MainActivity

com.ldm.pregnant.fortyweeks.MainActivity

com.salmonwing.pregnant.LoginActivity

com.salmonwing.pregnant.LoginActivity

com.salmonwing.pregnant.RegisterActivity

com.salmonwing.pregnant.RegisterActivity

com.salmonwing.pregnant.FindPasswordActivity

com.salmonwing.pregnant.FindPasswordActivity

com.salmonwing.pregnant.UserInfoActivity

com.ldm.pregnant.fortyweek.userinfo

com.salmonwing.pregnant.HomePageActivity

com.ldm.pregnant.fortyweek.homepage

com.salmonwing.pregnant.NormalWebViewerActivity

com.ldm.pregnant.fortyweek.NormalWebViewer

com.salmonwing.pregnant.AskMainTplActivity

com.salmonwing.pregnant.ASK.TPL.MAIN

com.salmonwing.pregnant.ChannelActivity

com.salmonwing.pregnant.CHANNEL

com.salmonwing.pregnant.ChannelNativeActivity

com.salmonwing.pregnant.CHANNEL.NATIVE

com.salmonwing.pregnant.TaobaoWebViewerActivity

com.ldm.pregnant.fortyweek.TaobaoWebViewer

com.salmonwing.pregnant.AskMainActivity

com.ldm.pregnant.fortyweek.ASK.MAIN

com.salmonwing.pregnant.AskEditActivity

com.ldm.pregnant.fortyweek.ASK.Edit

com.salmonwing.pregnant.AnswerHtmlMainActivity

com.salmonwing.pregnant.ANSWER.MAIN

com.salmonwing.pregnant.AnswerNativeMainActivity

com.ldm.pregnant.fortyweek.ANSWER.MAIN

com.salmonwing.pregnant.KeySearchResultActivity

com.ldm.pregnant.fortyweek.SEARCH.RESULT

com.salmonwing.pregnant.KeySearchedAskDetailActivity

com.ldm.pregnant.fortyweek.SEARCHEDASK.DETAIL

com.salmonwing.pregnant.KeySelectActivity

com.ldm.pregnant.fortyweek.KEY.SELECT

com.salmonwing.pregnant.LessonsActivity

com.ldm.pregnant.fortyweek.LESSONS

com.salmonwing.pregnant.LessonsBabyActivity

com.salmon.pregnant.BABY.LESSONS

com.salmonwing.pregnant.FoodMenuActivity

com.ldm.pregnant.fortyweek.FOOD

com.salmonwing.pregnant.FrequentlyUsedResourceActivity

com.salmonwing.pregnant.FrequentlyUsedResourceActivity

com.salmonwing.pregnant.WebViewPagerActivity

com.ldm.pregnant.fortyweek.WebViewPagerActivity

com.salmonwing.pregnant.PictureActivity

com.ldm.pregnant.fortyweek.PICTURE

com.salmonwing.pregnant.record.NoteActivity

com.ldm.pregnant.fortyweek.NOTE

com.salmonwing.pregnant.record.NoteViewActivity

com.ldm.pregnant.record.noteview

com.salmonwing.pregnant.tools.QuickeningMainActivity

com.salmonwing.pregnant.tools.quickening

com.salmonwing.pregnant.tools.QuickeningKnowledgeActivity

com.salmonwing.pregnant.tools.QuickeningKnowledgeActivity

com.salmonwing.pregnant.record.FetalMovementRecordActivity

com.ldm.pregnant.fortyweek.FETAL.MOVEMENT.RECORD

com.salmonwing.pregnant.record.PhysiqueRecordActivity

com.ldm.pregnant.fortyweek.PHYSIQUE.RECORD

com.salmonwing.schedule.ScheduleRecordActivity

com.ldm.pregnant.fortyweek.SCHEDULE.RECORD

com.salmonwing.schedule.ScheduleDateTimeSetActivity

com.ldm.pregnant.fortyweek.SCHEDULE.DATETIME.SET

com.salmonwing.pregnant.tools.ToolWeightActivity

com.ldm.pregnant.fortyweek.TOOL.WEIGHT

com.salmonwing.pregnant.tools.ToolPredictGenderActivity

com.ldm.pregnant.fortyweek.TOOL.PREDICT.GENDER

com.salmonwing.pregnant.tools.ToolPredictBabyWeightActivity

com.ldm.pregnant.fortyweek.TOOL.PREDICT.BABY.WEIGHT

com.salmonwing.pregnant.tools.ToolPredictHeightActivity

com.ldm.pregnant.fortyweek.TOOL.PREDICT.HEIGHT

com.salmonwing.pregnant.tools.ToolConstellationActivity

com.ldm.pregnant.fortyweek.TOOL.CONSTELLATION

com.salmonwing.pregnant.tools.ToolBChaoChartActivity

com.ldm.pregnant.fortyweek.TOOL.BCHAO.CHART

com.salmonwing.pregnant.tools.ToolVaccineActivity

com.ldm.pregnant.fortyweek.TOOL.VACCINE

com.salmonwing.pregnant.tools.ToolBloodTypeActivity

com.ldm.pregnant.fortyweek.TOOL.BLOODTYPE

com.salmonwing.pregnant.tools.ToolOvulatingActivity

com.ldm.pregnant.fortyweek.TOOL.OVLATING

com.salmonwing.pregnant.tools.ToolOvulatingResultActivity

com.ldm.pregnant.fortyweek.TOOL.OVLATING.RESULT

com.salmonwing.pregnant.calendar.CalendarActivity

com.ldm.pregnant.fortyweek.CALENDAR

com.salmonwing.pregnant.calendar.CalendarDayActivity

com.ldm.pregnant.fortyweek.CALENDAR.DAY

com.salmonwing.pregnant.WeekKnowActivity

com.ldm.pregnant.fortyweek.WEEK.LOCAL

com.salmonwing.pregnant.PushMessageActivity

com.ldm.pregnant.fortyweek.PUSH.LIST

com.salmonwing.pregnant.GoodsDetailActivity

com.salmonwing.pregnant.goodsdetail

com.salmonwing.pregnant.ToolsActivity

com.salmonwing.pregnant.tools

myprivate.CreateGesturePasswordActivity

myprivate.CreateGesturePasswordActivity

myprivate.GuideGesturePasswordActivity

myprivate.GuideGesturePasswordActivity

myprivate.UnlockGesturePasswordActivity

myprivate.UnlockGesturePasswordActivity

myprivate.ForgetGesturePasswordActivity

myprivate.forgetPasswordActivity

myprivate.ChangeGesturePasswordActivity

myprivate.changePasswordActivity

com.salmonwing.pregnant.SingleImageViewerActivity

com.salmonwing.pregnant.SingleImageViewerActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

com.android.launcher.permission.READ_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.MANAGE_DOCUMENTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
getui.permission.GetuiService.com.ldm.pregnant.fortyweeks
android.permission.GET_TASKS

Receivers

com.salmonwing.pregnant.app.MyPushReceiver

com.igexin.sdk.action.5DACQetoQXAU3BmKPIjk33

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.5DACQetoQXAU3BmKPIjk33

Services

com.salmonwing.pregnant.app.PregnantService

com.salmonwing.pregnant.app.PregnantService

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b

Permissions

com.android.launcher.permission.READ_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.MANAGE_DOCUMENTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

getui.permission.GetuiService.com.ldm.pregnant.fortyweeks

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

com.ldm.pregnant.fortyweeks

com.salmonwing.pregnant.SplashActivity

Activities

com.salmonwing.pregnant.SplashActivity

com.salmonwing.pregnant.MainActivity

com.salmonwing.pregnant.LoginActivity

com.salmonwing.pregnant.RegisterActivity

com.salmonwing.pregnant.FindPasswordActivity

com.salmonwing.pregnant.UserInfoActivity

com.salmonwing.pregnant.HomePageActivity

com.salmonwing.pregnant.NormalWebViewerActivity

com.salmonwing.pregnant.AskMainTplActivity

com.salmonwing.pregnant.ChannelActivity

com.salmonwing.pregnant.ChannelNativeActivity

com.salmonwing.pregnant.TaobaoWebViewerActivity

com.salmonwing.pregnant.AskMainActivity

com.salmonwing.pregnant.AskEditActivity

com.salmonwing.pregnant.AnswerHtmlMainActivity

com.salmonwing.pregnant.AnswerNativeMainActivity

com.salmonwing.pregnant.KeySearchResultActivity

com.salmonwing.pregnant.KeySearchedAskDetailActivity

com.salmonwing.pregnant.KeySelectActivity

com.salmonwing.pregnant.LessonsActivity

com.salmonwing.pregnant.LessonsBabyActivity

com.salmonwing.pregnant.FoodMenuActivity

com.salmonwing.pregnant.FrequentlyUsedResourceActivity

com.salmonwing.pregnant.WebViewPagerActivity

com.salmonwing.pregnant.PictureActivity

com.salmonwing.pregnant.record.NoteActivity

com.salmonwing.pregnant.record.NoteViewActivity

com.salmonwing.pregnant.tools.QuickeningMainActivity

com.salmonwing.pregnant.tools.QuickeningKnowledgeActivity

com.salmonwing.pregnant.record.FetalMovementRecordActivity

com.salmonwing.pregnant.record.PhysiqueRecordActivity

com.salmonwing.schedule.ScheduleRecordActivity

com.salmonwing.schedule.ScheduleDateTimeSetActivity

com.salmonwing.pregnant.tools.ToolWeightActivity

com.salmonwing.pregnant.tools.ToolPredictGenderActivity

com.salmonwing.pregnant.tools.ToolPredictBabyWeightActivity

com.salmonwing.pregnant.tools.ToolPredictHeightActivity

com.salmonwing.pregnant.tools.ToolConstellationActivity

com.salmonwing.pregnant.tools.ToolBChaoChartActivity

com.salmonwing.pregnant.tools.ToolVaccineActivity

com.salmonwing.pregnant.tools.ToolBloodTypeActivity

com.salmonwing.pregnant.tools.ToolOvulatingActivity

com.salmonwing.pregnant.tools.ToolOvulatingResultActivity

com.salmonwing.pregnant.calendar.CalendarActivity

com.salmonwing.pregnant.calendar.CalendarDayActivity

com.salmonwing.pregnant.WeekKnowActivity

com.salmonwing.pregnant.PushMessageActivity

com.salmonwing.pregnant.GoodsDetailActivity

com.salmonwing.pregnant.ToolsActivity

myprivate.CreateGesturePasswordActivity

myprivate.GuideGesturePasswordActivity

myprivate.UnlockGesturePasswordActivity

myprivate.ForgetGesturePasswordActivity

myprivate.ChangeGesturePasswordActivity

com.salmonwing.pregnant.SingleImageViewerActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.salmonwing.pregnant.app.MyPushReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

Services

com.salmonwing.pregnant.app.PregnantService

com.baidu.location.f

Android Permissions

78c8a46d7efe1074af572ed338a1b5b7bc1d07db2015bddbcaadb0b7e9696f3b