6b0c5e0038ba57f5b291c8b49b180e3b32ee4f34abc7f087a4351a0f96e7c56d

Reason

could not process APK: could not decode AXML: unexpected chunk type

General

Target

6b0c5e0038ba57f5b291c8b49b180e3b32ee4f34abc7f087a4351a0f96e7c56d
Size

19.9MB
MD5

98859e62c33478b1f0f1755c531b6769
SHA1

2c5e5ba66735f04f70137c5c99e06e124b1bbe64
SHA256

6b0c5e0038ba57f5b291c8b49b180e3b32ee4f34abc7f087a4351a0f96e7c56d
SHA512

64f0eb88ed6c46fb4284ee13e8e476405fc473d3f846af3f6bcdebb35c62fe7281d7decc2a28b5aa19a6bf8d23af12a3efeec9b35b4821ed8edeb18972253c59
SSDEEP

393216:/0WzHRH8XmJBqQYJIpLdgD6uE+AsZ6lTbxmpWgc4Y8K8CAQYM:/0ERHomJBaJmZRuBjyjgBe8rZM

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

6b0c5e0038ba57f5b291c8b49b180e3b32ee4f34abc7f087a4351a0f96e7c56d
.apk android arch:arm arch:mips
UPPayPluginEx.apk
.apk android arch:arm arch:mips arch:x86

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player
android.webkit.permission.PLUGIN

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN
alipay_msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService
plugin-deploy.jar
.apk android

Sharing

Errors

General

Malware Config

Signatures

Files

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

Permissions

Services

com.UCMobile.PayPlugin.PayPluginService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService