General

  • Target

    6ee2594200f0a0a4a5706277e762c8f213431e524b0c6acc170c1003cb7e097e

  • Size

    9.7MB

  • MD5

    5a6d87242af2a5ae33726907d06792f0

  • SHA1

    7bd68a14986c6ee0e7132007f4a681b3c0f98099

  • SHA256

    6ee2594200f0a0a4a5706277e762c8f213431e524b0c6acc170c1003cb7e097e

  • SHA512

    af4a2a5ed709c84e2265c56c9d4e1cb6fb0ee7f732a5c2ca49351f39222d5bb47f8bb03106734bfbcd959c9a7759b31683c14aff27222532068c4e628d7531a0

  • SSDEEP

    196608:8+g1sgcQu+VP6nxt5xHdB++mduUduKduYdu6GVXVmy2yEzhHa3M/NHda5f:FfQuFxtntmGVlmy4zhPGN

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 10 IoCs

Files

  • 6ee2594200f0a0a4a5706277e762c8f213431e524b0c6acc170c1003cb7e097e
    .apk android arch:arm arch:mips arch:x86

    cn.sagesoft.ufingernail

    cn.sagesoft.ufingernail.activity.WelcomeActivity


  • UPPayPluginEx.apk
    .apk android arch:arm64 arch:arm arch:mips arch:x86

    com.unionpay.uppay

    com.unionpay.uppay.PayActivity


Android Permissions

6ee2594200f0a0a4a5706277e762c8f213431e524b0c6acc170c1003cb7e097e

Permissions

android.permission.READ_CONTACTS

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.BAIDU_LOCATION_SERVICE

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

cn.sagesoft.ufingernail.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE