892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862

General

Target

892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862
Size

11.9MB
MD5

cc13215251944c3098486d6cc958d8a2
SHA1

e91ea03590b6a0755f9d7ec45a69409bb696fd7a
SHA256

892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862
SHA512

da3f36aec99770da4f7e841fe571bdcc7966706ca0ff29a5a3197a5b7dcea912f5e9d9e1459d16ba243447866a9e9a4a2c8eb97c620027a6f2f722bfa793aceb
SSDEEP

196608:QxN5UFmZX8fCRAP+fzGMXekz6yrXbRAAL4laOd0SaVX/HFBu0vNX3Rz:QxRZXze6zzu+LaFlEHFBPX3Rz

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862
.apk android arch:arm arch:x86

cn.keyshare.learningcenter

cn.jaxus.course.SplashActivity

Activities

cn.jaxus.course.SplashActivity

android.intent.action.MAIN

cn.jaxus.course.control.search.SearchResultActivity

android.intent.action.SEARCH

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

mm.purchasesdk.iapservice.BillingLayoutActivity

cn.jaxus.course.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_UPDATE
safiap.framework.ACTION_TO_INSTALL
safiap.framework.ACTION_TO_INSTALL_IAP
safiap.framework.ACTION_NETWORK_ERROR

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

cn.keyshare.learningcenter.jaxus.onlineapp.search.SearchAppActivity

android.intent.action.SEARCH

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
cn.keyshare.learningcenter.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW

Receivers

cn.jaxus.course.control.download.core.DownloadReceiver

android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE

safiap.framework.CheckUpdateReceiver

safiap.framework.ACTION_CANCEL_NOTIFICATION
safiap.GET_SHARED_DATA
safiap.framework.ACTION_SET_TIMER

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

cn.jaxus.course.control.push.jpush.JPushReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED

cn.jaxus.course.control.push.notification.PushNotificationReceiver

cn.keyshare.learningcenter.push.notification.action.action.clicked
cn.keyshare.learningcenter.push.notification.action.action.deleted

cn.keyshare.learningcenter.download.core.DownloadReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

cn.keyshare.learningcenter.download.receiver.DownloadControlReceiver

cn.keyshare.learningcenter.download.notificationclick
cn.keyshare.learningcenter.download.completed

cn.keyshare.learningcenter.receiver.LocalAppActionReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services

mm.purchasesdk.iapservice.PurchaseService

com.aspire.purchaseservice.BIND
android.intent.action.MAIN

safiap.framework.SafFrameworkManager

safiap.framework.sdk.ISAFFramework
safiap.framework.ACTION_START_DOWNLOAD
safiap.framework.ACTION_CHECK_UPDATE

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME
psf.apk
.apk android arch:arm arch:mips arch:x86

com.pada.padasf

com.pada.padasf.LoginActivity

Activities

com.pada.padasf.LoginActivity

android.intent.action.MAIN
com.pada.padasf.login
com.pada.padasf.register
com.pada.padasf.LoginActivity

com.pada.padasf.ui.RechargeActivity

com.pada.payaction

com.pada.padasf.sdk.ui.SDKActivity

com.pada.sdklogin

com.pada.padasf.PadaAccountCenterActivity

com.pada.padasf.showRechargeList
com.pada.padasf.showConsumesList
com.pada.padasf.changeAccount
com.pada.padasf.showRechargeUI

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.INTERNET
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW

Services

com.pada.padasf.account.PadaAuthenticatorService

android.accounts.AccountAuthenticator

com.pada.padasf.sdk.SDKService

com.pada.sdk.service

com.pada.padasf.service.RefreshUnreadNumService

gamecenter.refresh.unread.num.service.action
alipay_msp.apk
.apk android arch:arm arch:x86

com.alipay.android.app

com.alipay.android.app.pay.MainActivity

Activities

com.alipay.android.app.pay.MainActivity

android.intent.action.MAIN

com.alipay.android.app.pay.TransContainer

android.intent.action.MAIN

com.alipay.android.app.pay.HyperlinkActivity

android.intent.action.MAIN

com.alipay.android.app.pay.PageForBrowser

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

com.alipay.android.app.MspService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

cn.keyshare.learningcenter.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

cn.keyshare.learningcenter

cn.jaxus.course.SplashActivity

Activities

cn.jaxus.course.SplashActivity

cn.jaxus.course.control.search.SearchResultActivity

cn.sharesdk.framework.ShareSDKUIShell

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

cn.jpush.android.ui.PushActivity

cn.keyshare.learningcenter.jaxus.onlineapp.search.SearchAppActivity

Permissions

Receivers

cn.jaxus.course.control.download.core.DownloadReceiver

safiap.framework.CheckUpdateReceiver

cn.jpush.android.service.PushReceiver

cn.jaxus.course.control.push.jpush.JPushReceiver

cn.jaxus.course.control.push.notification.PushNotificationReceiver

cn.keyshare.learningcenter.download.core.DownloadReceiver

cn.keyshare.learningcenter.download.receiver.DownloadControlReceiver

cn.keyshare.learningcenter.receiver.LocalAppActionReceiver

Services

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

cn.jpush.android.service.PushService

com.pada.padasf

com.pada.padasf.LoginActivity

Activities

com.pada.padasf.LoginActivity

com.pada.padasf.ui.RechargeActivity

com.pada.padasf.sdk.ui.SDKActivity

com.pada.padasf.PadaAccountCenterActivity

com.tencent.tauth.AuthActivity

Permissions

Services

com.pada.padasf.account.PadaAuthenticatorService

com.pada.padasf.sdk.SDKService

com.pada.padasf.service.RefreshUnreadNumService

com.alipay.android.app

com.alipay.android.app.pay.MainActivity

Activities

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

892393e1bf6618e03fd46914bf2a8e27e74c7845982a0ff0feaa542e48b34862