8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0

General

Target

8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0
Size

4.9MB
MD5

ef6274a9441f160ce8fe83a09151974e
SHA1

85e63176cc6f4221444b88cc7a30f260f08042bb
SHA256

8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0
SHA512

95fc3f707c385ad241093c6655dff0d2cfd23d96be0bddf3393858396aa853e60d033af5ec3a26bbe76a2a11d59660f85764fe7b7725dfb0aef2e6d1d12026a9
SSDEEP

98304:WiyEDseiV1pT2LPwKS3ZwKS3ApLNGwKS3QwwKS3B1FVrOFIR2Uo+NhlS0Edbr:ST2LPwKowK9pLowKTwwK5+no+NhlNEd3

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0
.apk android arch:arm arch:x86

com.tianping.education

net.jdexam.android.app.Welcome

Activities

net.jdexam.android.app.Welcome

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT

Receivers

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

net.jdexam.android.app.intent.action.COMMAND

com.umeng.message.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

ytpp.tnbu.fk.dz.vi.inw

android.intent.action.USER_PRESENT

Services

com.umeng.message.UmengService

net.jdexam.android.app.intent.action.START
net.jdexam.android.app.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

Android Permissions

8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0

Permissions

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.tianping.education

net.jdexam.android.app.Welcome

Activities

net.jdexam.android.app.Welcome

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.BootBroadcastReceiver

ytpp.tnbu.fk.dz.vi.inw

Services

com.umeng.message.UmengService

Android Permissions

8f5f01efaedc2c3f332a9b425b64561d8d3f3e1532274b7f13d89f44d0846cb0