ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9

General

Target

ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9
Size

10.8MB
MD5

52ec69fe68594e0402323d7f4d6857cd
SHA1

451124a391e8a014e60637de4962b76f3c400d57
SHA256

ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9
SHA512

8d3a72b8743d827e0389728eb64c1d6a9c8237bc2b63ff4e0a1d96e552873641f1a41330f4dc06d9dddc635d601e9c536da6726e284de0f1311df8102f1edec0
SSDEEP

196608:IaaoVSgl8IAnTGPJ+L884rTPxCl8VnmHYeZm3puih8LPpUfhS1U12:LVHOnU+L6GsnmHYeou5u92

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9
.apk android arch:arm arch:mips arch:x86

com.tigu.app.activityffm

com.tigu.app.activity.FlashActivity

Activities

com.tigu.app.activity.FlashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

com.tigu.hnko.gh

android.intent.action.CREATE_SHORTCUT
android.intent.action.DELETE

com.tigu.hnko.ge

android.intent.action.CREATE_SHORTCUT
android.intent.action.DELETE

Permissions

android.permission.GET_TASKS
android.permission.ACCESS_FINE_LOCATION
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.SEND_SMS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.ACCESS_WIFI_STATE
getui.permission.GetuiService
android.permission.ACCESS_COARSE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.INSTALL_SHORTCUT
com.android.launcher2.permission.UNINSTALL_SHORTCUT
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher3.permission.INSTALL_SHORTCUT
com.android.launcher3.permission.UNINSTALL_SHORTCUT
com.android.launcher3.permission.READ_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RESTART_PACKAGES

Receivers

com.tigu.app.framework.NetReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.tigu.app.msg.getui.PushReceiver

com.igexin.sdk.action.2Z3uFxdX1UA9arIzGCROg3

com.igexin.sdk.PushReceiver

com.igexin.sdk.action.pushmanager
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.2Z3uFxdX1UA9arIzGCROg3

com.tigu.hnko.ee

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Services
alipay_msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService
plugin-deploy.jar
.apk android

Android Permissions

ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9

Permissions

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.SEND_SMS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

getui.permission.GetuiService

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.INSTALL_SHORTCUT

com.android.launcher2.permission.UNINSTALL_SHORTCUT

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.INSTALL_SHORTCUT

com.android.launcher3.permission.UNINSTALL_SHORTCUT

com.android.launcher3.permission.READ_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.tigu.app.activityffm

com.tigu.app.activity.FlashActivity

Activities

com.tigu.app.activity.FlashActivity

com.tencent.tauth.AuthActivity

cn.sharesdk.framework.ShareSDKUIShell

com.tigu.hnko.gh

com.tigu.hnko.ge

Permissions

Receivers

com.tigu.app.framework.NetReceiver

com.tigu.app.msg.getui.PushReceiver

com.igexin.sdk.PushReceiver

com.igexin.getuiext.service.PayloadReceiver

com.tigu.hnko.ee

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

ab9ac5b00e9c58012a054a68dc0f49f174c9b82df56ff1afb8bb34e8a42392d9