a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091

General

Target

a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091
Size

10.6MB
MD5

98464356d7fc059fb5400eea4f5a51d3
SHA1

d108b569023f0a6cc62835077c40f45082540bdb
SHA256

a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091
SHA512

cdf7b5e3bb8efc30a637ac6a3de8c93319c73e58e878fbc6857fa6b98e91434b0502c4008052415a7207a6bb786ecb5dfc0539af27d6ceb242a73cf6d1c1218d
SSDEEP

196608:0sj0hQ2o1YGa5UquwQTbQ5VJzOTSSLlcik+bKBWxEwbbjxsBI5FzE:9N2o1YGa5Uq8bIJS9N1D1sBWY

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Files

a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

cn.mailchat

.activity.setup.WelcomeActivity

Activities

.activity.setup.WelcomeActivity

android.intent.action.MAIN

.activity.Accounts

android.intent.action.VIEW

.activity.WebViewWithErrorViewActivity

android.intent.action.VIEW

.activity.Main4TabActivity

android.intent.action.MAIN
android.intent.action.VIEW

.activity.MailDetialActivity

android.intent.action.MAIN
android.intent.action.VIEW

.activity.Search

android.intent.action.SEARCH

.activity.UnreadWidgetConfiguration

android.appwidget.action.APPWIDGET_CONFIGURE

.activity.MailComposeActivity

android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
org.thialfihar.android.apg.permission.READ_KEY_DETAILS
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.CHANGE_CONFIGURATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA

Receivers

.service.BootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK
android.net.conn.CONNECTIVITY_CHANGE
android.net.conn.BACKGROUND_DATA_SETTING_CHANGED
com.android.sync.SYNC_CONN_STATUS_CHANGED
cn.mailchat.service.BroadcastReceiver.scheduleIntent

.service.RemoteControlReceiver

cn.mailchat.MailChatRemoteControl.set
cn.mailchat.MailChatRemoteControl.requestAccounts

.service.CoreReceiver

cn.mailchat.service.CoreReceiver.wakeLockRelease

.service.StorageReceiver

android.intent.action.MEDIA_MOUNTED

Services

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

org.thialfihar.android.apg.permission.READ_KEY_DETAILS

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

Sharing

General

Malware Config

Signatures

Files

cn.mailchat

.activity.setup.WelcomeActivity

Activities

.activity.setup.WelcomeActivity

.activity.Accounts

.activity.WebViewWithErrorViewActivity

.activity.Main4TabActivity

.activity.MailDetialActivity

.activity.Search

.activity.UnreadWidgetConfiguration

.activity.MailComposeActivity

Permissions

Receivers

.service.BootReceiver

.service.RemoteControlReceiver

.service.CoreReceiver

.service.StorageReceiver

Services

com.baidu.location.f

Android Permissions

a899c779e279c02cf2fba7489031f5e23a411f8d527ef573d0b896cfea62b091