be7a60a095e31a327a9b3b05d0a7a93f03b641cc0cf5cc3c8ab142ec7d10fdb5

Sharing

Copy URL Twitter E-mail

General

Target

be7a60a095e31a327a9b3b05d0a7a93f03b641cc0cf5cc3c8ab142ec7d10fdb5
Size

6.8MB
MD5

fd3c34814459f95ae89ca0bcfe4ab70a
SHA1

14e2dcb274416fe97e004f787f64408d85759ab3
SHA256

be7a60a095e31a327a9b3b05d0a7a93f03b641cc0cf5cc3c8ab142ec7d10fdb5
SHA512

41348aab0346787306b875f2e3f9a3dfd83ca325aa033576f694251ce30747112c29b5993d46a6e2fd3e73e4f52421daba88ba2265728e9116b7922195be10f7
SSDEEP

98304:Jfvp39nqqS72u5wfnfgDhDW22hD57wl4eBX9gXT73l1bSUCGeFatcONQ:x1BsKIht2htwVMfbHOFathNQ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 24 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to add voicemails into the system.	com.android.voicemail.permission.ADD_VOICEMAIL
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

be7a60a095e31a327a9b3b05d0a7a93f03b641cc0cf5cc3c8ab142ec7d10fdb5
.apk android

ect.emessager.main

.ui.SplashScreen

Activities

.ui.SplashScreen

android.intent.action.MAIN

.ui.ComposeMessageActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

.ui.ManageSimMessages

android.intent.action.VIEW

.ui.ConfirmRateLimitActivity

com.android.mms.RATE_LIMIT_SURPASSED

com.haka.ContactControl

android.app.Activity

com.haka.BlackList.BlackListActivity

android.app.Activity

com.haka.SelectNumberEditActivity

android.app.Activity

com.haka.ContactTabControl

android.app.Activity

com.haka.CallRecordsList

android.app.Activity

com.haka.PhoneNumberList

android.app.Activity

com.haka.ContactView

android.app.Activity

file.manager.FileManager

xjf.intent.action.GETFILE
xjf.intent.action.GETFILES
xjf.intent.action.GETDIRECTORY

file.manager.XPackageManager

com.xjf.apk.EDIT

file.manager.FileManagerCrush

xjf.intent.action.GETFILE
xjf.intent.action.GETFILES
xjf.intent.action.GETDIRECTORY

Permissions

com.android.vending.CHECK_LICENSE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RESTART_PACKAGES
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.BROADCAST_STICKY
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INSTALL_DRM
android.permission.WRITE_SECURE_SETTINGS
android.permission.ACCESS_PHONE_SUB_INFO
com.android.voicemail.permission.ADD_VOICEMAIL
android.permission.WRITE_OWNER_DATA
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.DISABLE_KEYGUARD
android.permission.MODIFY_PHONE_STATE
adnroid.permission.ACCESS_CHECKIN_PROPERTTES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.FORCE_STOP_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.WRITE_CONTACTS
android.permission.WRITE_APN_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS

Receivers

.transaction.PushReceiver

android.provider.Telephony.WAP_PUSH_RECEIVED

.transaction.MmsSystemEventReceiver

android.intent.action.CONTENT_CHANGED
android.intent.action.BOOT_COMPLETED

.disposal.CallReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

.network.NetworkStateListener

android.net.conn.CONNECTIVITY_CHANGE

.transaction.PrivilegedSmsReceiver

android.provider.Telephony.SMS_RECEIVED

.transaction.SmsReceiver

android.intent.action.BOOT_COMPLETED
ect.emessager.main.transaction.MESSAGE_SENT
android.intent.action.SEND_MESSAGE

.transaction.MessageStatusReceiver

ect.emessager.main.transaction.MessageStatusReceiver.MESSAGE_STATUS_RECEIVED

security.Setting.Recevier.ModifyPreferences

android.security.Setting.Recevier.MODIFYPREFERENCES

.transaction.SimFullReceiver

android.provider.Telephony.SIM_FULL

.security.BroadCastForSecurity

test.contact.emessager.CONTACT_LIST

.transaction.SmsRejectedReceiver

android.provider.Telephony.SMS_REJECTED

security.Setting.Recevier.BootForPhoneLock

android.intent.action.BOOT_COMPLETED

.transaction.StartListenerReceiver

android.intent.action.BOOT_COMPLETED

com.ect.common.IntentReceiver

com.ect.email.ui.SEND
com.ect.email.ui.DATA_ITEM
com.ect.email.request.FUNCTIONAL

.transaction.ProtectSystemSmsReceiver

android.intent.action.BOOT_COMPLETED

.transaction.StartScheduleMessageListenerReceiver

android.intent.action.BOOT_COMPLETED

ect.emessager.serve.utils.MyLocal

android.intent.action.LOCALE_CHANGED

Services
Alipay_msp_online.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
eShop.apk
.apk android

ect.emessager.eshop

.ui.EctSecureShopActivity

Activities

.ui.EctSecureShopActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.FORCE_STOP_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
com.android.launcher.permission.READ_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
yCall.apk
.apk android

com.ECTPhone

.ECTPhoneActivity

Activities

.ECTPhoneActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.WRITE_APN_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.READ_SETTINGS
android.permission.RECEIVE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.SEND_SMS
android.permission.CALL_PHONE
android.permission.VIBRATE
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MODIFY_PHONE_STATE

Receivers

com.ECTPhone.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

ect.emessager.paycase.EctPayBootBroadcastReceiver

ect.emessager.pay_access_app_boot

Services
Alipay_msp_online.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
UPPayPluginEx.apk
.apk android arch:arm

com.unionpay.uppay

com.unionpay.uppay.PayActivity

Activities

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.webkit.permission.PLUGIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
com.tencent.mtt.extension.Player

Services

com.UCMobile.PayPlugin.PayPluginService

android.webkit.PLUGIN

Android Permissions

be7a60a095e31a327a9b3b05d0a7a93f03b641cc0cf5cc3c8ab142ec7d10fdb5

Permissions

com.android.vending.CHECK_LICENSE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.BROADCAST_STICKY

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INSTALL_DRM

android.permission.WRITE_SECURE_SETTINGS

android.permission.ACCESS_PHONE_SUB_INFO

com.android.voicemail.permission.ADD_VOICEMAIL

android.permission.WRITE_OWNER_DATA

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.INTERNET

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.MODIFY_PHONE_STATE

adnroid.permission.ACCESS_CHECKIN_PROPERTTES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

ect.emessager.main

.ui.SplashScreen

Activities

.ui.SplashScreen

.ui.ComposeMessageActivity

.ui.ManageSimMessages

.ui.ConfirmRateLimitActivity

com.haka.ContactControl

com.haka.BlackList.BlackListActivity

com.haka.SelectNumberEditActivity

com.haka.ContactTabControl

com.haka.CallRecordsList

com.haka.PhoneNumberList

com.haka.ContactView

file.manager.FileManager

file.manager.XPackageManager

file.manager.FileManagerCrush

Permissions

Receivers

.transaction.PushReceiver

.transaction.MmsSystemEventReceiver

.disposal.CallReceiver

.network.NetworkStateListener

.transaction.PrivilegedSmsReceiver

.transaction.SmsReceiver

.transaction.MessageStatusReceiver

security.Setting.Recevier.ModifyPreferences

.transaction.SimFullReceiver

.security.BroadCastForSecurity

.transaction.SmsRejectedReceiver

security.Setting.Recevier.BootForPhoneLock

.transaction.StartListenerReceiver

com.ect.common.IntentReceiver

.transaction.ProtectSystemSmsReceiver

.transaction.StartScheduleMessageListenerReceiver

ect.emessager.serve.utils.MyLocal

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

.AlixReceiver

Services

.AlixService

ect.emessager.eshop

.ui.EctSecureShopActivity

Activities

.ui.EctSecureShopActivity

Permissions

com.ECTPhone

.ECTPhoneActivity

Activities

.ECTPhoneActivity

Permissions

Receivers

com.ECTPhone.BootBroadcastReceiver

ect.emessager.paycase.EctPayBootBroadcastReceiver

Services

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz