General

  • Target

    b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

  • Size

    29.6MB

  • MD5

    e17c2ced315d4b038ae5802e6bbce89f

  • SHA1

    73dac9d39815a0976bc16e4e1b01d3ecafacbe25

  • SHA256

    b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

  • SHA512

    c6049e29e988d2ad01ffe5bbdc476fa8648e0db17c57b6bbcf264b3b593535ed1a5a32c7feef49b877eaa059a9f05cde39f28490893c584aece2fe47c4beb04f

  • SSDEEP

    786432:QlODb9QwV9UEa2r2qPD/eBpprvf0VH8y0rR4Po:SOD5QwXJa2rNP4TQVHZNQ

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 4 IoCs
  • Requests dangerous framework permissions 29 IoCs

Files

  • b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a
    .apk android arch:arm64 arch:arm

    com.excean.gspace

    com.excelliance.kxqp.ui.HelloActivity


  • register.jar
    .apk android

    com.exce.wv

    com.exce.wv.ui.RegisterAcitivity


  • safetynet.jar
    .apk android

    com.excean.safetynet

    com.google.android.gms.common.api.GoogleApiActivity


  • vending.jar
    .apk android

    com.excean.android.vending

    com.excean.android.vending.WebViewActivity


  • web.jar
    .apk android

    com.excean.web

    com.excean.web.MainActivity


Android Permissions

b7f53e9567cfc4db5a83df680c31142780d9ac1027c88702d0e500bfe6ee899a

Permissions

android.permission.INTERNET

android.permission.READ_CONTACTS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_APN_SETTINGS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.REORDER_TASKS

android.permission.USE_CREDENTIALS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.DISABLE_KEYGUARD

android.permission.BIND_APPWIDGET

com.android.vending.CHECK_LICENSE

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_EXTERNAL_STORAGE

android.permission.UPDATE_DEVICE_STATS

android.permission.RUN_INSTRUMENTATION

android.permission.WRITE_SECURE_SETTINGS

android.permission.SIGNAL_PERSISTENT_PROCESSES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.actionlauncher.playstore.permission.READ_SETTINGS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.motorola.dlauncher.permission.READ_SETTINGS

com.motorola.mmsp.motoswitch.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.aspire.mm.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.ty.launcher.permission.READ_SETTINGS

com.s.launcher.permission.READ_SETTINGS

com.sonyericsson.homescreen.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.mediatek.launcherplus.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS