c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4

General

Target

c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4
Size

11.1MB
MD5

2de5a2493fbf8aafbfd4176589a0b74b
SHA1

4116f41666c6971a08aa9eb892efc8efc7b13bbb
SHA256

c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4
SHA512

1157b0e705062cf9651e7727461523130fa8d4b41cfb3f391321da9cf95203738e8deaf8b8813185987856b08c7aa84d25b47c44304852a8e6600b29f812223c
SSDEEP

196608:faevO53wWsAU0X0/1AyScveYtclf12gHveYtcndO/veYtctPE4f2JkttUjXcQts2:LvGwOX0/1AySchtclfEgHhtcndQhtcde

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4
.apk android arch:arm

com.guding.vssq

com.aaa.MainActivity

Activities

com.aaa.MainActivity

android.intent.action.MAIN

com.utangic.webusiness.ui.LoginActivity

android.intent.action.Login

com.guding.vssq.subsettings.AppsManagerActivity

android.intent.apps.manager

com.guding.vssq.ui.DisguiseActivity

com.godinsec.disguiseActivity

com.guding.vssq.wxapi.WXPayStartActivity

com.utangic.start_pay_action

com.utangic.share.ShareActivity

com.utangic.share_private_space

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.utangic.share.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.baidu.xshield.XshieldActivity

com.baidu.action.Xshield.VIEW

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.RESTART_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.REAL_GET_TASKS
android.permission.GET_APP_OPS_STATS
android.permission.BROADCAST_PACKAGE_REMOVED
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MOVE_PACKAGE
android.permission.DELETE_PACKAGES
android.permission.WAKE_LOCK
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.vssq.permission
android.permission.READ_SMS
com.guding.vssq.permission.MIPUSH_RECEIVE12
com.meizu.flyme.push.permission.RECEIVE12
com.guding.vssq.push.permission.MESSAGE12
com.meizu.c2dm.permission.RECEIVE12
com.guding.vssq.permission.C2D_MESSAGE12
android.permission.BROADCAST_PACKAGE_ADDED12
android.permission.BROADCAST_PACKAGE_CHANGED12
android.permission.BROADCAST_PACKAGE_INSTALL12
android.permission.BROADCAST_PACKAGE_REPLACED12

Receivers

com.guding.vssq.utils.NetWorkBroadcastReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.guding.vssq.utils.UnLoginBroadcastReceiver

com.guding.vssq.onAuthorizationError

com.guding.vssq.utils.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.guding.vssq.utils.MonitorSysReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.guding.vssq.MeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

org.android.agoo.huawei.HuaWeiReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.intent.action.PUSH
com.huawei.intent.action.PUSH_STATE

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

com.guding.vssq.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

com.baidu.xshield.XshieldReceiver

com.baidu.action.Xshield.VIEW
android.intent.action.BOOT_COMPLETED

Services

com.guding.vssq.service.WeBusinessAccessibilityService

android.accessibilityservice.AccessibilityService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE
com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.XiaomiIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.enablecallback.action
com.umeng.message.disablecallback.action
com.umeng.message.message.handler.action
com.umeng.message.message.sendmessage.action

com.baidu.xshield.XshieldService

com.baidu.action.Xshield.VIEW
gdtadv2.jar
.apk android

Android Permissions

c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.REAL_GET_TASKS

android.permission.GET_APP_OPS_STATS

android.permission.BROADCAST_PACKAGE_REMOVED

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MOVE_PACKAGE

android.permission.DELETE_PACKAGES

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.vssq.permission

android.permission.READ_SMS

com.guding.vssq.permission.MIPUSH_RECEIVE12

com.meizu.flyme.push.permission.RECEIVE12

com.guding.vssq.push.permission.MESSAGE12

com.meizu.c2dm.permission.RECEIVE12

com.guding.vssq.permission.C2D_MESSAGE12

android.permission.BROADCAST_PACKAGE_ADDED12

android.permission.BROADCAST_PACKAGE_CHANGED12

android.permission.BROADCAST_PACKAGE_INSTALL12

android.permission.BROADCAST_PACKAGE_REPLACED12

Sharing

General

Malware Config

Signatures

Files

com.guding.vssq

com.aaa.MainActivity

Activities

com.aaa.MainActivity

com.utangic.webusiness.ui.LoginActivity

com.guding.vssq.subsettings.AppsManagerActivity

com.guding.vssq.ui.DisguiseActivity

com.guding.vssq.wxapi.WXPayStartActivity

com.utangic.share.ShareActivity

com.tencent.tauth.AuthActivity

com.utangic.share.WBShareActivity

com.baidu.xshield.XshieldActivity

Permissions

Receivers

com.guding.vssq.utils.NetWorkBroadcastReceiver

com.guding.vssq.utils.UnLoginBroadcastReceiver

com.guding.vssq.utils.DownloadCompleteReceiver

com.guding.vssq.utils.MonitorSysReceiver

com.guding.vssq.MeizuPushReceiver

org.android.agoo.huawei.HuaWeiReceiver

org.android.agoo.xiaomi.MiPushBroadcastReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

com.baidu.xshield.XshieldReceiver

Services

com.guding.vssq.service.WeBusinessAccessibilityService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.baidu.xshield.XshieldService

Android Permissions

c77c629e74840dc4ab14a18938c7ceae7719cbc59e9844f54c55b58fea72f1b4