c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9

General

Target

c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9
Size

6.3MB
MD5

76e55a23b60f21cc66f4b4b7ef9ae75b
SHA1

10aaca77c97eb13d291f8a4ff64c2ee2fef907d7
SHA256

c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9
SHA512

9cc3b0c452138d8ea1c35224e74c7bb7ea24afe825c5fe4a8ce6ee8bc29e0d5d5b064c12d756701f969de8fe56cb8915ed987aacac004ec93f36ca0392eb44ff
SSDEEP

98304:eTM0q1HV5JD+RsPcWIPcbvaFIognJOVaAQT4K2rhX3h34M7lHIkAomciECsKhdcK:eTM0qNbiFIHyoTGxoMekAX9ECduh/xM

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9
.apk android arch:arm

net.witech.emergency

net.witech.emergency.activity.SplashActivity

Activities

net.witech.emergency.activity.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

net.witech.emergency.voip.CallOutActivity

com.voice.demo.ACTION_VOIP_OUTCALL

net.witech.emergency.voip.CallInActivity

com.voice.demo.ACTION_VOIP_INCALL
com.voice.demo.ACTION_VIDEO_INTCALL

Permissions

android.permission.RECORD_AUDIO
net.witech.emergency.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_COARSE_UPDATES
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.VIBRATE
android.permission.CAMERA
android.permission.CALL_PHONE
getui.permission.GetuiService.net.witech.emergency
android.permission.GET_TASKS

Receivers

com.easemob.chat.StartServiceReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

net.witech.emergency.receiver.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

net.witech.emergency.receiver.PushReceiver

com.igexin.sdk.action.O5NI3qhLLO7cqxOHLTBCh3

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.O5NI3qhLLO7cqxOHLTBCh3

net.witech.emergency.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

Services
alipay_plugin.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

Android Permissions

c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9

Permissions

android.permission.RECORD_AUDIO

net.witech.emergency.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_COARSE_UPDATES

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.CAMERA

android.permission.CALL_PHONE

getui.permission.GetuiService.net.witech.emergency

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

net.witech.emergency

net.witech.emergency.activity.SplashActivity

Activities

net.witech.emergency.activity.SplashActivity

com.tencent.tauth.AuthActivity

net.witech.emergency.voip.CallOutActivity

net.witech.emergency.voip.CallInActivity

Permissions

Receivers

com.easemob.chat.StartServiceReceiver

net.witech.emergency.receiver.NetworkReceiver

net.witech.emergency.receiver.PushReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.getuiext.service.PayloadReceiver

net.witech.emergency.AppRegister

Services

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

Android Permissions

c1893c7c0ae4107df4ac862199801f3c8b4308e154b9d3fdb44a43c1c83c15c9