d3c1a262d18aeb2e2d22cd8ce2ef22af562c198742ed6751ed7c218c0a6ee553

Sharing

Copy URL Twitter E-mail

General

Target

d3c1a262d18aeb2e2d22cd8ce2ef22af562c198742ed6751ed7c218c0a6ee553
Size

22.0MB
MD5

a37a6bef5573e80d353edde03340c091
SHA1

4eba13ecee0adc71883d7ad22c819a46d8baa5cd
SHA256

d3c1a262d18aeb2e2d22cd8ce2ef22af562c198742ed6751ed7c218c0a6ee553
SHA512

d8571c8ff917dbbc5d806b1e6557eb14a340786d1f7247c4f83d3a3f073f5eea0b6144e9e517a8add80e73f18c5cda3a8e2c65c27f5864f2536f021799cd9d19
SSDEEP

393216:I7AHRuAumAGjdhB7nur7QIqnCJqVV1CTIXv2jmzIi:IcYtmAGjFCr/VgL1C0mmV

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

d3c1a262d18aeb2e2d22cd8ce2ef22af562c198742ed6751ed7c218c0a6ee553
.apk android arch:arm

com.jin91.preciousmetal

guoxin.app.android.activity.start.StartActivity

Activities

guoxin.app.android.activity.start.StartActivity

android.intent.action.MAIN
android.intent.action.VIEW

guoxin.app.android.JumpActivity

android.intent.action.VIEW

guoxin.app.android.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

com.bloomplus.trade.activity.V3AccountInfoActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3AccountManagerActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalBankMoneyQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3BuyBackActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3BuyBackHoldActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalBankInfoActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CaptialOperiteActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ChangeLoginPwdActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ChangePasswordActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ChangePwdActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ChoiceHoldListingWithGoodsActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ChoiceHoldListingWithHoldActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3DelistingActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ETrustBillActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ETrustBillDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3GoodsInfoActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3GoodsInfoDeatilActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3HoldingDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3HoldingDetailMoreActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3HoldingQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3HoldingQueryDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalPasswordInitActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalPwdResetActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3InqureActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3LoginActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3LoginForgetPwdActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3MarketPriceBuyBackActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3MarketPriceDelistingActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3CapitalIOMoneyMangeActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3MoreActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3NoticeActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3NoticeDetailNewActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3NoticeDetailOldActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3NoticeListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3NowStatusActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3OrderQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3PhoneMangeActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3PhonePwdResetActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReferPriceBuybackActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReferPriceDelistingActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportFundsFlowQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportFundsStatusQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportTurnoverQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportHoldDetailQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportQueryListDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportSettledStorageChargesDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportSettledStorageChargesSumActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportSettledHoldingSettlementDetailQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ReportSettledHoldingSettlementDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettingActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TradeActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrunoverDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrunoverQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrunoverQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrunoverDeatilActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrustQueryDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3TrustQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3WarningActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3WarningAddActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ListingFiltedResultActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3ListingFilterActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementManageActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementListQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementListQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementListDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementApplyActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementWarehouseSelectActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledWarehouseReceiptQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledWarehouseReceiptFlowActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledWarehouseReceiptDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledWarehouseReceiptQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledLadingBillDetailActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledLadingBillQueryActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettledLadingBillQueryListActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementInvoiceInfoManageActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementInvoiceInfoAddActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementInvoiceSenderInfoManageActivity

android.intent.action.MAIN

com.bloomplus.trade.activity.V3SettlementInvoiceSenderInfoAddActivity

android.intent.action.MAIN

Permissions

com.jin91.preciousmetal.permission.JPUSH_MESSAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.SET_DEBUG_APP
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_APN_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.CALL_PHONE
android.permission.VIBRATE
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
com.google.android.c2dm.permission.RECEIVE
com.jin91.preciousmetal.permission.C2D_MESSAGE
com.jin91.preciousmetal.permission.MIPUSH_RECEIVE
android.permission.CHANGE_NETWORK_STATE
android.permission.RESTART_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Receivers

com.hyphenate.chat.EMMipushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.hyphenate.chat.EMHuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL
com.huawei.intent.action.PUSH
com.huawei.intent.action.PUSH_ON
com.huawei.android.push.PLUGIN

guoxin.app.android.receivers.GPushReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.CONNECTION

guoxin.app.android.receivers.CompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.hyphenate.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

Services

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

Android Permissions

d3c1a262d18aeb2e2d22cd8ce2ef22af562c198742ed6751ed7c218c0a6ee553

Permissions

com.jin91.preciousmetal.permission.JPUSH_MESSAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_APN_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.jin91.preciousmetal.permission.C2D_MESSAGE

com.jin91.preciousmetal.permission.MIPUSH_RECEIVE

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Sharing

General

Malware Config

Signatures

Files

com.jin91.preciousmetal

guoxin.app.android.activity.start.StartActivity

Activities

guoxin.app.android.activity.start.StartActivity

guoxin.app.android.JumpActivity

guoxin.app.android.WBShareActivity

com.tencent.tauth.AuthActivity

cn.jpush.android.ui.PushActivity

com.bloomplus.trade.activity.V3AccountInfoActivity

com.bloomplus.trade.activity.V3AccountManagerActivity

com.bloomplus.trade.activity.V3CapitalBankMoneyQueryActivity

com.bloomplus.trade.activity.V3BuyBackActivity

com.bloomplus.trade.activity.V3BuyBackHoldActivity

com.bloomplus.trade.activity.V3CapitalBankInfoActivity

com.bloomplus.trade.activity.V3CapitalQueryActivity

com.bloomplus.trade.activity.V3CapitalQueryListActivity

com.bloomplus.trade.activity.V3CaptialOperiteActivity

com.bloomplus.trade.activity.V3ChangeLoginPwdActivity

com.bloomplus.trade.activity.V3ChangePasswordActivity

com.bloomplus.trade.activity.V3ChangePwdActivity

com.bloomplus.trade.activity.V3ChoiceHoldListingWithGoodsActivity

com.bloomplus.trade.activity.V3ChoiceHoldListingWithHoldActivity

com.bloomplus.trade.activity.V3DelistingActivity

com.bloomplus.trade.activity.V3ETrustBillActivity

com.bloomplus.trade.activity.V3ETrustBillDetailActivity

com.bloomplus.trade.activity.V3GoodsInfoActivity

com.bloomplus.trade.activity.V3GoodsInfoDeatilActivity

com.bloomplus.trade.activity.V3HoldingDetailActivity

com.bloomplus.trade.activity.V3HoldingDetailMoreActivity

com.bloomplus.trade.activity.V3HoldingQueryActivity

com.bloomplus.trade.activity.V3HoldingQueryDetailActivity

com.bloomplus.trade.activity.V3CapitalPasswordInitActivity

com.bloomplus.trade.activity.V3CapitalPwdResetActivity

com.bloomplus.trade.activity.V3InqureActivity

com.bloomplus.trade.activity.V3LoginActivity

com.bloomplus.trade.activity.V3LoginForgetPwdActivity

com.bloomplus.trade.activity.V3MarketPriceBuyBackActivity

com.bloomplus.trade.activity.V3MarketPriceDelistingActivity

com.bloomplus.trade.activity.V3CapitalIOMoneyMangeActivity

com.bloomplus.trade.activity.V3MoreActivity

com.bloomplus.trade.activity.V3NoticeActivity

com.bloomplus.trade.activity.V3NoticeDetailNewActivity

com.bloomplus.trade.activity.V3NoticeDetailOldActivity

com.bloomplus.trade.activity.V3NoticeListActivity

com.bloomplus.trade.activity.V3NowStatusActivity

com.bloomplus.trade.activity.V3OrderQueryActivity

com.bloomplus.trade.activity.V3PhoneMangeActivity

com.bloomplus.trade.activity.V3PhonePwdResetActivity

com.bloomplus.trade.activity.V3ReferPriceBuybackActivity

com.bloomplus.trade.activity.V3ReferPriceDelistingActivity

com.bloomplus.trade.activity.V3ReportQueryActivity

com.bloomplus.trade.activity.V3ReportFundsFlowQueryListActivity

com.bloomplus.trade.activity.V3ReportFundsStatusQueryListActivity

com.bloomplus.trade.activity.V3ReportTurnoverQueryListActivity

com.bloomplus.trade.activity.V3ReportHoldDetailQueryListActivity

com.bloomplus.trade.activity.V3ReportQueryListDetailActivity

com.bloomplus.trade.activity.V3ReportSettledStorageChargesDetailActivity

com.bloomplus.trade.activity.V3ReportSettledStorageChargesSumActivity

com.bloomplus.trade.activity.V3ReportSettledHoldingSettlementDetailQueryListActivity

com.bloomplus.trade.activity.V3ReportSettledHoldingSettlementDetailActivity

com.bloomplus.trade.activity.V3SettingActivity

com.bloomplus.trade.activity.V3TradeActivity

com.bloomplus.trade.activity.V3TrunoverDetailActivity

com.bloomplus.trade.activity.V3TrunoverQueryActivity

com.bloomplus.trade.activity.V3TrunoverQueryListActivity

com.bloomplus.trade.activity.V3TrunoverDeatilActivity

com.bloomplus.trade.activity.V3TrustQueryDetailActivity

com.bloomplus.trade.activity.V3TrustQueryListActivity

com.bloomplus.trade.activity.V3WarningActivity

com.bloomplus.trade.activity.V3WarningAddActivity

com.bloomplus.trade.activity.V3ListingFiltedResultActivity

com.bloomplus.trade.activity.V3ListingFilterActivity

com.bloomplus.trade.activity.V3SettlementManageActivity

com.bloomplus.trade.activity.V3SettlementListQueryActivity

com.bloomplus.trade.activity.V3SettlementListQueryListActivity