ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae

General

Target

ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae
Size

4.2MB
MD5

ce46fce8665df66287548d3ef8cd7177
SHA1

76422c4a605930e46bea39a6205870e6fc03f6af
SHA256

ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae
SHA512

554361bee91ea3b09eaff5af6caf7c1c45c643fd92d1b4bd0a55f90b2deee334297b5100f51f1df59e61e71e713f092b330c5feb3dd31d7a56878bcabea9165f
SSDEEP

98304:jVSeFUGLhH84xxNGyFFJiPReq9fSm09oDtYFWnWUkXx:jVS+3VH84guWReqRss2HHx

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae
.apk android arch:arm

com.gwt

com.gwt.StartLoading

Activities

com.gwt.StartLoading

android.intent.action.MAIN

com.unionpay.upomp.bypay.activity.SplashActivity

com.unionpay.upomp.bypay.paymain.020_111_20120705

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

Permissions

com.o2o.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.RESTART_PACKAGES
android.permission.CAMERA
android.hardware.camera.autofocus
android.hardware.camera
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_MOCK_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CONTROL_LOCATION_UPDATES
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.VIBRATE
android.permission.HARDWARE_TEST
android.permission.FLASHLIGHT
android.permission.GET_TASKS
android.permission.CALL_PRIVILEGED

Receivers

cn.jpush.android.service.PushReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.o2o.pusher.JpushReceiver

cn.jpush.android.intent.NOTIFICATION_OPENED

Services

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME
Alipay_msp_2.5.2_0426.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
TenpayService.apk
.apk android arch:arm

com.tenpay.android.service

.StartActivity

Activities

.StartActivity

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE

Services

.TenpayService

com.tenpay.android.service.ITenpayService

Android Permissions

ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae

Permissions

com.o2o.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.RESTART_PACKAGES

android.permission.CAMERA

android.hardware.camera.autofocus

android.hardware.camera

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CONTROL_LOCATION_UPDATES

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.VIBRATE

android.permission.HARDWARE_TEST

android.permission.FLASHLIGHT

android.permission.GET_TASKS

android.permission.CALL_PRIVILEGED

Sharing

General

Malware Config

Signatures

Files

com.gwt

com.gwt.StartLoading

Activities

com.gwt.StartLoading

com.unionpay.upomp.bypay.activity.SplashActivity

cn.jpush.android.ui.PushActivity

Permissions

Receivers

cn.jpush.android.service.PushReceiver

com.o2o.pusher.JpushReceiver

Services

cn.jpush.android.service.PushService

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

com.tenpay.android.service

.StartActivity

Activities

.StartActivity

Permissions

Services

.TenpayService

Android Permissions

ca5f5aa145cc90c9cb31af042654dce69566f2f0bae1182996aedaae99b62aae