d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4

General

Target

d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4
Size

13.0MB
MD5

5a9fc7cc661425eb91f3291c1503fff2
SHA1

d5a737c93274ed83c23459aec2932e1b627528db
SHA256

d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4
SHA512

81882d6c18676d6fde95ec1664a029d908f1f526ac31d6d38e8deffe1edab3e6b12cc3c84b53f59690bb791f159bcb9779dea18b6dc52c8a256ebdd4d38230c2
SSDEEP

393216:bDX4eLJf4pbLmCfBrODmW7+NnRyDSeLu2Dg:b0lbbBOS1NA2eLu2M

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4
.apk android

cn.com.gentou.gentouwang

cn.com.gentou.gentouwang.activities.LauncherActivity

Activities

cn.com.gentou.gentouwang.activities.MyOptionDetailActivity

cn.com.gentou.action.option.detail

cn.com.gentou.gentouwang.MainActivity

cn.com.gentou.action.MainActivity
android.intent.action.VIEW

cn.com.gentou.gentouwang.activities.LauncherActivity

android.intent.action.MAIN

cn.com.gentou.gentouwang.activities.LoginActivity

cn.com.gentou.action.login

cn.com.gentou.gentouwang.activities.register.UserRegisterNameActivity

cn.com.gentou.action.weixin.login

cn.com.gentou.gentouwang.activities.register.UserRegisterPhoneActivity

cn.com.gentou.action.weixin.register

cn.com.gentou.gentouwang.activities.WebActivity

cn.com.gentou.action.WebActivity

cn.com.gentou.gentouwang.master.activities.MasterDetailsActivity

android.intent.action.VIEW

cn.com.gentou.gentouwang.activities.SearchActivity

cn.com.gentou.action.search

cn.com.gentou.gentouwang.activities.QuestionActivity

cn.com.gentou.action.answer

cn.com.gentou.gentouwang.activities.InvestmentAdviserContest.InvestmentAdviserContestActivity

cn.com.gentou.action.contest.detail

cn.com.gentou.gentouwang.activities.ProblemDetailActivity

cn.com.gentou.action.answer.detail

cn.com.gentou.gentouwang.activities.TradingRecordActivity

cn.com.gentou.action.trad_record

com.thinkive.android.trade_bz.ui.activitys.MultiTradeActivity

cn.com.gentou.action.trade

com.thinkive.android.trade_bz.ui.activitys.TradeMainActivity

cn.com.gentou.action.trade.home

com.thinkive.android.quotation.activities.StockDetailsFragmentActivity

cn.com.gentou.action.StockDetails
com.thinkive.android.quotation.activities.stockdetailsfragmentactivity

com.mob.tools.MobUIShell

android.intent.action.VIEW
android.intent.action.VIEW

com.thinkive.android.quotation.info.activities.InfoListDetailsActivity

com.thinkive.android.quotation.info.activities.infolistdetailsactivity

Permissions

android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.CAMERA
android.permission.WAKE_LOCK
android.permission.BROADCAST_STICKY
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MANAGE_ACCOUNTS
getui.permission.GetuiService.cn.com.gentou.gentouwang
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.USE_CREDENTIALS
android.permission.AUTHENTICATE_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
com.google.android.c2dm.permission.RECEIVE
com.easemob.chatuidemo.permission.C2D_MESSAGE

Receivers

com.easemob.chat.StartServiceReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

com.easemob.chat.EMGCMBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.easemob.chatuidemo.receiver.GCMPushBroadCast

com.easemob.sdk.push

com.easemob.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

cn.com.gentou.gentouwang.receiver.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

cn.com.gentou.gentouwang.receiver.PushDemoReceiver

com.igexin.sdk.action.DWsx2OJTxj7UrBqeiYgru2

cn.com.gentou.gentouwang.receiver.NotifyDeleteReceiver

cn.com.gentou.gentouwang.receiver.delete.notify
cn.com.gentou.gentouwang.receiver.click.notify

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.DWsx2OJTxj7UrBqeiYgru2

com.thinkive.android.quotation.receivers.ActiveReceiver

phone_activate_success

com.thinkive.android.quotation.receivers.EarlyWarnReceiver

com.thinkive.aqf.warn.action

com.thinkive.android.quotation.receivers.ZombieReceiver

android.intent.action.BOOT_COMPLETED
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
android.intent.action.USER_PRESENT
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.GSM_SMS_RECEIVED
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.ACTION_BATTERY_CHANGED

com.thinkive.android.quotation.receivers.PushQuotationReceiver

action.push.quotation.10000
action.push.quotation.10001
action.push.quotation.10003
action.push.quotation.10004
action.push.quotation.10005

Services

com.thinkive.aqf.openudid.OpenUDIDService

org.OpenUDID.GETUDID

Android Permissions

d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4

Permissions

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.BROADCAST_STICKY

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MANAGE_ACCOUNTS

getui.permission.GetuiService.cn.com.gentou.gentouwang

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.USE_CREDENTIALS

android.permission.AUTHENTICATE_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.easemob.chatuidemo.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

cn.com.gentou.gentouwang

cn.com.gentou.gentouwang.activities.LauncherActivity

Activities

cn.com.gentou.gentouwang.activities.MyOptionDetailActivity

cn.com.gentou.gentouwang.MainActivity

cn.com.gentou.gentouwang.activities.LauncherActivity

cn.com.gentou.gentouwang.activities.LoginActivity

cn.com.gentou.gentouwang.activities.register.UserRegisterNameActivity

cn.com.gentou.gentouwang.activities.register.UserRegisterPhoneActivity

cn.com.gentou.gentouwang.activities.WebActivity

cn.com.gentou.gentouwang.master.activities.MasterDetailsActivity

cn.com.gentou.gentouwang.activities.SearchActivity

cn.com.gentou.gentouwang.activities.QuestionActivity

cn.com.gentou.gentouwang.activities.InvestmentAdviserContest.InvestmentAdviserContestActivity

cn.com.gentou.gentouwang.activities.ProblemDetailActivity

cn.com.gentou.gentouwang.activities.TradingRecordActivity

com.thinkive.android.trade_bz.ui.activitys.MultiTradeActivity

com.thinkive.android.trade_bz.ui.activitys.TradeMainActivity

com.thinkive.android.quotation.activities.StockDetailsFragmentActivity

com.mob.tools.MobUIShell

com.thinkive.android.quotation.info.activities.InfoListDetailsActivity

Permissions

Receivers

com.easemob.chat.StartServiceReceiver

com.easemob.chat.EMGCMBroadcastReceiver

com.easemob.chatuidemo.receiver.GCMPushBroadCast

com.easemob.chat.EMMonitorReceiver

cn.com.gentou.gentouwang.receiver.AppRegister

cn.com.gentou.gentouwang.receiver.PushDemoReceiver

cn.com.gentou.gentouwang.receiver.NotifyDeleteReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.thinkive.android.quotation.receivers.ActiveReceiver

com.thinkive.android.quotation.receivers.EarlyWarnReceiver

com.thinkive.android.quotation.receivers.ZombieReceiver

com.thinkive.android.quotation.receivers.PushQuotationReceiver

Services

com.thinkive.aqf.openudid.OpenUDIDService

Android Permissions

d7b5d6bf6ea4a903e1ab6e76be81423cd79c8fc35e2004f2dfe640125e98f4d4