d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

General

Target
d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9
Size 17.0MB
Sample231224-frb34agbfk
SHA256 d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9
MD5 167bedc95c57e3ea9bd45dc6b3083676
SHA1 26d3f4abcbdb43de5216dc5c60927948128fda6f
SHA512 759882ab8541d5c834eb97e1dee15b3aa84b4c381bb3efabdfc56fc20fef84e21b5fe31ddabea77fd4a5ffb2d044b34ef779c6a2e3fa952595f14068fed4c6fc
SSDEEP 393216:RMR8nWJyXg89zWRBU/WsqBTV/yEoKYJdE4CmTYlHKtaAa:RT9lzOBESuKQdC+YNKtat
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

.apk 17.0MB
alipay_plugin_20120428msp.apk

.apk 781KB
pro.jar

.apk 71KB

d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

SHA256 d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9
MD5 167bedc95c57e3ea9bd45dc6b3083676
SHA1 26d3f4abcbdb43de5216dc5c60927948128fda6f
SHA512 759882ab8541d5c834eb97e1dee15b3aa84b4c381bb3efabdfc56fc20fef84e21b5fe31ddabea77fd4a5ffb2d044b34ef779c6a2e3fa952595f14068fed4c6fc
SSDEEP 393216:RMR8nWJyXg89zWRBU/WsqBTV/yEoKYJdE4CmTYlHKtaAa:RT9lzOBESuKQdC+YNKtat
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.wistone.wstc

.Quiz

android.intent.action.MAIN

com.qihoopp.insdk.ContainerActivity

cn.paypalm.pppayment.InitialAct

cn.paypalm.pppayment.UserMessageAct

cn.paypalm.pppayment.BankcardPayAct

cn.paypalm.pppayment.SuccessAct

cn.paypalm.pppayment.BankcardAgreement

com.unionpay.upomp.bypay.activity.SplashActivity

com.wistone.wstcqihoopp

com.unionpay.upomp.bypay.activity.PayMainActivity

com.unionpay.upomp.bypay.activity.PayUserCreditActivity

com.unionpay.upomp.bypay.activity.PayUserDebitActivity

com.unionpay.upomp.bypay.activity.PayOnUserTelActivity

com.unionpay.upomp.bypay.activity.PayResultActivity

com.unionpay.upomp.bypay.activity.PayResultLoseActivity

com.unionpay.upomp.bypay.activity.RegisterActivity

com.unionpay.upomp.bypay.activity.RegisterResultActivity

com.unionpay.upomp.bypay.activity.UserProtocalActivity

com.unionpay.upomp.bypay.activity.OnUserCardManageActivity

com.unionpay.upomp.bypay.activity.OnUserUserManageActivity

com.unionpay.upomp.bypay.activity.changePswActivity

com.unionpay.upomp.bypay.activity.changeTelActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardCreditActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardDebitActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardPanActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardResultActivity

com.unionpay.upomp.bypay.activity.SupportActivity

com.unionpay.upomp.bypay.activity.GetpassActivity

com.unionpay.upomp.bypay.activity.AuthBindCardActivity

com.unionpay.upomp.bypay.activity.AboutActivity

com.qihoo.ReceiveQihooMsgActivity

.wxapi.WXEntryActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

com.wistone.wstc.com.mmiap.activity

safiap.framework.ui.UpdateHintActivity

safiap.framework.ACTION_TO_INSTALL safiap.framework.ACTION_TO_INSTALL_IAP safiap.framework.ACTION_NETWORK_ERROR_IAP safiap.framework.ACTION_NETWORK_ERROR_FRAMEWORK

alipay_plugin_20120428msp.apk

SHA256 0655390d2c1525a63f631b6ba456690a77996eedda41e98c5c9bc792410675a3
MD5 5885aeb245e484242f06162072e67044
SHA1 d38cccca963626c69969f91ac2a5d1dba256b047
SHA512 376a776c38757f43cf0ef40b0e04fc6a322886ab7560a9ccf2fba4b296db2bad1c81e7bb89262484c17fdb64e0f5dfa8b861a9f4db9a8ff19b08048d7822f8bc
SSDEEP 24576:NGsvPCgYEYDnKE4S0GRmfWZbebWoXaF15dk:N/PCvEYDnKErR6AbetKF1jk
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.alipay.android.app

Android Permissions

d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

Permissions

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_SMS

android.permisson.WAKE_LOCK

android.permission.RECEIVE_SMS

android.permission.ACCESS_FINE_LOCATION

Sharing

General

Malware Config

Signatures

File Explorer

d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9

.Quiz

com.qihoopp.insdk.ContainerActivity

cn.paypalm.pppayment.InitialAct

cn.paypalm.pppayment.UserMessageAct

cn.paypalm.pppayment.BankcardPayAct

cn.paypalm.pppayment.SuccessAct

cn.paypalm.pppayment.BankcardAgreement

com.unionpay.upomp.bypay.activity.SplashActivity

com.unionpay.upomp.bypay.activity.PayMainActivity

com.unionpay.upomp.bypay.activity.PayUserCreditActivity

com.unionpay.upomp.bypay.activity.PayUserDebitActivity

com.unionpay.upomp.bypay.activity.PayOnUserTelActivity

com.unionpay.upomp.bypay.activity.PayResultActivity

com.unionpay.upomp.bypay.activity.PayResultLoseActivity

com.unionpay.upomp.bypay.activity.RegisterActivity

com.unionpay.upomp.bypay.activity.RegisterResultActivity

com.unionpay.upomp.bypay.activity.UserProtocalActivity

com.unionpay.upomp.bypay.activity.OnUserCardManageActivity

com.unionpay.upomp.bypay.activity.OnUserUserManageActivity

com.unionpay.upomp.bypay.activity.changePswActivity

com.unionpay.upomp.bypay.activity.changeTelActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardCreditActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardDebitActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardPanActivity

com.unionpay.upomp.bypay.activity.OnUserBindCardResultActivity

com.unionpay.upomp.bypay.activity.SupportActivity

com.unionpay.upomp.bypay.activity.GetpassActivity

com.unionpay.upomp.bypay.activity.AuthBindCardActivity

com.unionpay.upomp.bypay.activity.AboutActivity

com.qihoo.ReceiveQihooMsgActivity

.wxapi.WXEntryActivity

mm.purchasesdk.iapservice.BillingLayoutActivity

safiap.framework.ui.UpdateHintActivity

com.wistone.wstc.NetworkStateService

mm.purchasesdk.iapservice.PurchaseService

safiap.framework.SafFrameworkManager

safiap.framework.logreport.monitor.handler.LogreportHandler

safiap.framework.CheckUpdateReceiver

alipay_plugin_20120428msp.apk

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

com.alipay.android.app.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

pro.jar

Android Permissions

d871155737745fc691b17738d1b4461c195ecac02db429a0c117aeff7d000bc9