dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f

General

Target

dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f
Size

4.9MB
MD5

8d4ef4cdab5cb5aef4e48865ef21399e
SHA1

21f33443031a1cf0fff9b33e57f45fc5106bb386
SHA256

dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f
SHA512

a82c710be36900b065bb494ed59832d49999a8fad219194ccead8370eba07fe9bf863db29b564e4fd7b9f3beb100f4d1c61b14055a235e49f8e04e832c219e3a
SSDEEP

98304:Ckpu/Ipq7XPNiIShNd2YPB+53an3X0kA7JjS38gXM1xUzVJShvOM:Ug7vd2YP4R8U7lq9XPzVcBT

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f
.apk android arch:arm

com.manyoug.wanhaoth

org.cocos2dx.cpp.AppActivity

Activities

org.cocos2dx.cpp.AppActivity

android.intent.action.MAIN

faker.wea.omg.lgd.tvf.idt

android.intent.action.CREATE_SHORTCUT

faker.wea.omg.lgd.wchf.ihur

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.WRITE_SETTINGS

Receivers

faker.wea.omg.lgd.tvf.bn

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

faker.wea.omg.lgd.wchf.bbes

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

neo.proxy.DistributeReceiver

android.intent.action.ACTION_POWER_CONNECTED
com.secneo.plugin.action.HOURLY
com.secneo.plugin.action.DAILY
com.secneo.plugin.action.APP_STARTED
android.net.conn.CONNECTIVITY_CHANGE
com.secneo.proxy.action.CUSTOM
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

Services
collector.dex
.apk android
container.dex
.apk android

Android Permissions

dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.manyoug.wanhaoth

org.cocos2dx.cpp.AppActivity

Activities

org.cocos2dx.cpp.AppActivity

faker.wea.omg.lgd.tvf.idt

faker.wea.omg.lgd.wchf.ihur

Permissions

Receivers

faker.wea.omg.lgd.tvf.bn

faker.wea.omg.lgd.wchf.bbes

neo.proxy.DistributeReceiver

Services

Android Permissions

dbd0dbd27ee82fa031ef32578ed1b4cd35fc091bfba555bec0d902904d62303f