de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42

General

Target

de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42
Size

13.8MB
MD5

1c7b46a6a1cd300ea1a6cb15226b4b56
SHA1

723cb17565fc60fc7e3299be0eecec5e24750bed
SHA256

de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42
SHA512

120b1021ac88de36d4dc0a6125e2dbeead38e10f4e1e542f471c50da4333443e3dee83c23766835217c798e4d9fea41c5aced8754a8ef660065cb8edda66aeaf
SSDEEP

393216:XhSrUeEPkSyv4DbtA71TdC71hBHSkuFIPZbHI:XhSrdSVDiJdCdn+2ZbHI

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42
.apk android arch:arm arch:x86

com.kdmobi.xzlb

com.qihoo.util.StartActivity

Activities

com.kdmobi.xzlb.activity.ZFpayActivity

android.intent.action.VIEW

com.kdmobi.xzlb.activity.AppLuncherActivity

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.mob.tools.MobUIShell

android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

Permissions

android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_CALENDAR
READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN

Receivers

com.kdmobi.xzlb.wx.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP
alipay_plugin223_0309.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

Android Permissions

de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42

Permissions

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_CALENDAR

READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

Sharing

General

Malware Config

Signatures

Files

com.kdmobi.xzlb

com.qihoo.util.StartActivity

Activities

com.kdmobi.xzlb.activity.ZFpayActivity

com.kdmobi.xzlb.activity.AppLuncherActivity

com.qihoo.util.StartActivity

com.mob.tools.MobUIShell

Permissions

Receivers

com.kdmobi.xzlb.wx.AppRegister

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Services

.AlixService

Android Permissions

de52bff713ef69900daba98f5d2fe127b5fff122e323093bed536c0680710a42