dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0

General

Target

dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0
Size

11.8MB
MD5

68f747426c80a52ee684b6868d14969c
SHA1

33d2bbaea9b7b189aed1640fd9590dc973336c64
SHA256

dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0
SHA512

46768f071f1dfcf31560074002ea48be6d99124de2f89679e9823dadefae4f59cf845735f9eab71e7322522bd40b667bad93ecb4f18038561c1f8e19bdb2a10f
SSDEEP

196608:v1seMg1/QU5ULHbtnMshl96Uvgogxez6Hl6RgrRMcY9/yYtHAlxj1Yx39Dp/NfSo:CpvBnv9vvnl6HMRg9M9/yYtHcYx39NVp

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0
.apk android arch:arm

com.dns.umpay

com.dns.umpay.UMPayActivity

Activities

com.dns.umpay.UMPayActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CALL_PHONE
android.permission.SEND_SMS
android.permission.READ_LOGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.VIBRATE
android.permission.EXPAND_STATUS_BAR
android.permission.CAMERA
android.permission.RESTART_PACKAGES
android.permission.REORDER_TASKS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_SECURE_SETTINGS
getui.permission.GetuiService.com.dns.umpay
android.permission.GET_TASKS
com.dns.umpay.permission.MIPUSH_RECEIVE

Receivers

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.Q8sunns2sG7JpYP7VCqhl9

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.dns.umpay.receiver.UmpayReceiver

com.igexin.sdk.action.refreshls
android.provider.Telephony.SMS_RECEIVED
android.net.conn.CONNECTIVITY_CHANGE
android.provider.Telephony.GSM_SMS_RECEIVED
android.provider.Telephony.CMDA_SMS_RECEIVED
android.intent.action.USER_PRESENT
com.dns.umpay.startservice
action_receive_message
com.dns.umpay.action.deletenoti
android.intent.action.TIME_SET
android.intent.action.BOOT_COMPLETED
android.intent.action.BATTERY_CHANGED
android.intent.action.PACKAGE_RESTARTED
com.igexin.sdk.action.Q8sunns2sG7JpYP7VCqhl9

com.dns.umpay.receiver.PhoneStateReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.dns.umpay.receiver.PhoneNetStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.dns.umpay.receiver.alarmreceiver

message_center
com.dns.umpay.clock.repeating
com.dns.umpay.heartbeat

com.dns.umpay.receiver.Alarmreveiver

alarm.action
version_update_action
pull_pushmsg
com.dns.umpay.heartbeat
noti_clicked

com.dns.umpay.receiver.SMSReceiver

SEND_SMS

com.dns.umpay.receiver.ReScanSmsReceiver

com.dns.umpay.rescansms

com.dns.umpay.receiver.SendMsgReceiver

SMS_SD

com.dns.umpay.InstallNewVersionBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

com.dns.umpay.receiver.XiaomiPushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

Services

com.dns.umpay.receiver.UmpayService

com.dns.umpay.UmpayService

com.dns.umpay.clock.Alarmservice

com.dns.clock.alarmservice

Android Permissions

dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.EXPAND_STATUS_BAR

android.permission.CAMERA

android.permission.RESTART_PACKAGES

android.permission.REORDER_TASKS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SECURE_SETTINGS

getui.permission.GetuiService.com.dns.umpay

android.permission.GET_TASKS

com.dns.umpay.permission.MIPUSH_RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.dns.umpay

com.dns.umpay.UMPayActivity

Activities

com.dns.umpay.UMPayActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.getuiext.service.PayloadReceiver

com.igexin.download.DownloadReceiver

com.dns.umpay.receiver.UmpayReceiver

com.dns.umpay.receiver.PhoneStateReceiver

com.dns.umpay.receiver.PhoneNetStateReceiver

com.dns.umpay.receiver.alarmreceiver

com.dns.umpay.receiver.Alarmreveiver

com.dns.umpay.receiver.SMSReceiver

com.dns.umpay.receiver.ReScanSmsReceiver

com.dns.umpay.receiver.SendMsgReceiver

com.dns.umpay.InstallNewVersionBroadcastReceiver

com.dns.umpay.receiver.XiaomiPushMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

Services

com.dns.umpay.receiver.UmpayService

com.dns.umpay.clock.Alarmservice

Android Permissions

dec5dc1d0405dcbf41349a73f7fd9d98aedb75adabd716ca0aa05e013f2305c0