ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393

General

Target

ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393
Size

11.3MB
MD5

b2c03e90287815cb664685b1276ea1c7
SHA1

68fc5db6bbe43b4f16444840b566c3ed38c34859
SHA256

ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393
SHA512

5d0694b01a97fb2c796434258576b66d951667c3ae737184cfcaee21ff8520143cdc5b3cd1feff719aa1f90bacf6c2525fbfc0ad928fd3ab75c0c216551e4102
SSDEEP

196608:dFtt3/O2zbBJBXzw//Msr3rcissnvjbtABjs8nL7pdTr2+QETTTTTT2YVb4W8dss:dftWy9JBXzw//3bbtAhn5F2+QETTTTTm

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393
.apk android arch:arm

com.netease.cartoonreader

com.netease.cartoonreader.activity.ComicStartFlashActivity

Activities

com.netease.cartoonreader.activity.ComicStartFlashActivity

android.intent.action.MAIN

com.netease.cartoonreader.activity.ComicHomeActivity

android.intent.action.VIEW

com.netease.cartoonreader.thirdaccount.QQPayCallBackActivity

android.intent.action.VIEW

com.netease.cartoonreader.activity.LocalReaderActivity

android.intent.action.VIEW

com.netease.cartoonreader.activity.ComicShareActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.netease.cartoonreader.thirdaccount.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_WIFI_STATE
android.permission.RESTART_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CAMERA
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.netease.cartoonreader.yxapi.AppRegister

im.yixin.sdk.api.Intent.ACTION_REFRESH_YXAPP

com.netease.common.receiver.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.netease.common.receiver.SdcardReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_EJECT
android.intent.action.MEDIA_BAD_REMOVAL

com.netease.pushservice.receiver.PushServiceBootReceiver

android.intent.action.BOOT_COMPLETED

com.netease.pushservice.receiver.PushServicePackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.netease.pushservice.receiver.PushServiceSystemReceiver

manhua.163.com_S7

com.netease.pushservice.receiver.PushServiceReconnectReceiver

com.netease.pomelo.pushservice.reconnect_S7

com.netease.cartoonreader.push.MessageListener

manhua.163.com_G7

com.netease.cartoonreader.push.OtherMessageListener

cc.163.com_G7
open.163.com_G7
kouyu.youdao.com_G7
dict.youdao.com_G5
icourse163.org_G6
daren.nie.163.com_G3

com.google.ads.conversiontracking.InstallReceiver

com.android.vending.INSTALL_REFERRER

Services

com.netease.pushservice.core.NetEasePushMessageService_V1

netease.pomelo.push.dl.new.messageservice_V1

Android Permissions

ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_WIFI_STATE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CAMERA

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.netease.cartoonreader

com.netease.cartoonreader.activity.ComicStartFlashActivity

Activities

com.netease.cartoonreader.activity.ComicStartFlashActivity

com.netease.cartoonreader.activity.ComicHomeActivity

com.netease.cartoonreader.thirdaccount.QQPayCallBackActivity

com.netease.cartoonreader.activity.LocalReaderActivity

com.netease.cartoonreader.activity.ComicShareActivity

com.tencent.tauth.AuthActivity

com.netease.cartoonreader.thirdaccount.WBShareActivity

Permissions

Receivers

com.netease.cartoonreader.yxapi.AppRegister

com.netease.common.receiver.NetworkReceiver

com.netease.common.receiver.SdcardReceiver

com.netease.pushservice.receiver.PushServiceBootReceiver

com.netease.pushservice.receiver.PushServicePackageReceiver

com.netease.pushservice.receiver.PushServiceSystemReceiver

com.netease.pushservice.receiver.PushServiceReconnectReceiver

com.netease.cartoonreader.push.MessageListener

com.netease.cartoonreader.push.OtherMessageListener

com.google.ads.conversiontracking.InstallReceiver

Services

com.netease.pushservice.core.NetEasePushMessageService_V1

Android Permissions

ee060a6e8a4ea5d7f6b6f05fe6f187bdf54540f90bc7660a345132cf495b2393