fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488

Sharing

Copy URL Twitter E-mail

General

Target

fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488
Size

26.3MB
MD5

588e48f1a9b5526fde8ce22957cc6d74
SHA1

fe5b50174caa1f897cfa1db14c820b1a217c0a48
SHA256

fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488
SHA512

5f25a101cb4d48d6ce1c35e631c984679621120be9e212d332c8a6132700241f062611a570fcf8575f72b189cc6a87e16b080bb70681a0b3446c263a34f8b9e2
SSDEEP

786432:YnwEXIh24YT/SQOSjwOlyEjfeeSPKSX7VNm7f9:YJ2SuQdwgyYWESLVg9

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 37 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488
.apk android arch:arm

com.kgkj.ppld

com.zsz.feiji.AppActivity

Activities

com.zsz.feiji.AppActivity

android.intent.action.MAIN

cn.egame.terminal.sdk.EgameCoreActivity

android.intent.action.MAIN

Permissions

android.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.BROADCAST_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_PACKAGE_SIZE
android.permission.RESTART_PACKAGES
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_MTK_MMHW
android.permission.WRITE_SECURE_SETTINGS
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.GET_PACKAGE_SIZE
android.permission.WRITE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW

Receivers

cn.egame.terminal.sdk.EgameCoreReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
cn.egame.terminal.sdk.RECEIVER_CMD

Services

cn.egame.terminal.sdk.EgameCoreService

cn.egame.terminal.sdk.SERVICE_CMD
nearme.apk
.apk android arch:arm

com.nearme.atlas

.ActionActivity

Activities

.NearmeNotificationActivity

nearme.plugin.startup.failed.file.illegal

com.nearme.plugin.pay.activity.MainChargeActivity

nearme.plugin.host.startup.action.single_pay
android.intent.action.VIEW

com.nearme.plugin.pay.activity.WeChatPayActivity

android.intent.action.VIEW

com.nearme.atlas.qqwallet.MqqPayCallbackActivity

android.intent.action.VIEW

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RESTART_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_SETTINGS
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_CONFIGURATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RUN_INSTRUMENTATION
android.permission.WRITE_SETTINGS
com.oppo.findmyphone.permission.AUTH_TOKEN

Receivers

.declare.PayProxyBroadcastReceiver

plugin.exit
plugin_update_force_clear_data
alipay_response

.declare.ReservePayProxyBroadcastReceiver1

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver2

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver3

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver4

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver5

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver6

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver7

plugin.exit
plugin_update_force_clear_data

.NearmeActionReceiver

nearme.host.plugin.action.broadcast.background
com.android.action.send

.declare.ReservePayProxyBroadcastReceiver8

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver9

plugin.exit
plugin_update_force_clear_data

.declare.ReservePayProxyBroadcastReceiver10

plugin.exit
plugin_update_force_clear_data

.declare.AccountProxyBroadcastReceiver

plugin.exit
plugin_update_force_clear_data

.NearmeReceiver

com.nearme.plugin.call.alipay

com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver

pre_load
plugin.exit
plugin_update_force_clear_data

com.nearme.plugin.pay.receiver.ProcessReceiver

com.nearme.plugin.pay.action.directpay

com.nearme.atlas.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

com.oppo.usercenter.account_login
com.oppo.usercenter.account_logout
com.oppo.usercenter.modify_name

Services

.PayActionService

com.oppo.action.PAY_ACTION

com.nearme.plugin.framework.download.DownloadService

com.nearme.plugin.framework.downloadservice
oppo_game_service_210.so
.apk android

com.nearme.game.service
unicom_resource.dat
.apk android

com.unicom.resourcepro

Android Permissions

fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488

Permissions

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.RESTART_PACKAGES

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_MTK_MMHW

Sharing

General

Malware Config

Signatures

Files

com.kgkj.ppld

com.zsz.feiji.AppActivity

Activities

com.zsz.feiji.AppActivity

cn.egame.terminal.sdk.EgameCoreActivity

Permissions

Receivers

cn.egame.terminal.sdk.EgameCoreReceiver

Services

cn.egame.terminal.sdk.EgameCoreService

com.nearme.atlas

.ActionActivity

Activities

.NearmeNotificationActivity

com.nearme.plugin.pay.activity.MainChargeActivity

com.nearme.plugin.pay.activity.WeChatPayActivity

com.nearme.atlas.qqwallet.MqqPayCallbackActivity

Permissions

Receivers

.declare.PayProxyBroadcastReceiver

.declare.ReservePayProxyBroadcastReceiver1

.declare.ReservePayProxyBroadcastReceiver2

.declare.ReservePayProxyBroadcastReceiver3

.declare.ReservePayProxyBroadcastReceiver4

.declare.ReservePayProxyBroadcastReceiver5

.declare.ReservePayProxyBroadcastReceiver6

.declare.ReservePayProxyBroadcastReceiver7

.NearmeActionReceiver

.declare.ReservePayProxyBroadcastReceiver8

.declare.ReservePayProxyBroadcastReceiver9

.declare.ReservePayProxyBroadcastReceiver10

.declare.AccountProxyBroadcastReceiver

.NearmeReceiver

com.nearme.plugin.framework.core.broadcast.NearmeProxyBroadcastReceiver

com.nearme.plugin.pay.receiver.ProcessReceiver

com.nearme.atlas.wxapi.AppRegister

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

Services

.PayActionService

com.nearme.plugin.framework.download.DownloadService

com.nearme.game.service

com.unicom.resourcepro

Android Permissions

fed05baa7bbe057ca1869f4b05de32b6b252cc4b5fcb30752ad65603c941c488