0a9c5404f7eea4eed79bfb02136f4c72

General

Target

0a9c5404f7eea4eed79bfb02136f4c72
Size

28.4MB
MD5

0a9c5404f7eea4eed79bfb02136f4c72
SHA1

0569ac8788f8ac662cc9f564867b6d059cddf64a
SHA256

b43ed3c5021cf1312a9678890ab646054d285751cc36d182db7cca766c466f52
SHA512

3d075402660840455fccb37c2cb788ea01a7b58b34c144b58ee18171f2f1caf1ba392e5e81ca48701693ef44ecc81a6d79cd7514ca3b10222c7b1aca83f00ccd
SSDEEP

786432:Gy3DAutzjEfhBYFKG8/0vWvP66KKV7c57frgiTjIX74fiPrBUb:lAu9jE3YWqY66la7frz09DCb

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

0a9c5404f7eea4eed79bfb02136f4c72
.apk android arch:arm

com.ht.whczl.nearme.gamecenter

com.ym.sdk.SplashActivity

Activities

com.ym.sdk.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.USE_CREDENTIALS
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.ACTION_MANAGE_OVERLAY_PERMISSION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.REORDER_TASKS
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_USER_PRESENT

Receivers

com.nearme.game.sdk.component.proxy.ProxyUserCenterOperateReceiver

com.oppo.usercenter.account_login
com.oppo.usercenter.account_logout
com.oppo.usercenter.modify_name
com.usercenter.action.receiver.account_login
com.heytap.usercenter.account_logout

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote
gdtadv2.jar
.apk android arch:arm64 arch:arm
nearme.apk
.apk android arch:arm

com.nearme.atlas

com.nearme.oppowallet.activity.WalletEntryActivity

Activities

com.nearme.plugin.pay.activity.MainChargeActivity

nearme.plugin.host.startup.action.single_pay
android.intent.action.VIEW

com.nearme.plugin.pay.activity.WeChatPayActivity

android.intent.action.VIEW

com.nearme.atlas.qqwallet.MqqPayCallbackActivity

android.intent.action.VIEW

com.nearme.atlas.alipay.FastAlipaySettingAcitviy

nearme.atlas.settings.fastalipay

com.nearme.atlas.alipay.FastAlipaySignCallbackAcitviy

android.intent.action.VIEW
android.intent.action.VIEW

com.nearme.oppowallet.activity.WalletEntryActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.coloros.lifestyle.WebActivity

com.coloros.lifestyle.action.innerbrowser

com.nearme.plugin.pay.activity.QRCodePayActivity

com.nearme.pay.qrcode
com.nearme.pay.qrscan

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RESTART_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.GET_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_SETTINGS
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD
android.permission.CHANGE_CONFIGURATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RUN_INSTRUMENTATION
android.permission.WRITE_SETTINGS
com.oppo.findmyphone.permission.AUTH_TOKEN
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.REORDER_TASKS
android.permission.VIBRATE
android.permission.CAMERA

Receivers

com.nearme.plugin.pay.receiver.ProcessReceiver

com.nearme.plugin.pay.action.directpay

com.nearme.atlas.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

com.oppo.usercenter.account_login
com.oppo.usercenter.account_logout
com.oppo.usercenter.modify_name

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

com.oppo.usercenter.account_login
com.oppo.usercenter.account_logout
com.oppo.usercenter.modify_name

Services

.PayActionService

com.oppo.action.PAY_ACTION
oppo_game_service_202703.so
.apk android arch:arm64 arch:arm

com.nearme.game.service

com.nearme.atlas.offlinepay.application.ui.activities.OppoOfflinePayHostActivity

Activities

com.oppo.usercenter.opensdk.dialog.register.UserCenterOperateActivity

com.oppo.usercenter.opensdk_register_dialog

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PRIVILEGED_PHONE_STATE

Android Permissions

0a9c5404f7eea4eed79bfb02136f4c72

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.USE_CREDENTIALS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACTION_MANAGE_OVERLAY_PERMISSION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.REORDER_TASKS

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_USER_PRESENT

Sharing

General

Malware Config

Signatures

Files

com.ht.whczl.nearme.gamecenter

com.ym.sdk.SplashActivity

Activities

com.ym.sdk.SplashActivity

Permissions

Receivers

com.nearme.game.sdk.component.proxy.ProxyUserCenterOperateReceiver

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.nearme.atlas

com.nearme.oppowallet.activity.WalletEntryActivity

Activities

com.nearme.plugin.pay.activity.MainChargeActivity

com.nearme.plugin.pay.activity.WeChatPayActivity

com.nearme.atlas.qqwallet.MqqPayCallbackActivity

com.nearme.atlas.alipay.FastAlipaySettingAcitviy

com.nearme.atlas.alipay.FastAlipaySignCallbackAcitviy

com.nearme.oppowallet.activity.WalletEntryActivity

com.coloros.lifestyle.WebActivity

com.nearme.plugin.pay.activity.QRCodePayActivity

Permissions

Receivers

com.nearme.plugin.pay.receiver.ProcessReceiver

com.nearme.atlas.wxapi.AppRegister

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

Services

.PayActionService

com.nearme.game.service

com.nearme.atlas.offlinepay.application.ui.activities.OppoOfflinePayHostActivity

Activities

com.oppo.usercenter.opensdk.dialog.register.UserCenterOperateActivity

Permissions

Android Permissions

0a9c5404f7eea4eed79bfb02136f4c72