14eb8240fc442cf44541ec8ac16582c8

General

Target

14eb8240fc442cf44541ec8ac16582c8
Size

19.6MB
MD5

14eb8240fc442cf44541ec8ac16582c8
SHA1

3eaee407b967c023079a79317a724f37eeed46fa
SHA256

8027eb284dc1f917ce683357016a7c323d5009d1c98ea9f0281bbb1461196c05
SHA512

45f56c2e28d7f6f1cfddb70d378d387e50e04b58540b56844acfd978ff0c6b68c25fd3b71c8b36a840445839015f0310a520eb3c09196de52e5b0527ad17602d
SSDEEP

393216:FMFCVIAxPS72HjTEmkGP6WJju2JbJo51f8JOpzijfK+SH5Fr:FHWuS72HjTpk26WJjuYbafk++SZFr

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

14eb8240fc442cf44541ec8ac16582c8
.apk android arch:arm

com.shzx.shujutu

com.afa.recovery.activity.main.SplashActivity

Activities

com.afa.recovery.activity.main.SplashActivity

android.intent.action.MAIN

com.afa.recovery.activity.msg.MsgActivity

com.shzx.shujutu.android.intent.action.wxmsg

com.afa.recovery.activity.main.QRCodeActivity

com.shzx.shujutu.android.intent.action.wxqrcode

com.afa.recovery.activity.msg.MsgQQActivity

com.shzx.shujutu.android.intent.action.qqmsg

com.shzx.shujutu.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.soouya.commonmodule.activity.view.PhotoCoverActivity

com.shzx.shujutu.android.intent.action.photocover

com.soouya.pictrue.RestoredActivity

com.shzx.shujutu.android.intent.action.restore

com.soouya.pictrue.RestoredFileActivity

com.shzx.shujutu.android.intent.action.restorefile

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
com.asus.msa.SupplementaryDID.ACCESS
android.permission.VIBRATE
android.permission.CHANGE_CONFIGURATION
android.permission.CAMERA
android.permission.RECORD_AUDIO

Receivers

com.qiyukf.nimlib.service.NimReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

Services

com.afa.recovery.accessibility.BackupAccessibility

android.accessibilityservice.AccessibilityService

Android Permissions

14eb8240fc442cf44541ec8ac16582c8

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

com.asus.msa.SupplementaryDID.ACCESS

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

android.permission.CAMERA

android.permission.RECORD_AUDIO

Sharing

General

Malware Config

Signatures

Files

com.shzx.shujutu

com.afa.recovery.activity.main.SplashActivity

Activities

com.afa.recovery.activity.main.SplashActivity

com.afa.recovery.activity.msg.MsgActivity

com.afa.recovery.activity.main.QRCodeActivity

com.afa.recovery.activity.msg.MsgQQActivity

com.shzx.shujutu.wxapi.WXPayEntryActivity

com.soouya.commonmodule.activity.view.PhotoCoverActivity

com.soouya.pictrue.RestoredActivity

com.soouya.pictrue.RestoredFileActivity

Permissions

Receivers

com.qiyukf.nimlib.service.NimReceiver

Services

com.afa.recovery.accessibility.BackupAccessibility

Android Permissions

14eb8240fc442cf44541ec8ac16582c8