3e8dcdf5e3012973b99f96048a88be65

General

Target

3e8dcdf5e3012973b99f96048a88be65
Size

21.1MB
MD5

3e8dcdf5e3012973b99f96048a88be65
SHA1

fd77b6c6b3203d1b9cf00863bbb2b42b9b6554d4
SHA256

4e0deb3ee5b0035cb8f52983d952a5b6968d8a9586c48eed9d55c471d387a11a
SHA512

2b1598403eecf92bdc897d3cca4b05d13b76b0050990e4891533b4c06207bb0ac569a743032efbf336c15b90085d2a781cc87db411f6d66b6e3ca29b3416357c
SSDEEP

393216:okqm7UoFMCSXIp299Ilgd7EFCi+voGnkDZbzZIhVDrxlJmWbNLznnlC4Hedy:/VYoGCSXS299Ilgd/i+6bFIjJmW5LTIO

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

3e8dcdf5e3012973b99f96048a88be65
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.mrjob.app

com.mrjob.app.AppStart

Activities

com.mob.tools.MobUIShell

android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.mrjob.app.AppStart

android.intent.action.MAIN

com.mrjob.app.ui.zhibi.ChongZhiActivity

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_GPS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.BROADCAST_STICKY
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RESTART_PACKAGES
android.permission.VIBRATE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECORD_AUDIO
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.DISABLE_KEYGUARD
android.permission.FLASHLIGHT

Receivers

com.mrjob.app.receiver.ChatBroadCast

com.mrjob.app.CHAT_NOTICE

com.mrjob.app.receiver.ApplyBroadCast

com.mrjob.app.APPLY_NOTICE

com.mrjob.app.receiver.AppointmentBroadCast

com.mrjob.app.APPOINTMENT_NOTICE

com.mrjob.app.receiver.JobHistoryUpLoadBroadCast

com.mrjob.app.JOB_HISTORY_UPLOAD

com.mrjob.app.receiver.AutoClearCacheReceiver

com.mrjob.app.AUTO_CLEAR_CACHES

com.easemob.chat.EMMonitorReceiver

android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

net.sourceforge.simcpux.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

Services

Android Permissions

3e8dcdf5e3012973b99f96048a88be65

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_GPS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.BROADCAST_STICKY

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.DISABLE_KEYGUARD

android.permission.FLASHLIGHT

Sharing

General

Malware Config

Signatures

Files

com.mrjob.app

com.mrjob.app.AppStart

Activities

com.mob.tools.MobUIShell

com.mrjob.app.AppStart

com.mrjob.app.ui.zhibi.ChongZhiActivity

Permissions

Receivers

com.mrjob.app.receiver.ChatBroadCast

com.mrjob.app.receiver.ApplyBroadCast

com.mrjob.app.receiver.AppointmentBroadCast

com.mrjob.app.receiver.JobHistoryUpLoadBroadCast

com.mrjob.app.receiver.AutoClearCacheReceiver

com.easemob.chat.EMMonitorReceiver

net.sourceforge.simcpux.AppRegister

Services

Android Permissions

3e8dcdf5e3012973b99f96048a88be65