8b17c5004ecbbcd2fce3ebf613552144

Sharing

Copy URL Twitter E-mail

General

Target

8b17c5004ecbbcd2fce3ebf613552144
Size

27.9MB
MD5

8b17c5004ecbbcd2fce3ebf613552144
SHA1

9cf303eb154b8b15a218f37687e739b98e6c5e6e
SHA256

20be67f10a1f6ea5b68cc389fb343e7140323a875fa749c716fbc9d852d21232
SHA512

f4a7f22579d99975c42fd1e4fcc749cff02b2800d50e50dc88889e065121f55e1020c4baf19eda553c3ffc8828f22fc50d5c348a70b22cd5a592081d62f37c97
SSDEEP

786432:uYfeCWooCFo9Ukr/sBnhrwHwI4xa5JkrL0r:u1C1FM/sJhrwQRkJj

Score

8^/10

upx

Malware Config

Signatures

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

8b17c5004ecbbcd2fce3ebf613552144
.apk android arch:arm

sina.mobile.tianqitong

com.sina.tianqitong.ui.main.Splash

Activities

com.sina.tianqitong.ui.main.Splash

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.oppopush

com.sina.tianqitong.ui.main.MainTabActivity

android.intent.action.MAIN
sina.mobile.tianqitong.ALARM_POPUP
sina.mobile.tianqitong.SHOW_CITY

sina.mobile.tianqitong.appwidget.WidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.sina.tianqitong.ui.cityselector.CityViewSpotSelectorActivity

android.intent.action.MAIN
android.intent.action.MAIN

sina.mobile.tianqitong.main.Splash

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.sina.tianqitong.login.activity.LoginActivity

android.intent.action.VIEW

com.sina.tianqitong.user.MemberDetailActivity

android.intent.action.VIEW

com.sina.tianqitong.ui.main.SinaEmptyActivity

sina.mobile.tianqitong.EMPTY_ACTIVITY

com.baidu.techain.TechainActivity

com.baidu.action.Techain.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.WRITE_SETTINGS
com.sec.android.app.launcher.permission.READ_SETTINGS
com.sec.android.app.launcher.permission.WRITE_SETTINGS
com.miui.home.launcher.permission.READ_SETTINGS
com.miui.home.launcher.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS
dianxin.permission.ACCESS_LAUNCHER_DATA
MediaStore.Images.Media.INTERNAL_CONTENT_URI
MediaStore.Images.Media.EXTERNAL_CONTENT_URI
com.android.permission.GET_INSTALLED_APPS
android.permission.CAMERA
android.permission.QUERY_ALL_PACKAGES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
com.sina.tianqitong.PERMISSION
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE
com.sina.permission.SINA_PUSH
com.sina.push.sdk.broadcast.permission1003
sina.mobile.tianqitong.permission.PROCESS_PUSH_MSG
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
com.asus.msa.SupplementaryDID.ACCESS
sina.mobile.tianqitong.openadsdk.permission.TT_PANGOLIN
getui.permission.GetuiService.sina.mobile.tianqitong
freemme.permission.msa
sina.mobile.tianqitong.permission.MIPUSH_RECEIVE
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
sina.mobile.tianqitong.permission.PUSH_PROVIDER
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

Receivers

com.sina.tianqitong.service.receiver.AlarmReceiver

sina.mobile.tianqitong.action.use_weather_notification
sina.mobile.tianqitong.action.auto_update
sina.mobile.tianqitong.action.update_before_tts
sina.mobile.tianqitong.action.use_tts
sina.mobile.tianqitong.action.use_jieqi_notification
sina.mobile.tianqitong.action.use_festival_notification
sina.mobile.tianqitong.action.recommend_time_updatetime
sina.mobile.tianqitong.action.tts_operation_updatetime
sina.mobile.tianqitong.action.check_version_updatetime
sina.mobile.tianqitong.action.weibo_operation_updatetime
sina.mobile.tianqitong.action.pop_up_before_tts
sina.mobile.tianqitong.action.user_introduction_for_weibo
sina.mobile.tianqitong.action.hangeng_alarm_notifitime
sina.mobile.tianqitong.action.user_auto_share_weibo
sina.mobile.tianqitong.action.cancel_push_notification

sina.mobile.tianqitong.appwidget.TQTReceiver

sina.mobile.tianqitong.action.delete_notification
sina.mobile.tianqitong.action.update_widget_clock
com.miui.home.intent.action.UNLOCKED
sina.mobile.tianqitong.INTENT_BC_TTS_PLAYING_FINISHED
sina.mobile.tianqitong.INTENT_BC_TTS_PLAYING
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.USER_PRESENT
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.BOOT_COMPLETED
action_broadcast_cover_app_unlock
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
sina.mobile.tianqitong.action.cancel_download_notification
com.sina.push.tqt.ACTION_GET_GETUI_CID
com.sina.push.tqt.ACTION_GET_GETUI_PUSH_DATA

sina.mobile.tianqitong.appwidget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget5x2Provider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget4x1Provider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget5x1Provider

android.appwidget.action.APPWIDGET_UPDATE

com.sina.tianqitong.service.receiver.AppInstalledReceiver

android.intent.action.PACKAGE_ADDED

com.sina.tianqitong.ui.alarm.TtsAlarmReceiver

com.sina.tianqitong.VOICE_ALARM_ALERT

com.sina.tianqitong.service.receiver.TQTADReceiver

com.sina.tianqitong.ui.splash.ad.tqtad.TQTADService.ACTION.install

com.sina.push.receiver.PushSDKReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

com.sina.tianqitong.service.receiver.PushReceiver

com.sina.push.msg.broadcast.1003

com.baidu.techain.TechainReceiver

com.baidu.action.Techain.VIEW
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.weibo.tianqitong.aqiappwidget.AqiAW_4x1

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_4x2

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_5x1

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_5x2

android.appwidget.action.APPWIDGET_UPDATE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.igexin.sdk.MiuiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.igexin.sdk.VivoPushMessageReceiver

com.vivo.pushclient.action.RECEIVE

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

Services

com.sina.tianqitong.service.TQTService

sina.mobile.tianqitong.action.startservice.get_new_weibo_topic
sina.mobile.tianqitong.action.startservice.get_new_week_recommend
sina.mobile.tianqitong.action.startservice.get_new_tts_operation
sina.mobile.tianqitong.action.startservice.do_tts
sina.mobile.tianqitong.action.startservice.update_before_tts
sina.mobile.tianqitong.action.startservice.pop_up_before_tts
sina.mobile.tianqitong.action.startservice.update_4x2appwidget
sina.mobile.tianqitong.action.startservice.update_4x1appwidget
sina.mobile.tianqitong.action.startservice.update_5x2appwidget
sina.mobile.tianqitong.action.startservice.update_5x1appwidget
sina.mobile.tianqitong.action.startservice.update_widget_clock
sina.mobile.tianqitong.action.startservice.switch_appwidget_city
sina.mobile.tianqitong.action.startservice.do_tts_widget
sina.mobile.tianqitong.action.startservice.user_introduction_for_weibo
sina.mobile.tianqitong.action.startservice.run_weibo
sina.mobile.tianqitong.action.startservice.share_weibo
sina.mobile.tianqitong.action.startservice.wake_up_and_update_one_city
sina.mobile.tianqitong.action.startservice.hangeng_alarm_register
sina.mobile.tianqitong.action.startservice.auto_share_weibo
sina.mobile.tianqitong.action.startservice.update_all_citys
sina.mobile.tianqitong.action.startservice.addupdate_locate_city
sina.mobile.tianqitong.action.startservice.get_pid
sina.mobile.tianqitong.ACTION_DAILY_SCHEDULE_REFRESH_TIMELINE
sina.mobile.tianqitong.ACTION_CHECK_SOME_DAY
sina.mobile.tianqitong.ACTION_CHECK_SECOND_DAY
sina.mobile.tianqitong.ACTION_CHECK_3RD_DAY
android.intent.action.VIEW

com.sina.push.service.SinaPushService

sina.push.action.service.1003

com.sina.push.service.SinaPushNewService

sina.push.action.new.service.1003

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.baidu.techain.TechainService

com.baidu.action.Techain.VIEW

com.igexin.sdk.HmsPushMessageService

com.huawei.push.action.MESSAGING_EVENT

com.getui.gtc.GtcService

com.getui.gtc.sdk.service.action

com.igexin.sdk.OppoPushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.igexin.sdk.OppoAppPushService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE
com.heytap.msp.push.RECEIVE_MCS_MESSAGE

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG
bdxadsdk.jar
.apk android
gdtadv2.jar
.apk android arch:arm64 arch:arm

Android Permissions

8b17c5004ecbbcd2fce3ebf613552144

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

org.adw.launcher_donut.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.WRITE_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.WRITE_SETTINGS

com.sec.android.app.launcher.permission.READ_SETTINGS

com.sec.android.app.launcher.permission.WRITE_SETTINGS

com.miui.home.launcher.permission.READ_SETTINGS

com.miui.home.launcher.permission.WRITE_SETTINGS

telecom.mdesk.permission.READ_SETTINGS

telecom.mdesk.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

sina.mobile.tianqitong

com.sina.tianqitong.ui.main.Splash

Activities

com.sina.tianqitong.ui.main.Splash

com.sina.tianqitong.ui.main.MainTabActivity

sina.mobile.tianqitong.appwidget.WidgetConfigure

com.sina.tianqitong.ui.cityselector.CityViewSpotSelectorActivity

sina.mobile.tianqitong.main.Splash

com.tencent.tauth.AuthActivity

com.sina.tianqitong.login.activity.LoginActivity

com.sina.tianqitong.user.MemberDetailActivity

com.sina.tianqitong.ui.main.SinaEmptyActivity

com.baidu.techain.TechainActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

Permissions

Receivers

com.sina.tianqitong.service.receiver.AlarmReceiver

sina.mobile.tianqitong.appwidget.TQTReceiver

sina.mobile.tianqitong.appwidget.WidgetProvider

sina.mobile.tianqitong.appwidget.Widget5x2Provider

sina.mobile.tianqitong.appwidget.Widget4x1Provider

sina.mobile.tianqitong.appwidget.Widget5x1Provider

com.sina.tianqitong.service.receiver.AppInstalledReceiver

com.sina.tianqitong.ui.alarm.TtsAlarmReceiver

com.sina.tianqitong.service.receiver.TQTADReceiver

com.sina.push.receiver.PushSDKReceiver

com.sina.tianqitong.service.receiver.PushReceiver

com.baidu.techain.TechainReceiver

com.weibo.tianqitong.aqiappwidget.AqiAW_4x1

com.weibo.tianqitong.aqiappwidget.AqiAW_4x2

com.weibo.tianqitong.aqiappwidget.AqiAW_5x1

com.weibo.tianqitong.aqiappwidget.AqiAW_5x2

com.igexin.sdk.PushReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.igexin.sdk.MiuiPushReceiver

com.igexin.sdk.VivoPushMessageReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

Services

com.sina.tianqitong.service.TQTService

com.sina.push.service.SinaPushService

com.sina.push.service.SinaPushNewService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.baidu.techain.TechainService

com.igexin.sdk.HmsPushMessageService

com.getui.gtc.GtcService

com.igexin.sdk.OppoPushService

com.igexin.sdk.OppoAppPushService

com.huawei.hms.support.api.push.service.HmsMsgService

Android Permissions

8b17c5004ecbbcd2fce3ebf613552144