7196d8b2246874e9e1b3fa4f67bfd814d28d8f01c579d2d7871b798d188fc59b[.]apk[.]zip

Resubmissions

12-02-2024 12:17

240212-pgjjvsch9v 7

08-10-2023 00:00

231008-aamwdagf9w 7

Sharing

Copy URL

Twitter E-mail

General

Target

7196d8b2246874e9e1b3fa4f67bfd814d28d8f01c579d2d7871b798d188fc59b.apk.zip
Size

38.9MB
MD5

f30772c5af6f69ed8d8ff4b017403877
SHA1

27ebb3a183a01965f1a5384f651a53725e0ed955
SHA256

c868dd91bc3b094fbd1566f5880e5d367e0d96d7a46be0077bb6169aa295eba9
SHA512

b9564538635cee97721179c1b42fee74dd8b841f1a54e57ae52176f33c82820e62ebfd80dedd78ece0309b59debdb2fe2257ee0a328dd283ce63269957999a0e
SSDEEP

786432:PWYYCsWQ4QjUL63spo06jxfFXCzYCfmWVsKTbpj74GqOPF81bbmA1HdWy3:PWRUqjSQspUt8eW1Tt74Gj4R1HdWi

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

7196d8b2246874e9e1b3fa4f67bfd814d28d8f01c579d2d7871b798d188fc59b.apk.zip
.zip

Password: infected
7196d8b2246874e9e1b3fa4f67bfd814d28d8f01c579d2d7871b798d188fc59b.apk
.apk android arch:arm64 arch:arm

Password: infected

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.action.PULLUP
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

android.intent.action.MAIN
android.intent.action.VIEW

cn.ninegame.gamemanager.activity.MessageBoxActivity

android.intent.action.MAIN

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

android.intent.action.VIEW

cn.ninegame.gamemanager.activity.OutsideInstallActivity

android.intent.action.VIEW
android.intent.action.INSTALL_PACKAGE
android.intent.action.INSTALL_PACKAGE
android.intent.action.DELETE
android.intent.action.UNINSTALL_PACKAGE

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentResult4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentCreate4323
com.alibaba.wireless.security.open.middletier.fc.ui.BXIntentLog4323

cn.ninegame.accountsdk.app.AccountMainActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

android.intent.action.VIEW
com.tmall.wireless.action.navigator.INTERNAL_NAVIGATION

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.WRITE_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CAMERA
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS
dianxin.permission.ACCESS_LAUNCHER_DATA
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.ACCESS_WIFI_STATE
android.permission.READ_EXTERNAL_STORAGE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.READ_APP_BADGE
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
android.permission.RECORD_AUDIO
android.permission.REQUEST_INSTALL_PACKAGES
com.meizu.flyme.push.permission.RECEIVE
cn.ninegame.gamemanager.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
cn.ninegame.gamemanager.permission.C2D_MESSAGE
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.READ_SETTINGS
cn.ninegame.gamemanager.permission.PROCESS_PUSH_MSG
cn.ninegame.gamemanager.permission.PUSH_PROVIDER
android.permission.FOREGROUND_SERVICE
com.meizu.flyme.permission.PUSH
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CLEAR_APP_CACHE
android.permission.GET_PACKAGE_SIZE
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.FLASHLIGHT
android.permission.CAPTURE_VIDEO_OUTPUT
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
cn.cyberidentity.certification.AUTH

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.modules.message.BoxMsgNotificationBroadcastReceiver.cancel_by_user

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

cn.ninegame.gamemanager.notifications.push
cn.ninegame.gamemanager.notifications.push.force
cn.ninegame.gamemanager.notifications.push.start.service
cn.ninegame.gamemanager.notifications.showNotification
cn.ninegame.gamemanager.notifications.showPushMessage
cn.ninegame.gamemanager.notifications.checkNetGameGiftTime
cn.ninegame.gamemanager.notifications.showNetGameNotification
cn.ninegame.gamemanager.notifications.GetGiftInfoNotification
cn.ninegame.gamemanager.notifications.reset.interval
cn.ninegame.gamemanager.notifications.syncFollowNotify.login

com.pp.assistant.cockroach.CockroachBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.pp.assistant.cockroach.action.live

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

android.intent.action.USER_PRESENT

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

android.net.wifi.STATE_CHANGE

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
com.ali.money.shield.alicleanerlib.ScheduleJunkScan

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

cn.ninegame.gamemanager.alarm.action

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.gamemanager.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.agoopush

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.taobao.orange.receiver.OrangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.meizu.flyme.push.intent.PUSH_SYSTEM

com.alv.foun.PhoenixBroadcastReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
com.alv.foun.ACTION_WAKE_UP_ALARM

com.ali.user.open.receiver.SessionSyncReceiver

aliuser_sync_session

com.taobao.tao.powermsg.PowerMsgReceiver

TAOBAO_DELAY_START_POWMSG
com.taobao.tao.messagkit.receive

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

cn.ninegame.gamemanager.pullup

com.pp.assistant.cockroach.service.CockroachService

android.view.InputMethod

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.taobao.agoo.TaobaoMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

org.agoo.android.intent.action.RECEIVE

com.taobao.orange.service.OrangeApiService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

com.taobao.accs.intent.action.RECEIVE

com.r2.diablo.middleware.core.splitinstall.remote.SplitInstallService

com.r2.diablo.middleware.android.play.core.splitinstall.BIND_SPLIT_INSTALL_SERVICE

anetwork.channel.aidl.NetworkService

anetwork.channel.aidl.IRemoteNetworkGetter

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

org.android.agoo.huawei.HuaweiPushMessageService

com.huawei.push.action.MESSAGING_EVENT

com.alv.foun.service.PhoenixService

android.view.InputMethod
oppo.intent.action.keyguard

com.taobao.trtc.accs.TrtcAccsService

com.taobao.accs.intent.action.RECEIVE

com.alibaba.security.rp.service.DynamicRPJsbridgeService

RP

com.alibaba.security.rp.service.RPService

com.alibaba.intent.action.AIDL_IRPSERVICE

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

ActionService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.accs.intent.action.RECEIVE

com.taobao.tao.powermsg.outter.PowerMsg4WXService

powermsg

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

cn.ninegame.gamemanager

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

Activities

cn.ninegame.gamemanager.business.common.activity.LaunchActivity

cn.ninegame.gamemanager.business.common.activity.PullUpActivity

cn.ninegame.gamemanager.modules.main.home.mine.gamefolder.GameFolderActivity

cn.ninegame.gamemanager.activity.MessageBoxActivity

cn.ninegame.gamemanager.modules.highspeed.HighSpeedDownloadActivity

cn.ninegame.gamemanager.activity.OutsideInstallActivity

com.tencent.tauth.AuthActivity

com.alibaba.wireless.security.open.middletier.fc.ui.ContainerActivity

cn.ninegame.accountsdk.app.AccountMainActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.taobao.tao.flexbox.layoutmanager.actionservice.activity.PreviewActivity

Permissions

Receivers

cn.ninegame.message.push.BoxMsgNotificationBroadcastReceiver

cn.ninegame.gamemanager.modules.notification.receiver.NotificationsReceiver

com.pp.assistant.cockroach.CockroachBroadcastReceiver

cn.ninegame.gamemanager.modules.notice.trriger.CommonEventReceiver

com.ali.money.shield.sdk.cleaner.update.UpdateNetworkReceiver

com.ali.money.shield.sdk.cleaner.core.JunkScannerReceiver

cn.ninegame.gamemanager.business.common.alarm.AlarmReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

cn.ninegame.library.agoo.AgooMessageReceiver

cn.ninegame.gamemanager.NGMeizuPushReceiver

com.taobao.orange.receiver.OrangeReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

com.meizu.cloud.pushsdk.MzPushSystemReceiver

com.alv.foun.PhoenixBroadcastReceiver

com.ali.user.open.receiver.SessionSyncReceiver

com.taobao.tao.powermsg.PowerMsgReceiver

Services

cn.ninegame.gamemanager.modules.notification.service.NotificationsPushService

com.pp.assistant.cockroach.service.CockroachService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.ChannelService

org.android.agoo.accs.AgooService

com.taobao.agoo.TaobaoMessageIntentReceiverService

cn.ninegame.gamemanager.CustomAgooIntentService

com.taobao.orange.service.OrangeApiService

com.taobao.orange.accssupport.OrangeAccsService

com.r2.diablo.middleware.core.splitinstall.remote.SplitInstallService

anetwork.channel.aidl.NetworkService

com.huawei.hms.support.api.push.service.HmsMsgService

org.android.agoo.huawei.HuaweiPushMessageService

com.alv.foun.service.PhoenixService

com.taobao.trtc.accs.TrtcAccsService

com.alibaba.security.rp.service.DynamicRPJsbridgeService

com.alibaba.security.rp.service.RPService

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

com.taobao.tao.flexbox.layoutmanager.actionservice.core.ActionServiceJsBridgeService

com.taobao.tao.messagekit.base.AccsReceiverService

com.taobao.tao.powermsg.outter.PowerMsg4WXService