c639db2b835750bdd24d1f1f5692731f

General

Target

c639db2b835750bdd24d1f1f5692731f
Size

7.6MB
MD5

c639db2b835750bdd24d1f1f5692731f
SHA1

e6d262be43c023db23688841987c8c9b2bb368ea
SHA256

4ac79d85ad4b75344332b0d825ff6fec4ae2f9cc6a805025bc133ff6067f1254
SHA512

219cddce6c51f3bd6b7a6bcf3fef690f494ae71ccb9f5a8b720096e196c2a0b298cfb06f0f1b4b80d603660b7de5b8b4028a71dce21f9f0b5aba7562c1e01032
SSDEEP

196608:gpT2HAokaqv6F8ukSlaBaLvJsy6nZMdCbWjKtBw:mT2H3kt68Zca8TJsy6nqw3w

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

c639db2b835750bdd24d1f1f5692731f
.apk android arch:arm arch:x86

com.mengzhua.nuanwoyj

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

android.intent.action.MAIN

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.ACTION_PICK
io.dcloud.ACTION_MULTIPLE_PICK

com.mengzhua.nuanwo.wxapi.WXEntryActivity

android.intent.action.VIEW

io.dcloud.c.Hg

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.VIBRATE
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.CALL_PHONE
android.permission.FLASHLIGHT
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
android.permission.CAMERA
android.permission.SYSTEM_ALERT_WINDOW

Receivers

io.dcloud.feature.apsGt.PushMessageReceiver

com.igexin.sdk.action.ebywvCn3TaAztf6iQHTjP7

io.dcloud.feature.apsGt.GTNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.mengzhua.nuanwo.__CREATE_NOTIFICATION
com.mengzhua.nuanwo.__REMOVE_NOTIFICATION
com.mengzhua.nuanwo.__CLEAR_NOTIFICATION
com.mengzhua.nuanwo.__CLILK_NOTIFICATION

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.ebywvCn3TaAztf6iQHTjP7

io.dcloud.a.Hae

android.net.conn.CONNECTIVITY_CHANGE

io.dcloud.b.Oi

android.net.conn.CONNECTIVITY_CHANGE

io.dcloud.c.Cpf

android.net.conn.CONNECTIVITY_CHANGE

io.dcloud.d.Gp

android.net.conn.CONNECTIVITY_CHANGE

io.dcloud.e.Op

android.net.conn.CONNECTIVITY_CHANGE

Services

Android Permissions

c639db2b835750bdd24d1f1f5692731f

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.mengzhua.nuanwoyj

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

io.dcloud.imagepick.CustomGalleryActivity

com.mengzhua.nuanwo.wxapi.WXEntryActivity

io.dcloud.c.Hg

Permissions

Receivers

io.dcloud.feature.apsGt.PushMessageReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

io.dcloud.a.Hae

io.dcloud.b.Oi

io.dcloud.c.Cpf

io.dcloud.d.Gp

io.dcloud.e.Op

Services

Android Permissions

c639db2b835750bdd24d1f1f5692731f