cb7cec17b2b768b2fdf00c63dbbc44f2

General

Target

cb7cec17b2b768b2fdf00c63dbbc44f2
Size

23.8MB
MD5

cb7cec17b2b768b2fdf00c63dbbc44f2
SHA1

e8653b185ac0611bc94318cfaffc07b0252d48cf
SHA256

76ca4575147533888338b8be7ab698f98c69cd4f2082e64db527ddf2e2fc8f3c
SHA512

d577872b7bef5b47c955facee81ea9e3d06632fc8e47c3e79aa109951700648a9244efd4e7cb0fdacf3d4ce809bb657f8489271ec8faa1a38230be6f6309554c
SSDEEP

393216:4KrVAMwJvTLgVBCXL+vZJiq2O4hZLjSbG0zmQgwmOmgdKw3o/kwdP/PVYt1xYaUo:dobE4YiTLLjSbGOBmOmpAiOtwH/BJ5b+

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

cb7cec17b2b768b2fdf00c63dbbc44f2
.apk android arch:arm arch:x86

com.bwgame.zjzj

com.qiqiersan.sdk.QqesShellActivity

Activities

cn.cmgame.billing.api.GameOpenActivity

android.intent.action.CHINAMOBILE_OMS_GAME

com.qihoo.gamecenter.sdk.suspend.personal.PersonalActivity

com.qiqiersan.sdk.QqesShellActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RESTART_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.SEND_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CONTACTS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.BATTERY_STATS
android.permission.BROADCAST_STICKY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE

Receivers

com.qihoo.gamecenter.sdk.suspend.local.QBootReceiver

android.intent.action.BOOT_COMPLETED

com.qihoo.psdk.local.QBootReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.gameservice.sdk.push.api.SmartPushReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_RESTARTED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
cn.ngds.android.intent.alarm

Services

com.qihoo.gamecenter.sdk.suspend.remote.QRemoteService

com.qihoo.gamecenter.sdk.suspend.service.action.remote

com.qihoo.gamecenter.sdk.suspend.local.QLocalService

com.qihoo.gamecenter.sdk.suspend.local.QLocalService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.service.action.remote

com.qihoo.psdk.local.QLocalService

com.qihoo.psdk.service.action.local
7723box_pjz.apk
.apk android arch:arm arch:mips arch:x86

com.upgadata.up7723

com.upgadata.up7723.ui.activity.SplashActivity

Activities

com.upgadata.up7723.ui.activity.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.FLASHLIGHT
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.upgadata.up7723.apps.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.upgadata.up7723.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.upgadata.up7723.dao.http.download.DownloadService

download.service.action

com.umeng.message.UmengService

com.upgadata.up7723.intent.action.START
com.upgadata.up7723.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

Android Permissions

cb7cec17b2b768b2fdf00c63dbbc44f2

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.bwgame.zjzj

com.qiqiersan.sdk.QqesShellActivity

Activities

cn.cmgame.billing.api.GameOpenActivity

com.qihoo.gamecenter.sdk.suspend.personal.PersonalActivity

com.qiqiersan.sdk.QqesShellActivity

Permissions

Receivers

com.qihoo.gamecenter.sdk.suspend.local.QBootReceiver

com.qihoo.psdk.local.QBootReceiver

com.gameservice.sdk.push.api.SmartPushReceiver

Services

com.qihoo.gamecenter.sdk.suspend.remote.QRemoteService

com.qihoo.gamecenter.sdk.suspend.local.QLocalService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.upgadata.up7723

com.upgadata.up7723.ui.activity.SplashActivity

Activities

com.upgadata.up7723.ui.activity.SplashActivity

Permissions

Receivers

com.upgadata.up7723.apps.BootReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.upgadata.up7723.dao.http.download.DownloadService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

Android Permissions

cb7cec17b2b768b2fdf00c63dbbc44f2