CSMBP[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CSMBP.apk
Size

150.3MB
MD5

0a2285260ce78632a386b92df66d53a5
SHA1

334d3124628a8ede11e6b583e12c3eaf38b43a09
SHA256

47c2f4c894d2b966d9b03bd6c6cf46c4277be1057ea1b1e29bdc63ae6da2f2e2
SHA512

d30ad3c3420e3d65d94a5e2d16b688123b675d8c90ada5e91a42fbaf382117ea060636d915cdfb93e7adef6589c8a3e26caa1fa3453e679e1a80a2ee670419c3
SSDEEP

3145728:9KNuVQwA9bwvEFvhrigVZjRUXWUtflMZX33AjC2m+Nun+JcF0E7:UsVQwAxFb3jytfOAu2m+1cay

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT

Files

CSMBP.apk
.apk android arch:arm64

com.csair.mbp

com.csair.mbp.launcher.WelcomeActivity

Activities

com.csair.mbp.launcher.WelcomeActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.csair.mbp.launcher.hybrid.CommonHybridActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.csair.mbp.main.update.UpdateActivity

android.intent.action.VIEW

com.csair.mbp.notification.NotificationMainActivity

android.intent.action.MAIN

com.csair.mbp.notification.activity.NotificationOpenActivity

android.intent.action.VIEW

com.csair.mbp.pay.activity.CMBECallbackActivity

android.intent.action.VIEW

com.csair.mbp.checkin.activity.CheckinNewLoginAllActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.csair.mbp.auth_login.activities.AuthLoginActivity

android.intent.action.VIEW

com.ccb.ccbnetpay.activity.appresult.ResultActivity

comccbpay105440145110013csmbpapp

com.finogeeks.lib.applet.modules.urlrouter.UrlRouterActivity

android.intent.action.VIEW

com.finogeeks.lib.applet.api.nfc.NfcDispatchActivity

android.nfc.action.NDEF_DISCOVERED
android.nfc.action.TECH_DISCOVERED
android.nfc.action.TAG_DISCOVERED

kernal.idcard.android.IDCardBean

kernal.idcard

cn.weijing.sdk.wiiauth.activities.AuthEntryActivity

android.intent.action.MAIN

cn.weijing.sdk.wiiauth.activities.ga_auth.AuthEntryGaAuthActivity

android.intent.action.MAIN

Permissions

android.permission.SENSOR_INFO
android.permission.SENSOR_ENABLE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUE_ADMIN
android.permission.BROADCAST_STICKY
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_BASIC_PHONE_STATE
android.permission.DISABLE_KEYGUARD
android.permission.FLASHLIGHT
android.permission.INTERNET
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.READ_CONTACTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.RECORD_AUDIO
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.google.android.c2dm.permission.RECEIVE
org.simalliance.openmobileapi.SMARTCARD
com.csair.mbp.permission.C2D_MESSAGE
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.POST_NOTIFICATIONS
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CAPTURE_VIDEO_OUTPUT
android.permission.PREVENT_POWER_KEY
android.permission.CHANGE_CONFIGURATION
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.SCHEDULE_EXACT_ALARM
com.csair.mbp.permission.JPUSH_MESSAGE
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.GET_TASKS
com.meizu.c2dm.permission.RECEIVE
android.permission.FOREGROUND_SERVICE
com.csair.mbp.notification.MessageCenterReceiver
android.permission.READ_MEDIA_IMAGES
android.permission.BLUETOOTH_ADMIN
MediaStore.Images.Media.INTERNAL_CONTENT_URI
MediaStore.Images.Media.EXTERNAL_CONTENT_URI
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.REORDER_TASKS
com.csair.mbp.permission.FIN_APPLET_RECEIVER
android.permission.BLUETOOTH_CONNECT
com.csair.mbp.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.QUERY_ALL_PACKAGES
com.csair.mbp.permission.PROCESS_PUSH_MSG
com.csair.mbp.permission.PUSH_PROVIDER
com.csair.mbp.permission.MIPUSH_RECEIVE
android.permission.ZTE_HEARTYSERVICE_MANAGEMENT

Receivers

com.alipay.android.phone.mobilecommon.dynamicrelease.SyncConfigReceiver

com.alipay.android.phone.mobilecommon.dynamicrelease.ACTION_SYNC_CONFIG

com.csair.mbp.message.receiver.MessageReceiver

com.csair.mbp.message.notification.received
com.csair.mbp.message.notification.open
com.csair.mbp.message.notification.messageReceived

com.csair.mbp.notification.MyJPushReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.ACTION_RICHPUSH_CALLBACK
cn.jpush.android.intent.CONNECTION

com.csair.mbp.notification.MessageCenterReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.ACTION_RICHPUSH_CALLBACK
cn.jpush.android.intent.CONNECTION

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

cn.jpush.android.service.PluginMeizuPlatformsReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

cn.jpush.android.service.PluginVivoMessageReceiver

com.vivo.pushclient.action.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

com.alipay.mobile.logmonitor.TraceStubReceiver

monitor.action.dump.traceview
monitor.action.dump.stacktracer
monitor.action.MONITOR_POWER

Services

com.alipay.android.phone.mobilecommon.dynamicrelease.DynamicReleaseRequestService

com.alipay.android.phone.mobilecommon.dynamicrelease.PROCESS_RESULT

com.csair.mbp.notification.service.JPushService

cn.jiguang.user.service.action

com.csair.mbp.notification.service.MyJPushMessageService

cn.jpush.android.intent.SERVICE_MESSAGE

cn.jpush.android.service.PluginOppoPushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.heytap.mcssdk.AppPushService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE

wintone.idcard.android.AuthService

wintone.idcard.authService

wintone.idcard.android.RecogService

wintone.idcard.recogService

wintone.idcard.android.TimeService

wintone.idcard.TimeService

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.finogeeks.lib.applet.ipc.FinAppAIDLService

com.csair.mbp.action.APP_AIDL_SERVER

com.kernal.bankcard.AuthService

kernal.bankcard.authService

kernal.idcard.android.AuthService

kernal.idcard.authService

kernal.idcard.android.RecogService

kernal.idcard.recogService

kernal.idcard.android.TimeService

kernal.idcard.TimeService

cn.weijing.sdk.wiiauth.WiiAuthService

android.intent.action.wiiauth.service

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

cn.jpush.android.service.PluginHuaweiPlatformsService

com.huawei.push.action.MESSAGING_EVENT
2000-version-basic-v3.6.0.bks
.apk android
2001-version-xiaomi-v3.6.0.bks
.apk android
2002-version-huawei-v3.6.0.bks
.apk android
2003-version-meizu-v3.6.0.bks
.apk android
2004-version-oppo-v3.6.0.bks
.apk android
2005-version-vivo-v3.6.0.bks
.apk android

Android Permissions

CSMBP.apk

Permissions

android.permission.SENSOR_INFO

android.permission.SENSOR_ENABLE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUE_ADMIN

android.permission.BROADCAST_STICKY

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_BASIC_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.FLASHLIGHT

android.permission.INTERNET

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.google.android.c2dm.permission.RECEIVE

org.simalliance.openmobileapi.SMARTCARD

com.csair.mbp.permission.C2D_MESSAGE

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.PREVENT_POWER_KEY

android.permission.CHANGE_CONFIGURATION

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.SCHEDULE_EXACT_ALARM

com.csair.mbp.permission.JPUSH_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.csair.mbp

com.csair.mbp.launcher.WelcomeActivity

Activities

com.csair.mbp.launcher.WelcomeActivity

com.csair.mbp.launcher.hybrid.CommonHybridActivity

com.csair.mbp.main.update.UpdateActivity

com.csair.mbp.notification.NotificationMainActivity

com.csair.mbp.notification.activity.NotificationOpenActivity

com.csair.mbp.pay.activity.CMBECallbackActivity

com.csair.mbp.checkin.activity.CheckinNewLoginAllActivity

com.tencent.tauth.AuthActivity

com.csair.mbp.auth_login.activities.AuthLoginActivity

com.ccb.ccbnetpay.activity.appresult.ResultActivity

com.finogeeks.lib.applet.modules.urlrouter.UrlRouterActivity

com.finogeeks.lib.applet.api.nfc.NfcDispatchActivity

kernal.idcard.android.IDCardBean

cn.weijing.sdk.wiiauth.activities.AuthEntryActivity

cn.weijing.sdk.wiiauth.activities.ga_auth.AuthEntryGaAuthActivity

Permissions

Receivers

com.alipay.android.phone.mobilecommon.dynamicrelease.SyncConfigReceiver

com.csair.mbp.message.receiver.MessageReceiver

com.csair.mbp.notification.MyJPushReceiver

com.csair.mbp.notification.MessageCenterReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

cn.jpush.android.service.PluginMeizuPlatformsReceiver

cn.jpush.android.service.PluginVivoMessageReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

cn.jpush.android.service.PushReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

com.alipay.mobile.logmonitor.TraceStubReceiver

Services

com.alipay.android.phone.mobilecommon.dynamicrelease.DynamicReleaseRequestService

com.csair.mbp.notification.service.JPushService

com.csair.mbp.notification.service.MyJPushMessageService

cn.jpush.android.service.PluginOppoPushService

com.heytap.mcssdk.AppPushService

wintone.idcard.android.AuthService

wintone.idcard.android.RecogService

wintone.idcard.android.TimeService

com.taobao.accs.data.MsgDistributeService

com.finogeeks.lib.applet.ipc.FinAppAIDLService

com.kernal.bankcard.AuthService

kernal.idcard.android.AuthService

kernal.idcard.android.RecogService

kernal.idcard.android.TimeService

cn.weijing.sdk.wiiauth.WiiAuthService

cn.jpush.android.service.PushService

com.huawei.hms.support.api.push.service.HmsMsgService

cn.jpush.android.service.PluginHuaweiPlatformsService

Android Permissions

CSMBP.apk