0915142fa9cf642a1ef861dc4216b64cb8f425bb0

Sharing

Copy URL Twitter E-mail

General

Target
0915142fa9cf642a1ef861dc4216b64cb8f425bb0
Size 17.0MB
Sample260517-wtsfvsfx2q
SHA256 dd58766b70df65f72728c3e402c0a20a6250b1fcfa69df7c0f63a027c15de6ac
MD5 601eb52d92c9fa5e1bf7290094b63cd9
SHA1 64e8b85a1a44c714bb46de890c2ca6481a7f0f6b
SHA512 1cd5ba4d49898292f2a9ac0cefdaca7081bd20277520f3a8f8afba6b5ec8cf5c45018bd8ed877a82942de3712ab6021a2e71cf08a546f77f3aaa22535c80e84b
SSDEEP 393216:GRjQoKVx6ENt2tB1Wb7lwIZH8Y8qXbrUkHOcbm4Ysx:wJL1W3lwIZcY9XbrUEb
TLSH
T1C8072386F348E41AD1BBE4734EB6056365220C84D680F7B72A59F11C9EFBE945B48FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
0915142fa9cf642a1ef861dc4216b64cb8f425bb0

File Explorer

0915142fa9cf642a1ef861dc4216b64cb8f425bb0

.apk 17.0MB

0915142fa9cf642a1ef861dc4216b64cb8f425bb0

SHA256 dd58766b70df65f72728c3e402c0a20a6250b1fcfa69df7c0f63a027c15de6ac
MD5 601eb52d92c9fa5e1bf7290094b63cd9
SHA1 64e8b85a1a44c714bb46de890c2ca6481a7f0f6b
SHA512 1cd5ba4d49898292f2a9ac0cefdaca7081bd20277520f3a8f8afba6b5ec8cf5c45018bd8ed877a82942de3712ab6021a2e71cf08a546f77f3aaa22535c80e84b
SSDEEP 393216:GRjQoKVx6ENt2tB1Wb7lwIZH8Y8qXbrUkHOcbm4Ysx:wJL1W3lwIZcY9XbrUEb
TLSH
T1C8072386F348E41AD1BBE4734EB6056365220C84D680F7B72A59F11C9EFBE945B48FC8
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

3216e66f85d19651e8ff3bed8887994a7795c2fef2762cd89e392ca34d8d02d6

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=zmtaojin.keystore,OU=zmtaojin,O=zmtaojin,L=SH,ST=SH,C=ZH

com.trade.zmtaojin

com.trade.itaojin.moudle.home.activity.LoadingActivity

android.intent.action.MAIN android.intent.action.DELETE android.intent.action.VIEW

com.stub.plugin.Stub01

com.trade.itaojin.moudle.me.activity.LoginActivity

com.trade.itaojin.moudle.me.activity.RegActivity

com.trade.itaojin.moudle.me.activity.ResetPwdIndexAct

com.trade.itaojin.moudle.home.activity.NaviActivity

com.trade.itaojin.moudle.home.activity.MainActivity

com.trade.itaojin.moudle.home.activity.HomeRankActivity

com.trade.itaojin.moudle.home.activity.HomeRankProfitOrderActivity

com.trade.itaojin.moudle.trade.activity.RedirectH5Act

com.trade.itaojin.moudle.trade.activity.WeiXinRechargeAct

com.trade.itaojin.moudle.me.activity.AboutUsActivity

com.trade.itaojin.moudle.outterapp.ImageViewAttachActivity

com.trade.itaojin.moudle.outterapp.ImageViewAttachActivity2

com.trade.itaojin.moudle.outterapp.StrategyDetailActivity

com.trade.itaojin.moudle.outterapp.WebActivity

com.trade.itaojin.moudle.me.activity.LawActivity

com.trade.itaojin.moudle.product.activity.ProductManagerActivity

com.trade.itaojin.moudle.product.activity.ProductActivity

com.trade.itaojin.moudle.home.activity.HomeNewsDetailActivity

com.trade.itaojin.moudle.home.activity.HomeCalendarDetailAct

com.trade.itaojin.moudle.me.activity.WeipanMsgListActivity

com.trade.itaojin.moudle.trade.activity.TradeCloseDetailAct

com.trade.itaojin.moudle.trade.activity.CashOutAct

com.trade.itaojin.moudle.trade.activity.CashInAct

com.trade.itaojin.moudle.trade.activity.AuthTokenAct

com.trade.itaojin.moudle.trade.activity.TradeVoucherAct

com.trade.itaojin.moudle.trade.activity.TradeRedPacketAct

com.trade.itaojin.moudle.trade.activity.TradeDeferredAct

com.trade.itaojin.moudle.trade.activity.VoucherRuleAct

com.trade.itaojin.moudle.trade.activity.ProvinceAct

com.trade.itaojin.moudle.trade.activity.CityAct

com.trade.itaojin.moudle.trade.activity.BankListAct

com.trade.itaojin.moudle.me.activity.StepNavAct

com.trade.itaojin.moudle.ads.FullAdsAct

com.trade.itaojin.moudle.chatroom.activity.ChatRoomActivity

com.trade.itaojin.moudle.me.activity.UserSettingAct

com.trade.itaojin.moudle.me.activity.UserInfoEditAct

com.umeng.socialize.editorpage.ShareActivity

com.trade.itaojin.wxapi.WXEntryActivity

com.trade.itaojin.wxapi.WXPayEntryActivity

com.trade.itaojin.moudle.me.activity.ShareAct

com.trade.itaojin.moudle.entrust.act.TradeCreateEntrustAct

com.trade.itaojin.moudle.entrust.act.EntrustDetailAct

com.trade.itaojin.moudle.entrust.act.EntrustNotifyActivity

com.trade.itaojin.moudle.home.activity.HomeRankDetailV1Act

com.trade.itaojin.moudle.trade.activity.TradeLoginAct

com.trade.itaojin.moudle.trade.activity.TradeUnifyPWDLoginAct

com.trade.itaojin.moudle.trade.activity.TradeRegAct

com.trade.itaojin.moudle.trade.activity.TradeUnifyPwdFirstStepAct

com.trade.itaojin.moudle.trade.activity.TradeUnifyPwdSecondAct

com.trade.itaojin.moudle.trade.activity.TradeRestPwdAct

com.trade.itaojin.moudle.trade.activity.TradeUnifyPwdResetAct

com.trade.itaojin.moudle.trade.activity.TradeUnifyPwdResetExchangeAct

com.trade.itaojin.moudle.me.activity.IntegralMarketActivity

com.trade.itaojin.moudle.me.activity.GoodsActDetailActivity

com.trade.itaojin.moudle.me.activity.GoodsActDetailHistoryActivity

com.trade.itaojin.moudle.me.activity.MissionCenterAct

com.trade.itaojin.moudle.me.activity.AnswerQuestionAct

com.trade.itaojin.moudle.me.activity.IntegralExchangeHistoryActivity

com.trade.itaojin.moudle.me.activity.IntegralDetailActivity

com.trade.itaojin.moudle.product.activity.ProductNoticeActivity

com.trade.itaojin.moudle.product.activity.ProductNoticeNotifyActivity

com.switfpass.pay.activity.QQWapPayWebView

com.trade.itaojin.moudle.trade.jdpay.JDPayBindCardAct

com.trade.itaojin.moudle.trade.jdpay.JDPayInputSMSAct

com.trade.itaojin.moudle.trade.jdpay.JDBanksAct

com.trade.itaojin.moudle.trade.alipay.AliPayWebAct

com.trade.itaojin.moudle.group.activity.PostMomentAct

com.trade.itaojin.moudle.group.activity.MomentDetailAct

com.trade.itaojin.moudle.group.activity.SelectMentionAct

com.trade.itaojin.moudle.group.activity.SelectMarketAct

com.netease.nim.uikit.session.activity.P2PMessageActivity

com.netease.nim.uikit.session.activity.TeamMessageActivity

com.netease.nim.uikit.team.activity.NormalTeamInfoActivity

com.netease.nim.uikit.team.activity.AdvancedTeamInfoActivity

com.netease.nim.uikit.team.activity.AdvancedTeamMemberActivity

com.netease.nim.uikit.team.activity.AdvancedTeamAnnounceActivity

com.netease.nim.uikit.team.activity.AdvancedTeamMemberInfoActivity

com.netease.nim.uikit.team.activity.AdvancedTeamNicknameActivity

com.netease.nim.uikit.team.activity.AdvancedTeamCreateAnnounceActivity

com.netease.nim.uikit.team.activity.TeamPropertySettingActivity

com.netease.nim.uikit.contact_selector.activity.ContactSelectActivity

com.netease.nim.uikit.common.media.picker.activity.PickImageActivity

com.netease.nim.uikit.common.media.picker.activity.CropImageActivity

com.netease.nim.uikit.common.media.picker.activity.PickerAlbumActivity

com.netease.nim.uikit.common.media.picker.activity.PickerAlbumPreviewActivity

com.netease.nim.uikit.common.media.picker.activity.PreviewImageFromLocalActivity

com.netease.nim.uikit.common.media.picker.activity.PreviewImageFromCameraActivity

com.netease.nim.uikit.session.activity.CaptureVideoActivity

com.netease.nim.uikit.session.activity.WatchVideoActivity

com.netease.nim.uikit.session.activity.WatchMessagePictureActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

Android Permissions

0915142fa9cf642a1ef861dc4216b64cb8f425bb0

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

com.android.launcher.permission.READ_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.VIBRATE

com.trade.zmtaojin.permission.RECEIVE_MSG

getui.permission.GetuiService.com.trade.zmtaojin

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION