kidguard[.]apk

General

Target

kidguard.apk
Size

19.1MB
MD5

cc866d3251c6cd37a7e9a489de14c247
SHA1

6b5414f453514132471fbd90d8a7ac0c8199df87
SHA256

3397015ab153e8861ff9cb6e4adddb32fe0dd853fa2145b2fa66d6628ac5ebf6
SHA512

cd2f2963ab4d69b275be0971003ecda7c4412662a943b8d8c46785c275d3cc7595c8f1cf7407164726e49c6184435381a15dc66887ac33388c909f299f5a9a52

Score

8^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

Processes:

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write (but not read) the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION

Files

kidguard.apk
.apk android arch:arm arch:x86

com.kg.rna

Activities

com.packager.sms.SMSDummyCompose

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.BLUETOOTH
android.permission.READ_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.READ_CALENDAR
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.MODIFY_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.PROCESS_OUTGOING_CALLS
android.permission.RECORD_AUDIO
android.permission.READ_LOGS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.VIBRATE
android.permission.ANSWER_PHONE_CALLS
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.CAPTURE_VIDEO_OUTPUT
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.NEW_OUTGOING_CALL

Receivers

com.packager.receiver.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLED

com.packager.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.packager.receiver.OutgoingCallReceiver

android.intent.action.NEW_OUTGOING_CALL

com.packager.receiver.PhoneStateReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.packager.receiver.PhoneStateReceiverOld

android.intent.action.PHONE_STATE

com.packager.receiver.PackageEventReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.ACTION_PACKAGE_REMOVED

com.packager.sms.SMSReceiver

android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.SMS_RECEIVED

com.packager.sms.MMSReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.packager.receiver.ScreenReceiver

android.intent.action.USER_PRESENT

Services

com.packager.sms.HeadlessSMSSendService

android.intent.action.RESPOND_VIA_MESSAGE

com.packager.services.accessibility.KeyLoggerService

com.packager.services.KeyLoggerService.actions.ACTION_NEW_ACCESSIBILITY_EVENT

com.packager.services.TAccessibilityService

android.accessibilityservice.AccessibilityService

kidguard.apk

Permissions

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.BLUETOOTH

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.READ_CALENDAR

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.MODIFY_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.RECORD_AUDIO

android.permission.READ_LOGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.BIND_ACCESSIBILITY_SERVICE

android.permission.VIBRATE

android.permission.ANSWER_PHONE_CALLS

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.CAPTURE_VIDEO_OUTPUT

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.NEW_OUTGOING_CALL

Sharing

General

Malware Config

Signatures

Files

com.kg.rna

Activities

com.packager.sms.SMSDummyCompose

Permissions

Receivers

com.packager.receiver.AdminReceiver

com.packager.receiver.BootReceiver

com.packager.receiver.OutgoingCallReceiver

com.packager.receiver.PhoneStateReceiver

com.packager.receiver.PhoneStateReceiverOld

com.packager.receiver.PackageEventReceiver

com.packager.sms.SMSReceiver

com.packager.sms.MMSReceiver

com.packager.receiver.ScreenReceiver

Services

com.packager.sms.HeadlessSMSSendService

com.packager.services.accessibility.KeyLoggerService

com.packager.services.TAccessibilityService

Android Permissions

kidguard.apk