sl6[.]apk | Triage

General

Target

sl6.apk
Size

13.3MB
MD5

346ad5cdf1b12fb70b16b64d558aea19
SHA1

9c2608b86b1f53afa9e79427bc0b466551c67c21
SHA256

602433af7dad257da1e92f27e0ab571cb97a53e9b3a9790905459296aed28434
SHA512

5d5ce6c30bf00186de9dcd97242f705f84caa581a8b48b3780029d3f462463e1561aec71080a7952fbd0665448716797c70d85f84ef56d4a22a432ab2a2ad3d9
SSDEEP

196608:/3O6YinBhs5a+kAJrdq/uzwwmHkt9RPGNL+mCeIjmRNUPcRUhJKnCMgkqh9UuPce:9TLWxkiq/o1XRuEJ6NUoUhsAvcTEFP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

sl6.apk
.apk android

ginlemon.flowerfree

ginlemon.flower.HomeScreen

Activities

ginlemon.flower.HomeScreen

android.intent.action.MAIN

ginlemon.flower.preferences.PrefSectionActivity

android.intent.action.MAIN

ginlemon.flower.preferences.activities.showcases.MyThemesActivity

ginlemon.smartlauncher.setGSLTHEME

ginlemon.flower.PreventModificationsActivity

ginlemon.smartlauncher.BUBBLESTYLE
ginlemon.smartlauncher.CLOCKFONTS

com.android.wallpapercropper.WallpaperCropActivity

android.service.wallpaper.CROP_AND_SET_WALLPAPER

ginlemon.flower.webApp.WebAppActivity

ginlemon.flower.webApp

ginlemon.flower.webApp.PickerDialogBuilder

android.intent.action.CREATE_SHORTCUT

ginlemon.flower.preferences.activities.BlackScreenActivity

android.intent.action.MAIN

ginlemon.flower.preferences.activities.ExportedActivities$RestoreBackup

android.intent.action.VIEW
android.intent.action.VIEW

ginlemon.flower.preferences.activities.ExportedActivities$FakeHome

android.intent.action.MAIN

ginlemon.flower.preferences.activities.ExportedActivities$FakeActivity

android.intent.action.MAIN

ginlemon.flower.DummyActivity

android.intent.action.MAIN

ginlemon.flower.preferences.prefMenu.PrefMenuActivity

android.intent.action.APPLICATION_PREFERENCES

ginlemon.flower.shortcuts.AddDeepShortcutActivity

android.content.pm.action.CONFIRM_PIN_SHORTCUT
android.content.pm.action.CONFIRM_PIN_APPWIDGET

Permissions

com.android.vending.BILLING
android.permission.EXPAND_STATUS_BAR
android.permission.CALL_PHONE
android.permission.READ_CALENDAR
android.permission.RESTART_PACKAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
com.google.android.gms.permission.ACTIVITY_RECOGNITION
android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
android.permission.QUERY_ALL_PACKAGES
com.huawei.android.mewidget.permission.data
com.zte.appwidget.contact.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WEATHERCLOCK_PROVIDER
ginlemon.receiveNotifications
ginlemon.canTurnOffScreen
android.permission.REQUEST_DELETE_PACKAGES
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE

Services

ginlemon.notifications.listener.NotificationListener

android.service.notification.NotificationListenerService

ginlemon.flower.library.PanelActionService

android.accessibilityservice.AccessibilityService

ginlemon.flower.core.cloudMessaging.SlFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

Android Permissions

sl6.apk

Permissions

com.android.vending.BILLING

android.permission.EXPAND_STATUS_BAR

android.permission.CALL_PHONE

android.permission.READ_CALENDAR

android.permission.RESTART_PACKAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

com.google.android.gms.permission.ACTIVITY_RECOGNITION

android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

android.permission.QUERY_ALL_PACKAGES

com.huawei.android.mewidget.permission.data

com.zte.appwidget.contact.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WEATHERCLOCK_PROVIDER

ginlemon.receiveNotifications

ginlemon.canTurnOffScreen

android.permission.REQUEST_DELETE_PACKAGES

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

Sharing

General

Malware Config

Signatures

Files

ginlemon.flowerfree

ginlemon.flower.HomeScreen

Activities

ginlemon.flower.HomeScreen

ginlemon.flower.preferences.PrefSectionActivity

ginlemon.flower.preferences.activities.showcases.MyThemesActivity

ginlemon.flower.PreventModificationsActivity

com.android.wallpapercropper.WallpaperCropActivity

ginlemon.flower.webApp.WebAppActivity

ginlemon.flower.webApp.PickerDialogBuilder

ginlemon.flower.preferences.activities.BlackScreenActivity

ginlemon.flower.preferences.activities.ExportedActivities$RestoreBackup

ginlemon.flower.preferences.activities.ExportedActivities$FakeHome

ginlemon.flower.preferences.activities.ExportedActivities$FakeActivity

ginlemon.flower.DummyActivity

ginlemon.flower.preferences.prefMenu.PrefMenuActivity

ginlemon.flower.shortcuts.AddDeepShortcutActivity

Permissions

Receivers

com.google.firebase.iid.FirebaseInstanceIdReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

ginlemon.notifications.listener.NotificationListener

ginlemon.flower.library.PanelActionService

ginlemon.flower.core.cloudMessaging.SlFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

sl6.apk