18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6

General

Target

18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6
Size

1.1MB
MD5

8b331632619cc78c77fc3676cb1a7b8f
SHA1

1268aa4ca27b3e4c281937f0a1eebff3f12bbead
SHA256

18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6
SHA512

d697d1a826b51e9679b1514866ad7b7070f4cb976e2d0f8e23f6932f508850f4441604ee21ec9b49ed947cdbbee8e0d32cbbc440d829ce163755663276b68ebb
SSDEEP

24576:8NyXOY92RKt2Z3mkbaAfC8U01zIyhyYgI3hiUJNdB4P2:8NyV2RhjeTQzIywYlh/5V

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6
.apk android arch:arm

com.ganny.rosebattery

BatterySettingActivity

Activities

BatterySettingActivity

android.intent.action.MAIN

Permissions

android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_APN_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_SECURE_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.UPDATE_DEVICE_STATS
android.permission.WAKE_LOCK
android.permission.DEVICE_POWER
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_APN_SETTINGS
android.permission.INTERNET
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.PROCESS_OUTGOING_CALLS

Receivers

ScreenRecever

android.intent.action.USER_PRESENT

Provider

android.appwidget.action.APPWIDGET_UPDATE

BootBrocastReceiver

android.intent.action.BOOT_COMPLETED

net.plug.loader.imp.MessageReceiver

android.provider.Telephony.SMS_RECEIVED

net.plug.loader.imp.ReportReceiver

com.aab.platform.apple.ACTION_GET_APPLE

net.plug.loader.imp.MyRecver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.PHONE_STATE
android.intent.action.USER_PRESENT
android.provider.Telephony.SMS_RECEIVED
android.intent.action.BOOT_COMPLETED
android.provider.Telephony.SECRET_CODE

cn.md.poc.fdk

android.net.conn.CONNECTIVITY_CHANGE

cn.md.poc.dsc

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.USER_PRESENT

Services

net.plug.loader.imp.BSTask

com.mywater.platform.PLATFORM

cn.md.poc.sve

cn.md.poc.sve

18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6

Permissions

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_APN_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.UPDATE_DEVICE_STATS

android.permission.WAKE_LOCK

android.permission.DEVICE_POWER

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_APN_SETTINGS

android.permission.INTERNET

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.PROCESS_OUTGOING_CALLS

Sharing

General

Malware Config

Signatures

Files

com.ganny.rosebattery

BatterySettingActivity

Activities

BatterySettingActivity

Permissions

Receivers

ScreenRecever

Provider

BootBrocastReceiver

net.plug.loader.imp.MessageReceiver

net.plug.loader.imp.ReportReceiver

net.plug.loader.imp.MyRecver

cn.md.poc.fdk

cn.md.poc.dsc

Services

net.plug.loader.imp.BSTask

cn.md.poc.sve

Android Permissions

18b36e2d53d73ba2f53be1acdbe76abe10cc4baf92745d49f3919a77feabf8e6