gear-fit-manager-for-all[.]apk

General

Target

gear-fit-manager-for-all.apk
Size

18.5MB
MD5

9d9834edaa247b66e6f5b0471b6876e4
SHA1

7d11ba3383038c915816c09e63bdd52b0a860327
SHA256

922c63b0673e4929698926187b49f3aa65d7315f1980c6bd8fc4010cf64f4bbd
SHA512

518d8ddb68dad892ee86e6ac323fe71f89a209db7d17984bba76f94826369b8705eb8161c21c260df1026fa13cc3e4a0fe57f96f4eeff220fabd68942c75fe4f
SSDEEP

393216:3ZbfWkjoMn6RzNwrBvTbvi9slUNCVdcX8:JfdoMn6RRAvTW9seoVd48

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write (but not read) the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

Files

gear-fit-manager-for-all.apk
.apk android arch:arm

com.samsung.android.wms

com.samsung.android.wms.app.base.ContentsActivity

Activities

com.samsung.android.wms.app.base.ContentsActivity

android.intent.action.MAIN

com.samsung.android.wms.app.StartActivity

com.samsung.android.wms.PERMISSION_ACTION

Permissions

com.samsung.android.gearfit.STYLE_CLOCK
com.samsung.android.gearfit.STYLE_CLOCK_SETTING
com.sec.android.service.connectionmanager.permission.CONNECTION_MANAGER
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH
sec.android.permission.READ_MSG_PREF
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
com.sec.android.phone.permission.TRANSPORTING_CALLER_NAME
com.sec.android.provider.logsprovider.permission.READ_LOGS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.INTERACT_ACROSS_USERS
android.permission.MODIFY_PHONE_STATE
android.permission.CALL_PHONE
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.samsung.accessory.permission.TRANSPORTING_NOTIFICATION_ITEM
com.android.email.permission.ACCESS_PROVIDER
com.system.permission.READ_NOTIFICATIONS
com.sec.android.daemonapp.ap.accuweather.ACCUWEATHER_DAEMON_ACCESS_PROVIDER
com.sec.android.daemonapp.cmaweather.CMAWEATHER_DAEMON_ACCESS_PROVIDER
com.sec.android.daemonapp.ap.sinaweather.SINAWEATHER_DAEMON_ACCESS_PROVIDER
com.sec.android.daemonapp.ap.weathernewsjp.WEATHERNEWS_DAEMON_ACCESS_PROVIDER
com.sec.android.daemonapp.ap.kweather.KWEATHER_DAEMON_ACCESS_PROVIDER
com.sec.android.app.clockpackage.permission.READ_ALARM
com.sec.android.app.clockpackage.permission.WRITE_ALARM
com.sec.chaton.TOKEN_79999bdb3c006de07776676875c4a8bd0a2ea17dc515aef39cbed612c0c279f98bf30903f17975bf189316de57dee52eba20f4a35f5c1c1f4d629624d6ec621a6e254c8db646fae37f89012a2a83dab3a44fcb4322a9c0e883dec6cf71ba337abdde9bdb9c82533b298263bc503962ed4532d6f78d428d372210fb2ce8bd9db5
android.permission.SEND_SMS_NO_CONFIRMATION
android.permission.SEND_RESPOND_VIA_MESSAGE
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.GET_ACCOUNTS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.INTERNET
com.sec.android.service.health.permission.SENSOR
android.permission.MANAGE_USERS
com.sec.android.permission.SMART_UNLOCK
android.permission.RECEIVE_BOOT_COMPLETED
com.sec.android.app.safetyassurance.permission.PRIVATE
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD
com.system.permission.READ_NOTIFICATIONS
android.permission.INSTALL_PACKAGES
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.STOP_APP_SWITCHES

Receivers

com.samsung.android.wms.preference.BondStateChangeReceiver

android.bluetooth.device.action.BOND_STATE_CHANGED

com.samsung.android.wms.service.ConnectionManagerBroadcastReceiver

android.bluetooth.adapter.action.STATE_CHANGED
android.intent.action.BOOT_COMPLETED

com.sec.android.service.connectionmanager.receiver.ConnectionManagerNotifier

com.sec.android.service.connectionmanager.action.CONNECTION_INFO_NOTIFY

com.samsung.android.wms.service.MediaInfoReceiver

com.sec.android.music.musicservicecommnad.mediainfo
com.android.music.settingchanged
com.android.music.playstatechanged
com.android.music.metachanged
com.sec.android.videoplayer.playerstatus
com.sec.android.videoplayer.metachanged
android.intent.action.CONTEXT_AWARE_MUSIC_INFO

com.samsung.android.wms.service.SPlannerReceiver

com.sec.android.intent.CHANGE_SHARE

Services

com.samsung.android.wms.service.WingtipManagerService

com.sec.android.wcs.service.WingtipManagerService

com.samsung.android.wms.service.communication.SessionManager

com.sec.android.wcs.service.session_manager_sensor
com.sec.android.wcs.service.session_manager_installer

com.samsung.android.wms.service.connectionmanager.ConnectionManager

com.samsung.android.wms.service.connectionmanager.ConnectionManager.START_SERVICE
com.samsung.android.wms.service.connectionmanager.ConnectionManager.STOP_SERVICE
com.samsung.android.wms.service.connectionmanager.ConnectionManager.SUBSCRIBE_SERVICE

com.samsung.android.wms.service.notification.NS.WingtipNotificationListenerService

android.service.notification.NotificationListenerService

com.samsung.android.sdk.cup.ScupService

com.samsung.android.sdk.cup.ScupService

Android Permissions

gear-fit-manager-for-all.apk

Permissions

com.samsung.android.gearfit.STYLE_CLOCK

com.samsung.android.gearfit.STYLE_CLOCK_SETTING

com.sec.android.service.connectionmanager.permission.CONNECTION_MANAGER

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

sec.android.permission.READ_MSG_PREF

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

com.sec.android.phone.permission.TRANSPORTING_CALLER_NAME

com.sec.android.provider.logsprovider.permission.READ_LOGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.INTERACT_ACROSS_USERS

android.permission.MODIFY_PHONE_STATE

android.permission.CALL_PHONE

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.samsung.accessory.permission.TRANSPORTING_NOTIFICATION_ITEM

com.android.email.permission.ACCESS_PROVIDER

com.system.permission.READ_NOTIFICATIONS

com.sec.android.daemonapp.ap.accuweather.ACCUWEATHER_DAEMON_ACCESS_PROVIDER

com.sec.android.daemonapp.cmaweather.CMAWEATHER_DAEMON_ACCESS_PROVIDER

com.sec.android.daemonapp.ap.sinaweather.SINAWEATHER_DAEMON_ACCESS_PROVIDER

com.sec.android.daemonapp.ap.weathernewsjp.WEATHERNEWS_DAEMON_ACCESS_PROVIDER

com.sec.android.daemonapp.ap.kweather.KWEATHER_DAEMON_ACCESS_PROVIDER

com.sec.android.app.clockpackage.permission.READ_ALARM

com.sec.android.app.clockpackage.permission.WRITE_ALARM

com.sec.chaton.TOKEN_79999bdb3c006de07776676875c4a8bd0a2ea17dc515aef39cbed612c0c279f98bf30903f17975bf189316de57dee52eba20f4a35f5c1c1f4d629624d6ec621a6e254c8db646fae37f89012a2a83dab3a44fcb4322a9c0e883dec6cf71ba337abdde9bdb9c82533b298263bc503962ed4532d6f78d428d372210fb2ce8bd9db5

android.permission.SEND_SMS_NO_CONFIRMATION

android.permission.SEND_RESPOND_VIA_MESSAGE

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.GET_ACCOUNTS

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.INTERNET

com.sec.android.service.health.permission.SENSOR

android.permission.MANAGE_USERS

com.sec.android.permission.SMART_UNLOCK

android.permission.RECEIVE_BOOT_COMPLETED

com.sec.android.app.safetyassurance.permission.PRIVATE

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

com.samsung.android.wms

com.samsung.android.wms.app.base.ContentsActivity

Activities

com.samsung.android.wms.app.base.ContentsActivity

com.samsung.android.wms.app.StartActivity

Permissions

Receivers

com.samsung.android.wms.preference.BondStateChangeReceiver

com.samsung.android.wms.service.ConnectionManagerBroadcastReceiver

com.sec.android.service.connectionmanager.receiver.ConnectionManagerNotifier

com.samsung.android.wms.service.MediaInfoReceiver

com.samsung.android.wms.service.SPlannerReceiver

Services

com.samsung.android.wms.service.WingtipManagerService

com.samsung.android.wms.service.communication.SessionManager

com.samsung.android.wms.service.connectionmanager.ConnectionManager

com.samsung.android.wms.service.notification.NS.WingtipNotificationListenerService

com.samsung.android.sdk.cup.ScupService

Android Permissions

gear-fit-manager-for-all.apk