General

  • Target

    Clean Master - Antivirus, Applock & Cleaner_7.4.6_Apkpure.apk

  • Size

    21.7MB

  • MD5

    09b1e8cfbbfd691c75ca5e5a7b4557fb

  • SHA1

    f23bdfc82483068b69677456b47ca555b00c2213

  • SHA256

    00eb08f33accb0ac4318caf0b30e06115daf98a52dc8b5b9639cfcf0625e63ef

  • SHA512

    1f80dd7a7146468694466671167a3469b6dbd87777f427573a638a45e39be98a611239767143eedccc6dd63970e683719ccf71f71a129164230324d92800c71a

  • SSDEEP

    393216:I5PKYV2Qt7Wiodq6Sx/9RXADLBAPpXRcGb9kHhv7LoStepR/1ykPt5+9FjQxm8W4:SPKLjdqL/3AkYCkHRLoOepRdnPE2lwnO

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • Clean Master - Antivirus, Applock & Cleaner_7.4.6_Apkpure.apk
    .apk android arch:arm64 arch:arm

    com.cleanmaster.mguard

    com.keniu.security.main.MainActivity


  • CMAdSDKcfg_CN
  • CMAdSDKcfg_EN
  • CMS_IconFonts.ttf
  • CMS_PB_IconFonts.ttf
  • PaytoneOne-Regular.ttf
  • WebViewJavascriptBridge.js
    .js
  • action_info_data.json
  • antivirus_clean_privacy.json
  • antivirus_clean_virus.json
  • antivirus_safe_result.json
  • antivirus_scan.json
  • antivirus_sd_scan.json
  • antivirus_update.json
  • antivirus_upload.json
  • antivirus_wifi.json
  • app_info_data.json
  • appcpu_hf_en.db.lzma
  • appmem_hf_en.db.lzma
  • appstorage.db.lzma
  • ats2_wl_en.dat.lzma
  • baidujson.json
  • battery_capacity.properties
  • battery_saver_result_ad.json
    .js
  • black_dns_longIP.txt
  • boost_app_white_list.txt
  • boost_result_ad.json
  • bspatch
    .elf linux arm
  • cc_kctrl.dat
  • cc_kfmt.dat
  • chargebattery1.json
  • chargebattery2.json
  • chargecard1.json
  • chargecard2.json
  • charging.json
  • chuxian.json
  • cleanup_scan_circle.json
  • cleanup_scan_loading_animation.json
  • clearpath_other_5.9.6.db.lzma
  • clearprocess_en_5.10.1.filter
  • clearprocess_en_5.10.1.filter.lzma
  • clockfilter.dat
  • cm-icons-notification.ttf
  • cm_account_regist_phonenumber_countryname
  • cm_antivirus_social_guard.json
  • cm_antivirus_social_guardian_enable.json
  • cm_antivirus_social_guradian_protecting.json
  • cm_antivirus_wifi_guardian_guide.json
  • cm_antivirus_wifi_guardian_user_guide.json
  • cm_font_v4.ttf
  • cm_game_box_boost_animation.json
  • cm_locker_introduce_animation.json
  • cm_msg_enabled.json
  • cm_msg_protect_guide.json
  • cm_msg_security_guide.json
  • cm_safelock_welcome_image_intruder.png
    .png
  • cm_safelock_welcome_image_intruderphone.png
    .png
  • cmnow_weather_font_custom.ttf
  • cmpush_config
  • cn
  • cpu_cooldown_result_ad.json
  • custom_weather_boldface.ttf
  • data.json
  • dmc_config.json
  • domExtract.js
    .js
  • dpt.dat
  • game_box_rocketfly.json
  • gameboost_introduction.json
  • icfun_1.0.3_loading_glasses.json
  • icfun_home_loading.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • img_8.png
    .png
  • img_9.png
    .png
  • img_circle.png
    .png
  • intent_info_data.json
  • item_screen_saver_charge_card21.json
  • item_screen_saver_charge_card22.json
  • jinru.json
  • junk_acc_clean_window_0.png
    .png
  • junk_acc_clean_window_1.png
    .png
  • junk_acc_clean_window_ani.json
  • junkwhite.db.lzma
  • kctrl.dat
  • kfmt.dat
  • launchericon.json
  • melib.dat.lzma
  • miso_bold_font.otf
  • nc_yt_player.css
  • nc_yt_player.html
    .html
  • nc_yt_player.js
    .js
  • pb_homepage_cfg.zip
    .zip
  • pb_homepage_cfg/local/pb_homepage_cfg_default.json
  • phototrim_error.html
    .html
  • pkgcache_hf_en_5.12.3.db.lzma
  • pkgquery_hf_en_5.11.6.db.lzma
  • preinstall4_hf_en.db.lzma
  • problem_detected_result.json
  • process_info_data.json
  • process_tips2.db.lzma
  • pushres
  • rom_info_data.json
  • rp_ctrl.json
  • rules_config.json
  • screensaver4fragment1.json
  • screensaver4fragment2.json
  • se_cloud_hf.db.lzma
  • search_engine
  • search_engine_general.png
    .png
  • search_engine_general_battery.png
    .png
  • search_engine_google.png
    .png
  • search_engine_iswipe
  • search_engine_iswipe_cn
  • search_engine_yandex.png
    .png
  • security_daily_danger.json
  • security_daily_safe.json
  • slide.png
    .png
  • speedtest.xml
  • ss_font_v4.ttf
  • strings2_other.db.lzma
  • swipe_favorite.json
  • swipe_theme_config.json
  • traceroute
    .elf linux arm
  • version.ini
  • wallpaper_with_effect_svg_starrysky.svg
    .xml
  • widget_.xml
    .xml
  • wlmc.bin
  • wrong.json

Android Permissions

Clean Master - Antivirus, Applock & Cleaner_7.4.6_Apkpure.apk

Permissions

android.permission.GET_TASKS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.VIBRATE

android.permission.GET_ACCOUNTS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.EXPAND_STATUS_BAR

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

com.android.alarm.permission.SET_ALARM

android.permission.PACKAGE_USAGE_STATS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.DISABLE_KEYGUARD

android.permission.SET_WALLPAPER

com.android.vending.BILLING

com.google.android.gms.permission.ACTIVITY_RECOGNITION

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.samsung.android.launcher.permission.WRITE_SETTINGS

com.samsung.android.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.lge.launcher3.permission.READ_SETTINGS

com.lge.launcher3.permission.WRITE_SETTINGS