General

  • Target

    7cb4f4e6ff9942c8e9dc41a74b674bc2fee9550dae5b39838e01f13e8372fdd5

  • Size

    11.1MB

  • MD5

    96b4bc55811b7c6c68c62c24ccca454a

  • SHA1

    a852e202ed81364ee85283861251ece6c54bc4e4

  • SHA256

    7cb4f4e6ff9942c8e9dc41a74b674bc2fee9550dae5b39838e01f13e8372fdd5

  • SHA512

    d0c0b16c8e0dc056e4d4b26eabdbd467e4d02f8b8c04aab19b52bd263411ba4d668bc62f46a876adcd5577b5698d7896c15ce6dc484f5e3a654b211e51b10d14

  • SSDEEP

    196608:93wr6pybjQ3cjKbcr/nQX6BGFA5cTONeo5VWjHjopLdvQKJURqA+OUTpwWA1yUVs:drpYjQ3cjhjlfNj5V0MpLdIKGqnHt5as

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 15 IoCs

Files

  • 7cb4f4e6ff9942c8e9dc41a74b674bc2fee9550dae5b39838e01f13e8372fdd5
    .apk .ps1 android arch:arm arch:x86 polyglot

    com.nd.android.pandahome2

    com.nd.hilauncherdev.launcher.Launcher


  • com.nd.android.anyshare_V_2_M_e18eefc45830edfa67569877fad5b7a8.jar
    .apk android arch:arm arch:x86

    com.nd.android.anyshare

    com.nd.quick.activity.AnyshareMainActivity


  • com.nd.android.widget.pandahome.flashlight
    .apk android

    com.nd.android.widget.pandahome.flashlight

    com.nd.android.widget.pandahome.flashlight.uninstallfeedback.MainActivity


  • com.nd.hilauncherdev.compaign_V_1_M_987065f5cfdaa959f429888fe6205fbe.jar
    .apk android

    com.nd.hilauncherdev.compaign

    com.nd.hilauncherdev.menu.personal.icompaign.CompaignPluginActivity


  • com.nd.hilauncherdev.myphone.appmanager_V_4_M_b17dd6e9799c24f5ba8dfa1982ce6571.jar
    .apk android

    com.nd.hilauncherdev.myphone.appmanager

    com.nd.hilauncherdev.myphone.appmanager.AppManagerMainActivity


  • nd.jar
    .apk android
  • com.nd.hilauncherdev.myphone.myfile_V_4_M_c17815ea8b4af90a336e5f5f0d7af2f3.jar
    .apk android

    com.nd.hilauncherdev.myphone.myfile

    com.nd.hilauncherdev.myphone.myfile.MyFileActivity


  • com.nd.hilauncherdev.myphone.safecenter_V_4_M_21f605e26a293afc7c384dcc11f4b895.jar
    .apk android

    com.nd.hilauncherdev.myphone.safecenter

    com.nd.hilauncherdev.safecenter.SafeCenterActivity


  • nd.jar
    .apk android
  • com.nd.shortcut.shortcutslot
    .apk android arch:arm

    com.nd.shortcut.shortcutslot

    com.nd.shortcut.shortcutslot.ShortCutSlotPanelMainActivity


  • nd.jar
    .apk android

Android Permissions

7cb4f4e6ff9942c8e9dc41a74b674bc2fee9550dae5b39838e01f13e8372fdd5

Permissions

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.BIND_APPWIDGET

com.nd.android.pandahome2.permission.READ_SETTINGS

com.nd.android.pandahome2.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

com.android.ContactWidget.permission.READ_SETTINGS

com.android.ContactWidget.permission.WRITE_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS