8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a

General

Target

8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a
Size

14.3MB
MD5

56796e6d43a6e7ae348a039f213bf82e
SHA1

9cb0dabdaa6219971e29939da3d64df9b1c4c97b
SHA256

8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a
SHA512

7d5d85f76b722a9486c9358959f1ab9ad25e92fe6ecaeb5884ec6c664d6da216a4b3a0b260a4979f9f5277e197773be8486b1710122a40d659b227be0c528e93
SSDEEP

393216:yj6UnnDjrgwWPD9QGxKE+ScADxQeeNJsZ2rkqw1F0Z0f:yGEnDgwWPBQwKExRDxQeeIpFoE

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS

Files

8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a
.apk android arch:arm arch:x86

com.korrisoft.ringtone.maker

com.korrisoft.ringtone.maker.view.SplashActivity

Activities

com.korrisoft.ringtone.maker.view.SplashActivity

android.intent.action.MAIN

Permissions

android.permission.WAKE_LOCK
com.android.vending.BILLING
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_COARSE_LOCATION
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ANSWER_PHONE_CALLS
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.BATTERY_STATS
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.tenjin.android.TenjinReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.korrisoft.ringtone.maker.receiver.UpgradeReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.korrisoft.ringtone.maker.receiver.FirebaseEventBroadcastReceiver

custom_firebase_event

com.calldorado.android.actionreceiver.ActionReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.calldorado.android.intent.SEND_RATING_REQ
com.calldorado.android.intent.SEARCH
com.calldorado.android.intent.CDOID
WHITELABEL_ID
com.calldorado.android.intent.INITSDK
com.calldorado.android.intent.COMM_END
com.calldorado.android.intent.WIC_POSITION
com.calldorado.android.intent.MAKE_CALL
android.intent.action.BOOT_COMPLETED
com.calldorado.android.intent.TRIGGER_SEND
com.calldorado.android.intent.PACEMAKER
PACEMAKER
android.intent.action.ACTION_POWER_CONNECTED
com.calldorado.android.intent.DYNAMIC_RE_ENGAGEMENT
com.calldorado.android.intent.PRIORITY
com.calldorado.android.intent.HEARTBEAT
com.calldorado.android.intent.SET_CUSTOM_ICON
com.calldorado.android.intent.CONTACT_MANUAL
com.calldorado.android.intent.TARGETING
com.calldorado.android.intent.SPAM_REQUEST
com.calldorado.android.intent.SCRAPPING_COMM_END
com.calldorado.android.intent.THROTTLE
com.calldorado.android.intent.DATA_CLEARED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_REPLACED

com.calldorado.android.actionreceiver.chain.OreoReplacedReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.calldorado.analytics.WifiReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.qualityinfo.InsightReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.mobknowsdk.receivers.BService

android.intent.action.BOOT_COMPLETED

com.mobknowsdk.receivers.MInstallReceiver

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED

com.calldorado.android.actionreceiver.ReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.cuebiq.cuebiqsdk.receiver.CoverageReceiver

android.location.PROVIDERS_CHANGED
android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.calldorado.android.CalldoradoJobSchedulerService

com.firebase.jobdispatcher.ACTION_EXECUTE

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a

Permissions

android.permission.WAKE_LOCK

com.android.vending.BILLING

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ANSWER_PHONE_CALLS

android.permission.ACCESS_NOTIFICATION_POLICY

android.permission.BATTERY_STATS

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.korrisoft.ringtone.maker

com.korrisoft.ringtone.maker.view.SplashActivity

Activities

com.korrisoft.ringtone.maker.view.SplashActivity

Permissions

Receivers

com.tenjin.android.TenjinReferrerReceiver

com.korrisoft.ringtone.maker.receiver.UpgradeReceiver

com.korrisoft.ringtone.maker.receiver.FirebaseEventBroadcastReceiver

com.calldorado.android.actionreceiver.ActionReceiver

com.calldorado.android.actionreceiver.chain.OreoReplacedReceiver

com.calldorado.analytics.WifiReceiver

com.qualityinfo.InsightReceiver

com.mobknowsdk.receivers.BService

com.mobknowsdk.receivers.MInstallReceiver

com.calldorado.android.actionreceiver.ReferrerReceiver

com.cuebiq.cuebiqsdk.receiver.CoverageReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.calldorado.android.CalldoradoJobSchedulerService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

8c3dceac728bf3d502467da4e982198c0fdddaddcc43f984cd18c292217dc77a