957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11

Sharing

Copy URL Twitter E-mail

General

Target

957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11
Size

7.0MB
MD5

c0b7e0fe78691180af5fc9e56ab68a30
SHA1

a4b8b46c0b1dba1e486d858e093cd6acdf6525e2
SHA256

957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11
SHA512

b74b0ecedc6dbacdca4e344b85227751bb54ddd1a1bc51caa5cd2a532101cf4ac15f233d4768aeda5393e4917d0867f72be2461881179246711b5320272d463b
SSDEEP

196608:OHha522MYdZxMfLrNp415a3lCGg153w6+:OBa52IPez5m15Y65W

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by chooser target services to bind with the system. Allows apps to modify targets that handle user actions.	android.permission.BIND_CHOOSER_TARGET_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR

Files

957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11
.apk android

org.kman.AquaMail

org.kman.AquaMail.ui.AccountListActivity

Activities

org.kman.AquaMail.ui.AccountListActivity

android.intent.action.MAIN
android.intent.action.VIEW

org.kman.AquaMail.ui.NewMessageActivity

android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

org.kman.AquaMail.prefs.PrefsActivity$SystemSettings

android.intent.action.APPLICATION_PREFERENCES

org.kman.AquaMail.core.MessageStatsManager$ActionConfirmActivity

org.kman.AquaMail.MESSAGE_SB_ACTION_DELETE
org.kman.AquaMail.MESSAGE_SB_ACTION_MARK_READ
org.kman.AquaMail.MESSAGE_SB_ACTION_MOVE_SPAM
org.kman.AquaMail.MESSAGE_SB_ACTION_MOVE_ARCHIVE
org.kman.AquaMail.MESSAGE_ACTION_CANCEL

org.kman.AquaMail.widget.WidgetConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

org.kman.AquaMail.widget.TextToSpeechConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

org.kman.AquaMail.widget.ListWidgetConfigActivity

android.appwidget.action.APPWIDGET_CONFIGURE

org.kman.AquaMail.locale.SettingsEditActivity

com.twofortyfouram.locale.intent.action.EDIT_SETTING

org.kman.AquaMail.locale.EventEditActivity

net.dinglisch.android.tasker.ACTION_EDIT_EVENT

org.kman.AquaMail.mail.oauth.GmailOAuthFlow$ResultActivity

android.intent.action.VIEW

Permissions

com.google.android.c2dm.permission.RECEIVE
com.android.vending.BILLING
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.READ_SYNC_STATS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_PROFILE
com.anddoes.launcher.permission.UPDATE_COUNT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.sec.android.provider.badge.permission.READ
com.google.android.gallery3d.permission.GALLERY_PROVIDER
org.kman.AquaMail.permission.C2D_MESSAGE

Receivers

org.kman.AquaMail.mail.ews.push.EwsPushReceiver$Connectivity

android.net.conn.CONNECTIVITY_CHANGE
org.kman.AquaMail.mail.ews.ACTION_CONNECTIVITY
org.kman.AquaMail.mail.ews.ACTION_RETRY_ERRORS

org.kman.AquaMail.mail.ews.push.EwsPushReceiver$Other

android.net.conn.BACKGROUND_DATA_SETTING_CHANGED
com.android.sync.SYNC_CONN_STATUS_CHANGED
org.kman.AquaMail.mail.ews.ACTION_NO_SYNC_NO_PUSH_CHANGE

org.kman.AquaMail.config.ConfigManager_Market$ConfigReceiver

android.intent.action.BOOT_COMPLETED

org.kman.AquaMail.promo.PromoManager_Market$PromoReceiver

android.intent.action.BOOT_COMPLETED
org.kman.AquaMail.promo.Day
org.kman.AquaMail.promo.Regular

org.kman.AquaMail.datax.ExportedMessageActionsReceiver

org.kman.AquaMail.datax.MESSAGE_ACTION_DELETE
org.kman.AquaMail.datax.MESSAGE_ACTION_MARK_READ
org.kman.AquaMail.datax.MESSAGE_ACTION_MOVE_SPAM
org.kman.AquaMail.datax.MESSAGE_ACTION_MOVE_ARCHIVE

org.kman.AquaMail.datax.ExportedAccountActionsReceiver

org.kman.AquaMail.datax.ACCOUNT_ACTION_SYNC

org.kman.AquaMail.core.BootReceiver

android.intent.action.BOOT_COMPLETED

org.kman.AquaMail.core.StartSyncReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
org.kman.AquaMail.ACTION_START_SYNC

org.kman.AquaMail.core.PushConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.conn.BACKGROUND_DATA_SETTING_CHANGED
com.android.sync.SYNC_CONN_STATUS_CHANGED
org.kman.AquaMail.ACTION_CONNECTIVITY
org.kman.AquaMail.ACTION_RETRY_ERRORS
org.kman.AquaMail.ACTION_TIME_LIMIT
org.kman.AquaMail.ACTION_NO_SYNC_NO_PUSH_CHANGE

org.kman.AquaMail.core.KeepAliveReceiver

org.kman.AquaMail.ACTION_KEEP_ALIVE

org.kman.AquaMail.core.KickSyncReceiver

com.android.sync.SYNC_CONN_STATUS_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
org.kman.AquaMail.KICK_SYNC

org.kman.AquaMail.core.MessageStatsManager$ActionReceiver

org.kman.AquaMail.MESSAGE_SB_ACTION_DELETE
org.kman.AquaMail.MESSAGE_SB_ACTION_MARK_READ
org.kman.AquaMail.MESSAGE_SB_ACTION_MOVE_SPAM
org.kman.AquaMail.MESSAGE_SB_ACTION_MOVE_ARCHIVE
org.kman.AquaMail.MESSAGE_SB_ACTION_REPLY
org.kman.AquaMail.MESSAGE_AW_ACTION_DELETE
org.kman.AquaMail.MESSAGE_AW_ACTION_MARK_READ
org.kman.AquaMail.MESSAGE_AW_ACTION_MOVE_SPAM
org.kman.AquaMail.MESSAGE_AW_ACTION_MOVE_ARCHIVE
org.kman.AquaMail.MESSAGE_AW_ACTION_REPLY
org.kman.AquaMail.MESSAGE_ACTION_CANCEL

org.kman.AquaMail.core.MessageStatsManager$CancelReceiver

org.kman.AquaMail.NOTIFICATION_CANCEL_ACTION

org.kman.AquaMail.widget.Widget

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_UPDATE_OPTIONS
org.kman.AquaMail.REFRESH

org.kman.AquaMail.widget.TextToSpeechWidget

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_UPDATE_OPTIONS
org.kman.AquaMail.TTS_ENABLE

org.kman.AquaMail.widget.ListWidget_hc

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_UPDATE_OPTIONS

org.kman.AquaMail.locale.SettingsFireReceiver

com.twofortyfouram.locale.intent.action.FIRE_SETTING

org.kman.AquaMail.locale.EventQueryReceiver

com.twofortyfouram.locale.intent.action.QUERY_CONDITION

org.kman.AquaMail.apps.ApexLauncher$Receiver

com.anddoes.launcher.UPDATE_COUNTER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

org.kman.AquaMail.mail.ews.push.PushMessagingService

com.google.firebase.MESSAGING_EVENT

org.kman.AquaMail.mail.ews.push.PushInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

org.kman.AquaMail.accounts.AuthenticatorService$Ews

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.AuthenticatorService$Gmail

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.AuthenticatorService$Hotmail

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.AuthenticatorService$Yandex

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.AuthenticatorService$Yahoo

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.AuthenticatorService$Internet

android.accounts.AccountAuthenticator

org.kman.AquaMail.accounts.MailSyncAdapterService$Ews

android.content.SyncAdapter

org.kman.AquaMail.accounts.MailSyncAdapterService$Gmail

android.content.SyncAdapter

org.kman.AquaMail.accounts.MailSyncAdapterService$Hotmail

android.content.SyncAdapter

org.kman.AquaMail.accounts.MailSyncAdapterService$Yandex

android.content.SyncAdapter

org.kman.AquaMail.accounts.MailSyncAdapterService$Yahoo

android.content.SyncAdapter

org.kman.AquaMail.accounts.MailSyncAdapterService$Internet

android.content.SyncAdapter

org.kman.AquaMail.accounts.CalendarSyncAdapterService

android.content.SyncAdapter

org.kman.AquaMail.accounts.ContactsSyncAdapterService

android.content.SyncAdapter

org.kman.AquaMail.apps.DashClock

com.google.android.apps.dashclock.Extension

org.kman.AquaMail.contacts.NewMessageChooserTargetService

android.service.chooser.ChooserTargetService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11

Permissions

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_SYNC_STATS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.READ_PROFILE

com.anddoes.launcher.permission.UPDATE_COUNT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.sec.android.provider.badge.permission.READ

com.google.android.gallery3d.permission.GALLERY_PROVIDER

org.kman.AquaMail.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

org.kman.AquaMail

org.kman.AquaMail.ui.AccountListActivity

Activities

org.kman.AquaMail.ui.AccountListActivity

org.kman.AquaMail.ui.NewMessageActivity

org.kman.AquaMail.prefs.PrefsActivity$SystemSettings

org.kman.AquaMail.core.MessageStatsManager$ActionConfirmActivity

org.kman.AquaMail.widget.WidgetConfigActivity

org.kman.AquaMail.widget.TextToSpeechConfigActivity

org.kman.AquaMail.widget.ListWidgetConfigActivity

org.kman.AquaMail.locale.SettingsEditActivity

org.kman.AquaMail.locale.EventEditActivity

org.kman.AquaMail.mail.oauth.GmailOAuthFlow$ResultActivity

Permissions

Receivers

org.kman.AquaMail.mail.ews.push.EwsPushReceiver$Connectivity

org.kman.AquaMail.mail.ews.push.EwsPushReceiver$Other

org.kman.AquaMail.config.ConfigManager_Market$ConfigReceiver

org.kman.AquaMail.promo.PromoManager_Market$PromoReceiver

org.kman.AquaMail.datax.ExportedMessageActionsReceiver

org.kman.AquaMail.datax.ExportedAccountActionsReceiver

org.kman.AquaMail.core.BootReceiver

org.kman.AquaMail.core.StartSyncReceiver

org.kman.AquaMail.core.PushConnectivityReceiver

org.kman.AquaMail.core.KeepAliveReceiver

org.kman.AquaMail.core.KickSyncReceiver

org.kman.AquaMail.core.MessageStatsManager$ActionReceiver

org.kman.AquaMail.core.MessageStatsManager$CancelReceiver

org.kman.AquaMail.widget.Widget

org.kman.AquaMail.widget.TextToSpeechWidget

org.kman.AquaMail.widget.ListWidget_hc

org.kman.AquaMail.locale.SettingsFireReceiver

org.kman.AquaMail.locale.EventQueryReceiver

org.kman.AquaMail.apps.ApexLauncher$Receiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

org.kman.AquaMail.mail.ews.push.PushMessagingService

org.kman.AquaMail.mail.ews.push.PushInstanceIDService

org.kman.AquaMail.accounts.AuthenticatorService$Ews

org.kman.AquaMail.accounts.AuthenticatorService$Gmail

org.kman.AquaMail.accounts.AuthenticatorService$Hotmail

org.kman.AquaMail.accounts.AuthenticatorService$Yandex

org.kman.AquaMail.accounts.AuthenticatorService$Yahoo

org.kman.AquaMail.accounts.AuthenticatorService$Internet

org.kman.AquaMail.accounts.MailSyncAdapterService$Ews

org.kman.AquaMail.accounts.MailSyncAdapterService$Gmail

org.kman.AquaMail.accounts.MailSyncAdapterService$Hotmail

org.kman.AquaMail.accounts.MailSyncAdapterService$Yandex

org.kman.AquaMail.accounts.MailSyncAdapterService$Yahoo

org.kman.AquaMail.accounts.MailSyncAdapterService$Internet

org.kman.AquaMail.accounts.CalendarSyncAdapterService

org.kman.AquaMail.accounts.ContactsSyncAdapterService

org.kman.AquaMail.apps.DashClock

org.kman.AquaMail.contacts.NewMessageChooserTargetService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

957da4f554c6cbfadfdb94a403c2af1f3318fe72d9c992efd7f1571a3e8aae11