9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7

General

Target

9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7
Size

6.0MB
MD5

099ccd9778f31da92e17a0bd9dd9c4c1
SHA1

052199758600371d7574a715f584ad0385f0320d
SHA256

9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7
SHA512

97cac1dbc85419661dbc15491a04b69c080c1ca6197b6414704cadc58abd982a688793c1267f2ada72c9b0ef718648374d406e9734426f9f434b4246db529c6f
SSDEEP

98304:OqYMMsfC1c5qMqtPEGqgshEncnH5ItU5tL+lh/bQxfBUUySslxdA2h1gIUxcCYRT:OxjsfClM0PxbKfH5ItU5glhj0ZcSIxBN

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7
.apk android arch:arm

net.baimulin.driftbottle

net.baimulin.driftbottle.app.activity.LaunchAct

Activities

net.baimulin.driftbottle.app.activity.LaunchAct

android.intent.action.MAIN

net.baimulin.driftbottle.app.activity.ConversationListAct

android.intent.action.VIEW

net.baimulin.driftbottle.app.activity.ConversationAct

android.intent.action.VIEW

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.intent.action.picturepagerview

io.rong.imkit.activity.FilePreviewActivity

io.rong.imkit.intent.action.openfile

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECORD_AUDIO
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.PROCESS_OUTGOING_CALLS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

net.baimulin.driftbottle.app.module.rongim.RongPushNotificationReceiver

io.rong.push.intent.MESSAGE_ARRIVED
io.rong.push.intent.MI_MESSAGE_ARRIVED
io.rong.push.intent.MESSAGE_CLICKED
io.rong.push.intent.MI_MESSAGE_CLICKED
io.rong.push.intent.THIRD_PARTY_PUSH_STATE

io.rong.push.PushReceiver

io.rong.push.intent.action.HEART_BEAT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

Android Permissions

9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_INSTALL_PACKAGES

Sharing

General

Malware Config

Signatures

Files

net.baimulin.driftbottle

net.baimulin.driftbottle.app.activity.LaunchAct

Activities

net.baimulin.driftbottle.app.activity.LaunchAct

net.baimulin.driftbottle.app.activity.ConversationListAct

net.baimulin.driftbottle.app.activity.ConversationAct

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.activity.FilePreviewActivity

Permissions

Receivers

net.baimulin.driftbottle.app.module.rongim.RongPushNotificationReceiver

io.rong.push.PushReceiver

Services

Android Permissions

9ed0768ad32d5be8b408cb3d95de25d48d4bc9e73eab80aab358f631e2b2c8e7