a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354

General

Target

a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354
Size

4.0MB
MD5

12213ea62ac1d5583d24951a92bbc14c
SHA1

ad8092a411b3ddd69c1f2d4ca4c1c1c92b21a9cb
SHA256

a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354
SHA512

2ffcd34b91cafc952b5f2152fd16b3d87b4df506de9ba5dc3a607753b9cde826b7c99e3053b28a614d3ae95ada0a65c08c0895a59530eeaf15040d9031b51dea
SSDEEP

98304:Rkzm3PxyYpS6UtWtEoQbooffyQBLocuty1xB0kW1PfsyZd4:RkzapS6UtWtEoQbooffyQBLxbB0XlZd4

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354
.apk android arch:arm

com.kukool.control.center

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

android.intent.action.MAIN

com.kukool.control.app.AssistActivity

android.intent.action.ASSIST

com.kukool.recommend.RecommendActivity

android.intent.action.MAIN

com.zxing.CaptureActivity

com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.zxing.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND
android.intent.action.SEND

com.zxing.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

com.zxing.share.ShareActivity

com.google.zxing.client.android.SHARE

com.zxing.history.HistoryActivity

android.intent.action.VIEW

com.zxing.share.BookmarkPickerActivity

android.intent.action.PICK

com.zxing.share.AppPickerActivity

android.intent.action.PICK

com.zxing.HelpActivity

android.intent.action.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.REORDER_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
com.sonyericsson.permission.MUSICSERVICE
android.permission.BROADCAST_STICKY
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS

Receivers

com.kukool.control.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.kukool.control.service.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_SCANNER_FINISHED
android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.SIM_STATE_CHANGED

com.kukool.control.service.LockScreenReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.kukool.control.music.SysMediaStateReceiver

com.android.music.playstatechanged
com.android.music.metachanged

Services
rlbg.jar
.apk android

Android Permissions

a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.REORDER_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

com.sonyericsson.permission.MUSICSERVICE

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Signatures

Files

com.kukool.control.center

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

com.kukool.control.app.AssistActivity

com.kukool.recommend.RecommendActivity

com.zxing.CaptureActivity

com.zxing.encode.EncodeActivity

com.zxing.book.SearchBookContentsActivity

com.zxing.share.ShareActivity

com.zxing.history.HistoryActivity

com.zxing.share.BookmarkPickerActivity

com.zxing.share.AppPickerActivity

com.zxing.HelpActivity

Permissions

Receivers

com.kukool.control.AdminReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.kukool.control.service.BootCompletedReceiver

com.kukool.control.service.LockScreenReceiver

com.kukool.control.music.SysMediaStateReceiver

Services

Android Permissions

a71a98b75e36d18846bf76a04379b0118a3c483d1a3c2fcb5a6adee78d73e354