a1edaa17ccfcdb9beff5617c26f386d7

General

Target

a1edaa17ccfcdb9beff5617c26f386d7
Size

1.3MB
MD5

a1edaa17ccfcdb9beff5617c26f386d7
SHA1

583342fda0c7632f2e327eb1942cf4552bd56a80
SHA256

fccbe2eafb41bbb3a6794b4e771d59cd6cce7cd31d95311a3ceb2a8ca503e323
SHA512

9c468e1d9d390b0a973d5048cdd4da01099ca94c9f37534f26946580da6e749838a1ba11bd264f4e5435883bf6d66745924317e4727bd7d2155f8b0994892270
SSDEEP

24576:IAae7j3jffDvqNvYCCVpd+bXEy7cZbmN3kqUoUNN4yaWRx5pfxFhLlG:Ig7j3jXDOgCCV+bXEzZhNNFj5pHh5G

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

a1edaa17ccfcdb9beff5617c26f386d7
.apk android

cn.gw.systemtool.fastuninstall

.FastUninstall

Activities

.FastUninstall

android.intent.action.MAIN

com.kuguo.pushads.PushAdsActivity

com.android.action_PUSHADSACTIVITY

Permissions

android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.ACCESS_COARSE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.READ_CONTACTS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SET_WALLPAPER
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_WAP_PUSH
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.SEND_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_SMS
android.permission.RESTART_PACKAGES
android.permission.CLEAR_APP_CACHE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE

Receivers

cn.gw.systemtool.fastuninstall.BootReceiver

android.intent.action.BOOT_COMPLETED

com.kuguo.pushads.AdsReceiver

android.intent.action.PACKAGE_ADDED
android.net.wifi.WIFI_STATE_CHANGED

com.parand.balesen.Baleon

android.intent.action.BOOT_COMPLETED

com.parand.balesen.Lanten

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

Services

com.airpush.android.PushService

com.airpush.android.PushServiceStart16315

com.parand.balesen.VoateService

android.intent.action.START_SMS_SERVICE
z4root.apk
.apk android arch:arm

com.z4mod.z4root

z4root

Activities

z4root

android.intent.action.MAIN

Permissions

android.permission.WAKE_LOCK
android.permission.INTERNET

Receivers

Android Permissions

a1edaa17ccfcdb9beff5617c26f386d7

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SET_WALLPAPER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.SEND_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SMS

android.permission.RESTART_PACKAGES

android.permission.CLEAR_APP_CACHE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

cn.gw.systemtool.fastuninstall

.FastUninstall

Activities

.FastUninstall

com.kuguo.pushads.PushAdsActivity

Permissions

Receivers

cn.gw.systemtool.fastuninstall.BootReceiver

com.kuguo.pushads.AdsReceiver

com.parand.balesen.Baleon

com.parand.balesen.Lanten

Services

com.airpush.android.PushService

com.parand.balesen.VoateService

com.z4mod.z4root

z4root

Activities

z4root

Permissions

Receivers

Android Permissions

a1edaa17ccfcdb9beff5617c26f386d7