9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57

General

Target

9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57
Size

26.2MB
MD5

a9d0d2cd6a9ce0fbe5ac6d418d4adfa7
SHA1

7c15d712e545b0aae589a32adb301616266c7dd3
SHA256

9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57
SHA512

fefefb655df21998ee8c65a1bc0aad5cfbbcfa9c703063cca6b740842ea6e21380b028cdffb2fda1f75491a3a238be3ce7b61cad0b9f5519553e3093252b1c37
SSDEEP

393216:5hzPLC2CdBdYtToGU1yMyjtw28nbk+XRq/O5F+KejMtO6ehSqKjO1NkghgJb:XzwdbYtTe1b3DD+KvtFehSggSE

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57
.apk android arch:arm

com.v5.werewolfkill

com.v5.werewolfkill.auth.WolfLoginActivity

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.v5.werewolfkill.auth.WolfLoginActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
com.google.android.c2dm.permission.RECEIVE
android.permission.BROADCAST_STICKY
android.permission.EXPAND_STATUS_BAR
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_TASKS
android.permission.REORDER_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.FLASHLIGHT
android.permission.DISABLE_KEYGUARD
android.permission.GET_ACCOUNTS
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.MEDIA_CONTENT_CONTROL
android.permission.BLUETOOTH
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_EXTERNAL_STORAGE
com.v5.werewolfkill.permission.C2D_MESSAGE

Receivers

me.chatgame.mobilecg.NetReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ANY_DATA_STATE

me.chatgame.mobilecg.UniversalReceiver

android.intent.action.USER_PRESENT
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ANY_DATA_STATE

me.chatgame.mobilecg.RemoteControlReceiver

android.intent.action.MEDIA_BUTTON
android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED
android.bluetooth.headset.profile.action.CONNECTION_STATE_CHANGED

me.chatgame.mobilecg.SdcardMountReceiver

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_REMOVED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_BAD_REMOVAL
android.intent.action.MEDIA_SHARED

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.UPLOAD

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.RECORD_AUDIO

android.permission.CAMERA

com.google.android.c2dm.permission.RECEIVE

android.permission.BROADCAST_STICKY

android.permission.EXPAND_STATUS_BAR

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.FLASHLIGHT

android.permission.DISABLE_KEYGUARD

android.permission.GET_ACCOUNTS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.MEDIA_CONTENT_CONTROL

android.permission.BLUETOOTH

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_EXTERNAL_STORAGE

com.v5.werewolfkill.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.v5.werewolfkill

com.v5.werewolfkill.auth.WolfLoginActivity

Activities

com.tencent.tauth.AuthActivity

com.v5.werewolfkill.auth.WolfLoginActivity

Permissions

Receivers

me.chatgame.mobilecg.NetReceiver

me.chatgame.mobilecg.UniversalReceiver

me.chatgame.mobilecg.RemoteControlReceiver

me.chatgame.mobilecg.SdcardMountReceiver

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

9ad6a4dda473b039c24312368050ff9da83ddd1768cb07805dd12b0121341b57