0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6

Sharing

Copy URL Twitter E-mail

General

Target

0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6
Size

13.1MB
MD5

7f69b7b467ef55bf2d19eb57677fe24d
SHA1

7dbf1b3ca0f7d2eceef1d1c4c6726e602f51b8ad
SHA256

0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6
SHA512

9efd0f1a7d12ac9957739874fdf0db2959ee5f677da00f35e0f58ff7946f687a4661f6a44a53f47ba59b6b9739e91bda44f5708146647f7ed36ab0c62d24ca70
SSDEEP

393216:Ipfw9WAZbXO3XDsGm0p9VSU88e+fUtF7vJX:j9tbXO3AGT9sU88e+c5vJX

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by input method services to bind with the system. Allows apps to provide custom input methods (keyboards).	android.permission.BIND_INPUT_METHOD
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6
.apk android arch:arm arch:mips arch:x86

com.sand.airdroid

com.sand.airdroid.ui.splash.SplashActivity_

Activities

com.sand.airdroid.ui.splash.SplashActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.main.MainActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.device.MobileInfoActivity

android.intent.action.MAIN

com.sand.airdroid.ui.tools.app.AppManagerActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.file.category.FileCategoryActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.file.category.FileCategoryContentActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.file.FileManagerActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.Process.ProcessManagerActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.tools.upload.UploadListActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.hotspot.HotspotStartActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.hotspot.HotspotConfigActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.hotspot.HotspotShowActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.settings.notification.NotificationAppActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.settings.clearpassword.ClearPasswordActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.debug.states.ServerStateListActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.debug.retry.HttpRetryRecordListActivity_

android.intent.action.MAIN

com.sand.airdroid.ui.transfer.forward.TransferForwardActivity_

android.intent.action.SEND_MULTIPLE
android.intent.action.SEND

com.sand.airdroid.vnc.SettingsActivity

android.intent.action.MAIN

com.sand.airdroid.components.kitkatsms.SmsKitKatActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.SET_WALLPAPER
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.BATTERY_STATS
android.permission.DISABLE_KEYGUARD
android.permission.CALL_PHONE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.PROCESS_OUTGOING_CALLS
com.sand.airdroid.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.sand.airdroid.receivers.ConnectivityChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

com.sand.airdroid.receivers.CampaignsReceiver

com.android.vending.INSTALL_REFERRER

com.sand.airdroid.receivers.PartnerReceiver

com.sand.airdroid.action.partner.push_msg_arrive

com.sand.airdroid.components.fmp.MyDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.sand.airdroid.components.apk.AppPackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.sand.airdroid.ui.widget.ConnectionWidget

android.appwidget.action.APPWIDGET_UPDATE
android.net.conn.CONNECTIVITY_CHANGE
com.sand.airdroid.action.widget.update
com.sand.airdroid.action.widget.click

com.sand.airdroid.SmsSendedorReceivedReceiver

com.sand.airdroid.action.sms.message_sended

com.sand.airdroid.components.gcm.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.sand.airdroid.servers.push.PushNetworkConnectionReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

com.sand.airdroid.components.kitkatsms.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.sand.airdroid.components.kitkatsms.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.sand.airdroid.services.KeyManageService

com.sand.airdroid.action.create_key_pair
com.sand.airdroid.action.update_public_key

com.sand.airdroid.services.OtherTaskService

com.sand.airdroid.action.check_addon_update
com.sand.airdroid.action.check_update
com.sand.airdroid.action.local_ip_report
com.sand.airdroid.action.location_report
com.sand.airdroid.action.location_update_start
com.sand.airdroid.action.location_update_stop
com.sand.airdroid.action.refresh_user_info
com.sand.airdroid.action.push_forward_url_resign
com.sand.airdroid.action.update_app_version
com.sand.airdroid.action.flow_sync
com.sand.airdroid.action.upload_thief_info
com.sand.airdroid.action.update_app_config
com.sand.airdroid.action.download_device_photo
com.sand.airdroid.action.download_tools_advertisement
com.sand.airdroid.action.download_recommends_advertisement
com.sand.airdroid.action.get_offline_push_msg
com.sand.airdroid.action.regist_login_state
com.sand.airdroid.action.all_event_stat
com.sand.airdroid.action.send_bind_mail
com.sand.airdroid.action.get_push_url_without_account

com.sand.airdroid.vnc.RemoteInputMethodService

android.view.InputMethod

com.sand.airdroid.services.DataCollectionService

com.sand.airdroid.action.stat.push_msg_arrive
com.sand.airdroid.action.stat.update_device_status
com.sand.airdroid.action.stat.login_info
com.sand.airdroid.action.stat.campaign
com.sand.airdroid.action.stat.advertisement
com.sand.airdroid.action.stat.othercollect
com.sand.airdroid.action.stat.sdcardwriteissue
com.sand.airdroid.action.stat.upload
com.sand.airdroid.action.stat.download
com.sand.airdroid.action.cga_event_statistics

com.sand.airdroid.services.HttpRetryService

com.sand.airdroid.action.http_retry.alarm_up
com.sand.airdroid.action.http_retry.check
com.sand.airdroid.action.http_retry.start_thread

com.sand.airdroid.services.AirDroidService

com.sand.airdroid.action.servers.start_all
com.sand.airdroid.action.servers.stop_all
com.sand.airdroid.action.scan_result
com.sand.airdroid.action.disconnect
com.sand.airdroid.action.check_services
com.sand.airdroid.action.check_forward_service
com.sand.airdroid.action.network_check

com.sand.airdroid.services.AmazonS3UploadService

com.sand.airdroid.action.amazons3.upload

com.sand.airdroid.services.ScreenRecordService

com.sand.airdroid.action.screen_record.start
com.sand.airdroid.action.screen_record.stop
com.sand.airdroid.action.screen_record.play

com.sand.airdroid.services.PushMessageHandleService

com.sand.airdroid.action.push.msg_received
com.sand.airdroid.action.publish_to_msgcenter
com.sand.airdroid.action.get_offline_gopush_msg

com.sand.airdroid.services.GCMRegistrationService

com.sand.airdroid.action.gcm_registration

com.sand.airdroid.services.RootAppManageService

com.sand.airdroid.action.app_manage_task_exec

com.sand.airdroid.servers.push.PushService

com.sand.airdroid.action.push.config
com.sand.airdroid.action.push.config.gopush
com.sand.airdroid.action.push.config.network
com.sand.airdroid.action.push.check
com.sand.airdroid.action.push.send_response
com.sand.airdroid.action.push.connect
com.sand.airdroid.action.push.disconnect
com.sand.airdroid.action.push.reconnect
com.sand.airdroid.action.push.ping

com.sand.airdroid.services.NotificationService

android.service.notification.NotificationListenerService

com.sand.airdroid.services.NotificationAccessibilityService

android.accessibilityservice.AccessibilityService

com.sand.airdroid.services.TransferReceiveService

com.sand.airdroid.action.transfer.receive.start
com.sand.airdroid.action.transfer.receive.stop
com.sand.airdroid.action.transfer.receive.download

com.sand.airdroid.services.TransferSendService

com.sand.airdroid.action.transfer.send.start
com.sand.airdroid.action.transfer.send.stop
com.sand.airdroid.action.transfer.check.thread

com.sand.airdroid.services.TransferMsgSendService

com.sand.airdroid.action.transfer.send.msg.start

com.sand.airdroid.services.OfflineFileService

com.sand.airdroid.action.transfer.receive.offline.get
com.sand.airdroid.action.transfer.receive.offline.arrive

com.sand.airdroid.components.kitkatsms.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.SET_WALLPAPER

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.BATTERY_STATS

android.permission.DISABLE_KEYGUARD

android.permission.CALL_PHONE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.PROCESS_OUTGOING_CALLS

com.sand.airdroid.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

com.sand.airdroid

com.sand.airdroid.ui.splash.SplashActivity_

Activities

com.sand.airdroid.ui.splash.SplashActivity_

com.sand.airdroid.ui.main.MainActivity_

com.sand.airdroid.ui.tools.device.MobileInfoActivity

com.sand.airdroid.ui.tools.app.AppManagerActivity_

com.sand.airdroid.ui.tools.file.category.FileCategoryActivity_

com.sand.airdroid.ui.tools.file.category.FileCategoryContentActivity_

com.sand.airdroid.ui.tools.file.FileManagerActivity_

com.sand.airdroid.ui.tools.Process.ProcessManagerActivity_

com.sand.airdroid.ui.tools.upload.UploadListActivity_

com.sand.airdroid.ui.hotspot.HotspotStartActivity_

com.sand.airdroid.ui.hotspot.HotspotConfigActivity_

com.sand.airdroid.ui.hotspot.HotspotShowActivity_

com.sand.airdroid.ui.settings.notification.NotificationAppActivity_

com.sand.airdroid.ui.settings.clearpassword.ClearPasswordActivity_

com.sand.airdroid.ui.debug.states.ServerStateListActivity_

com.sand.airdroid.ui.debug.retry.HttpRetryRecordListActivity_

com.sand.airdroid.ui.transfer.forward.TransferForwardActivity_

com.sand.airdroid.vnc.SettingsActivity

com.sand.airdroid.components.kitkatsms.SmsKitKatActivity

Permissions

Receivers

com.sand.airdroid.receivers.ConnectivityChangeReceiver

com.appsflyer.MultipleInstallBroadcastReceiver

com.sand.airdroid.receivers.CampaignsReceiver

com.sand.airdroid.receivers.PartnerReceiver

com.sand.airdroid.components.fmp.MyDeviceAdminReceiver

com.sand.airdroid.components.apk.AppPackageReceiver

com.sand.airdroid.ui.widget.ConnectionWidget

com.sand.airdroid.SmsSendedorReceivedReceiver

com.sand.airdroid.components.gcm.GcmBroadcastReceiver

com.sand.airdroid.servers.push.PushNetworkConnectionReceiver

com.sand.airdroid.components.kitkatsms.SmsReceiver

com.sand.airdroid.components.kitkatsms.MmsReceiver

Services

com.sand.airdroid.services.KeyManageService

com.sand.airdroid.services.OtherTaskService

com.sand.airdroid.vnc.RemoteInputMethodService

com.sand.airdroid.services.DataCollectionService

com.sand.airdroid.services.HttpRetryService

com.sand.airdroid.services.AirDroidService

com.sand.airdroid.services.AmazonS3UploadService

com.sand.airdroid.services.ScreenRecordService

com.sand.airdroid.services.PushMessageHandleService

com.sand.airdroid.services.GCMRegistrationService

com.sand.airdroid.services.RootAppManageService

com.sand.airdroid.servers.push.PushService

com.sand.airdroid.services.NotificationService

com.sand.airdroid.services.NotificationAccessibilityService

com.sand.airdroid.services.TransferReceiveService

com.sand.airdroid.services.TransferSendService

com.sand.airdroid.services.TransferMsgSendService

com.sand.airdroid.services.OfflineFileService

com.sand.airdroid.components.kitkatsms.HeadlessSmsSendService

Android Permissions

0b0325395fbe22c0b5b9410644993422f6f6c3df7ea3029d9bb22e743abb79b6