19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f

General

Target

19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f
Size

9.3MB
MD5

8ddc555584e94f43fc7fce1f91b1741c
SHA1

0e96dd4af46a6762cf02467b38e949bdb2283e35
SHA256

19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f
SHA512

0ac6130d7de593f2b896e212c2c1ac2c5a3eb54978b753c6070f195dc9143b2cbab84dcac4a0d234138a2851d3522fdff861cb5344d632cf2a619d02122673ec
SSDEEP

196608:aWrEA026DmEZab8/TIoqTghswApmUlq8luL5SiELm:Rrd6DmEAA/TI7TghmVM8Q51Z

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG

Files

19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f
.apk android

com.nikanorov.callnotespro

com.nikanorov.callnotespro.MainActivity

Activities

com.nikanorov.callnotespro.MainActivity

android.intent.action.MAIN
com.nikanorov.callnotes.intent.action.SEND_LOG

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_CONTACTS
android.permission.INTERNET
android.permission.WRITE_CONTACTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.READ_CALL_LOG
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
com.sony.mobile.permission.SYSTEM_UI_VISIBILITY_EXTENSION
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE
com.nikanorov.callnotespro.permission.C2D_MESSAGE

Receivers

com.nikanorov.callnotespro.AutoStartUp

android.intent.action.BOOT_COMPLETED

com.nikanorov.callnotespro.IBR

android.intent.action.PHONE_STATE

com.nikanorov.callnotespro.OBR

android.intent.action.NEW_OUTGOING_CALL

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f

Permissions

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.WRITE_CONTACTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.READ_CALL_LOG

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

com.sony.mobile.permission.SYSTEM_UI_VISIBILITY_EXTENSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

com.nikanorov.callnotespro.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.nikanorov.callnotespro

com.nikanorov.callnotespro.MainActivity

Activities

com.nikanorov.callnotespro.MainActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.nikanorov.callnotespro.AutoStartUp

com.nikanorov.callnotespro.IBR

com.nikanorov.callnotespro.OBR

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

19f6dffc92761057126711715c1a4827f9304941f6376d10717ccab5d704046f