1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56

General

Target

1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56
Size

6.8MB
MD5

d28deec852dccc863a1ac6b8ac10eeeb
SHA1

0d4353725d44dfe43c08e1d1c3783cf26100a9d5
SHA256

1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56
SHA512

e0dac31141c30baf423de7d711007feffdc43cfb895aad29eb39fe0d37b4bbe078d87fdf78ffe8b2542c0734f1b64316e3d486186c098192a51668f10458e52a
SSDEEP

98304:s6D/Nse4LqBQlB0zyp21e4uTkaEihug8zYYC48XAgfzF0QBNnmZsqO:5/4KC1c2PzfYx8XjxBL/

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56
.apk android

bms.main

bms.main.BMSActivity

Activities

bms.main.BMSActivity

android.intent.action.MAIN

com.bkav.bpb.backup.BackUpActivity

android.intent.action.MAIN

com.bkav.bpb.backup.RestoreActivity

android.intent.action.MAIN

com.bkav.bpb.setting.SettingNotify

android.intent.action.MAIN

bms.sms.DefaultComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

bkav.bpb.main.READ_PROVIDER
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.WAKE_LOCK
android.permission.RESTART_PACKAGES
android.permission.READ_PHONE_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.VIBRATE
android.permission.READ_CONTACTS
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_WAP_PUSH
android.permission.RECEIVE_MMS
android.permission.REORDER_TASKS
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.READ_OWNER_DATA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_CONTACTS
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.GET_ACCOUNTS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.CAMERA
com.android.alarm.permission.SET_ALARM
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BIND_ACCESSIBILITY_SERVICE
com.android.vending.BILLING
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
bkav.bpb.main.WRITE_PROVIDER
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.CHANGE_WIFI_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PROFILE
android.permission.READ_LOGS
com.sec.android.provider.logsprovider.permission.READ_LOGS
com.sec.android.provider.logsprovider.permission.WRITE_LOGS
bms.main.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_EXTERNAL_STORAGE

Receivers

bms.antitheft.SimStateReceiver

android.intent.action.SIM_STATE_CHANGED

com.bkav.mobile.bms.gcm.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

bms.main.Boot

android.intent.action.BOOT_COMPLETED

bms.main.Widget

android.appwidget.action.APPWIDGET_UPDATE
bms.main.Widget.ACTION_WIDGET_RECEIVER

bms.sms.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
bkav.btalk.SMS_RECEIVED_ACTION
android.provider.Telephony.WAP_PUSH_RECEIVED

bms.call.CallReceiver

android.intent.action.PHONE_STATE

bms.scan.PackageObserver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.MY_PACKAGE_REPLACED

bms.sms.SendingBroadcastReceiver

SMS_SENT

bms.sms.DeliveryBroadcastReceiver

SMS_DELIVERED

bms.main.ConnectivityReceiver

android.net.conn.CONNECTIVITY_CHANGE

bms.antitheft.BkavDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

bms.sms.DefaultSmsReceiver

android.provider.Telephony.SMS_DELIVER

bms.sms.DefaultMmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

bms.main.NotificationListenner

android.service.notification.NotificationListenerService

bms.main.BMSAccessibilityService

android.accessibilityservice.AccessibilityService

bms.main.CheckSpamBtalkService

bms.main.intent.action.bindCheckService

bms.main.BackupRestoreConfigRemoteService

bms.main.intent.action.bindBackupRestoreService

com.bkav.mobile.firewall.BVPNService

android.net.VpnService

bms.sms.DefaultHeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56

Permissions

bkav.bpb.main.READ_PROVIDER

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WAKE_LOCK

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.RECEIVE_MMS

android.permission.REORDER_TASKS

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.READ_OWNER_DATA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_CONTACTS

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.GET_ACCOUNTS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.CAMERA

com.android.alarm.permission.SET_ALARM

android.permission.SYSTEM_ALERT_WINDOW

android.permission.BIND_ACCESSIBILITY_SERVICE

com.android.vending.BILLING

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

bkav.bpb.main.WRITE_PROVIDER

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.CHANGE_WIFI_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_PROFILE

android.permission.READ_LOGS

com.sec.android.provider.logsprovider.permission.READ_LOGS

com.sec.android.provider.logsprovider.permission.WRITE_LOGS

bms.main.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

bms.main

bms.main.BMSActivity

Activities

bms.main.BMSActivity

com.bkav.bpb.backup.BackUpActivity

com.bkav.bpb.backup.RestoreActivity

com.bkav.bpb.setting.SettingNotify

bms.sms.DefaultComposeSmsActivity

Permissions

Receivers

bms.antitheft.SimStateReceiver

com.bkav.mobile.bms.gcm.GcmBroadcastReceiver

bms.main.Boot

bms.main.Widget

bms.sms.SmsReceiver

bms.call.CallReceiver

bms.scan.PackageObserver

bms.sms.SendingBroadcastReceiver

bms.sms.DeliveryBroadcastReceiver

bms.main.ConnectivityReceiver

bms.antitheft.BkavDeviceAdminReceiver

bms.sms.DefaultSmsReceiver

bms.sms.DefaultMmsReceiver

Services

bms.main.NotificationListenner

bms.main.BMSAccessibilityService

bms.main.CheckSpamBtalkService

bms.main.BackupRestoreConfigRemoteService

com.bkav.mobile.firewall.BVPNService

bms.sms.DefaultHeadlessSmsSendService

Android Permissions

1b3bcab28b6f8d377261f45a6e9b411f36a0d059235cb4da02b3c8e174057b56