3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca

General

Target

3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca
Size

4.8MB
MD5

ebd49a99e7f17df9eb09ae732b267315
SHA1

9196ced8d0d1c33e25a274a29a8067a8c77c5b4e
SHA256

3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca
SHA512

26d5e791cc445cc77b0987f1297f45212ed220e2dfa8be1beb58082a2cea6ead1af9b4d510f25868c1c92b3a35cf83cfaf8ebe142c4815e1cf992ed53a29cbd7
SSDEEP

98304:Cdnn1pftMOVXF6jLAdpNPcc8thS9nU79pJd1N9rmk+U0Jiz3Rx:Cdnn1pfWOVXF6jLAdvPMthStU79Prf0e

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca
.apk android arch:arm

com.kukool.control.app

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

android.intent.action.MAIN

com.kukool.control.app.AssistActivity

android.intent.action.ASSIST

com.kukool.recommend.RecommendActivity

android.intent.action.MAIN

com.zxing.CaptureActivity

com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.zxing.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND
android.intent.action.SEND

com.zxing.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

com.zxing.share.ShareActivity

com.google.zxing.client.android.SHARE

com.zxing.history.HistoryActivity

android.intent.action.VIEW

com.zxing.share.BookmarkPickerActivity

android.intent.action.PICK

com.zxing.share.AppPickerActivity

android.intent.action.PICK

com.zxing.HelpActivity

android.intent.action.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.REORDER_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
com.sonyericsson.permission.MUSICSERVICE
android.permission.BROADCAST_STICKY
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.SET_WALLPAPER_HINTS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS

Receivers

com.kukool.control.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.kukool.control.service.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_SCANNER_FINISHED
android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.SIM_STATE_CHANGED

com.kukool.control.service.LockScreenReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.kukool.control.music.SysMediaStateReceiver

com.android.music.playstatechanged
com.android.music.metachanged

Services
rlbg.jar
.apk android

Android Permissions

3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.REORDER_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

com.sonyericsson.permission.MUSICSERVICE

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.SET_WALLPAPER_HINTS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Signatures

Files

com.kukool.control.app

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

com.kukool.control.app.AssistActivity

com.kukool.recommend.RecommendActivity

com.zxing.CaptureActivity

com.zxing.encode.EncodeActivity

com.zxing.book.SearchBookContentsActivity

com.zxing.share.ShareActivity

com.zxing.history.HistoryActivity

com.zxing.share.BookmarkPickerActivity

com.zxing.share.AppPickerActivity

com.zxing.HelpActivity

Permissions

Receivers

com.kukool.control.AdminReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.kukool.control.service.BootCompletedReceiver

com.kukool.control.service.LockScreenReceiver

com.kukool.control.music.SysMediaStateReceiver

Services

Android Permissions

3f5bb9326e89284f037f0315baece78f9032c629872f6dab36177a3adb0846ca