General

  • Target

    36d6cb81d5f5fa6f741dd2e27dba20f2f7458f4d823b96e7b37a9ae093bc107d

  • Size

    12.7MB

  • MD5

    9896741af0fefd70d3072d5c2dbb3657

  • SHA1

    1a7306603f0f32f64f27956523fc88eced40b660

  • SHA256

    36d6cb81d5f5fa6f741dd2e27dba20f2f7458f4d823b96e7b37a9ae093bc107d

  • SHA512

    25a3b7b9c90926d7fd20d3a8f544fdfc0c732085732db031fc1474713e0262476ce0d9d9cd5e8461b49ebe1222effbe016f23b3463a1ebb469bbd95f24c29a38

  • SSDEEP

    393216:Q90N6CkjgZle9gami1YdMK8/a3dnKd9HSn:lgCkQ6m7yzdRSn

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 36d6cb81d5f5fa6f741dd2e27dba20f2f7458f4d823b96e7b37a9ae093bc107d
    .apk android arch:arm

    com.tsf.shell

    com.tsf.shell.ShellActivity


Android Permissions

36d6cb81d5f5fa6f741dd2e27dba20f2f7458f4d823b96e7b37a9ae093bc107d

Permissions

android.permission.GET_ACCOUNTS

android.permission.EXPAND_STATUS_BAR

android.permission.CALL_PHONE

android.permission.READ_CALL_LOG

android.permission.READ_LOGS

com.android.vending.CHECK_LICENSE

android.permission.READ_CONTACTS

android.permission.PERSISTENT_ACTIVITY

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.DISABLE_KEYGUARD

com.tsf.shell.plugin.PERMISSION