3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c

General

Target

3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c
Size

3.8MB
MD5

8ee537652c1a47c039cd8b250a7b0b3d
SHA1

4fa4b28446304bcb7e2da84c56a4617cb1d4ee5a
SHA256

3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c
SHA512

d5e8e060c16383a56edaa5cecba416009226974ff7bd5d54c072dd62c32e1e253ee00f33ef44c3b58090745042f1ed79887650374848c68e62b21e70f138b744
SSDEEP

98304:IgZHfN/NGiLTd6KqshK93p1uigtSrlJ2Vztm5Ajr2R2T:TdfNEiLTdpqFe4rj2f/2kT

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 2 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c
.apk android arch:arm

com.kukool.control.app

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

android.intent.action.MAIN

com.kukool.control.app.AssistActivity

android.intent.action.ASSIST

com.kukool.recommend.RecommendActivity

android.intent.action.MAIN

com.zxing.CaptureActivity

com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.zxing.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND
android.intent.action.SEND

com.zxing.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

com.zxing.share.ShareActivity

com.google.zxing.client.android.SHARE

com.zxing.history.HistoryActivity

android.intent.action.VIEW

com.zxing.share.BookmarkPickerActivity

android.intent.action.PICK

com.zxing.share.AppPickerActivity

android.intent.action.PICK

com.zxing.HelpActivity

android.intent.action.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.WAKE_LOCK
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.REORDER_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SETTINGS
android.permission.VIBRATE
com.sonyericsson.permission.MUSICSERVICE
android.permission.BROADCAST_STICKY
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.SET_WALLPAPER_HINTS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS

Receivers

com.kukool.control.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.baidu.android.pushservice.action.notification.SHOW
com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD
com.baidu.android.pushservice.action.BIND_SYNC
android.intent.action.PACKAGE_REMOVED

com.kukool.control.service.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.MEDIA_SCANNER_FINISHED
android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.SIM_STATE_CHANGED

com.kukool.control.service.LockScreenReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.kukool.control.music.SysMediaStateReceiver

com.android.music.playstatechanged
com.android.music.metachanged

Services
rlbg.jar
.apk android

Android Permissions

3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.REORDER_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

com.sonyericsson.permission.MUSICSERVICE

android.permission.BROADCAST_STICKY

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.SET_WALLPAPER_HINTS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

Sharing

General

Malware Config

Signatures

Files

com.kukool.control.app

com.kukool.control.app.GuideActivity

Activities

com.kukool.control.app.GuideActivity

com.kukool.control.app.AssistActivity

com.kukool.recommend.RecommendActivity

com.zxing.CaptureActivity

com.zxing.encode.EncodeActivity

com.zxing.book.SearchBookContentsActivity

com.zxing.share.ShareActivity

com.zxing.history.HistoryActivity

com.zxing.share.BookmarkPickerActivity

com.zxing.share.AppPickerActivity

com.zxing.HelpActivity

Permissions

Receivers

com.kukool.control.AdminReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.kukool.control.service.BootCompletedReceiver

com.kukool.control.service.LockScreenReceiver

com.kukool.control.music.SysMediaStateReceiver

Services

Android Permissions

3f2965f19b4d7ad9a4a671c4ecb90f6e5a805f4d24c136b9988000b25aeb506c