4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd

General

Target

4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd
Size

12.4MB
MD5

c610fa317db788274dee1399372b7d74
SHA1

3d958c3aebfa751cb3e0dcb5df5eeddf66297c48
SHA256

4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd
SHA512

b401ca74d41fed1ef691dbdcd4fcb823e56e4473b2f98aebef8867caa98b9e137bee49de251135893ef338b8a41bdd16b31eeab28a8f69df3c3b3555e9b1f944
SSDEEP

393216:5SyJt8fjdJCUgBGpLpqQx55F/cqbHLR4Ai+iZVp:5SyJ6LdJn5vCAiZp

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

appplus.mobi.lockdownpro

appplus.mobi.applock.ActivityMain

Activities

appplus.mobi.applock.ActivityMain

android.intent.action.MAIN

appplus.mobi.applock.MainActivity

android.intent.action.VIEW

com.google.android.gms.appinvite.PreviewActivity

com.google.android.gms.appinvite.ACTION_PREVIEW

com.google.android.gms.tagmanager.TagManagerPreviewActivity

android.intent.action.VIEW

Permissions

android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.PROCESS_OUTGOING_CALLS
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
com.android.vending.BILLING
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.PACKAGE_USAGE_STATS
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.USE_FINGERPRINT
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COURSE_LOCATION
android.permission.RESTART_PACKAGES
android.permission.CAMERA
appplus.mobi.lockdownpro.permission.MAPS_RECEIVE
android.permission.READ_PHONE_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
appplus.mobi.lockdownpro.permission.C2D_MESSAGE

Receivers

appplus.mobi.applock.service.ReceiverChangePackage

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED

appplus.mobi.applock.service.RecentReciver

com.android.systemui.TOGGLE_RECENTS

appplus.mobi.applock.service.SmsReciever

android.provider.Telephony.SMS_RECEIVED

appplus.mobi.applock.service.RebootReceiver

android.intent.action.BOOT_COMPLETED

appplus.mobi.applock.service.PhoneReceiver

android.intent.action.NEW_OUTGOING_CALL

appplus.mobi.applock.service.WidgetReceiver

android.appwidget.action.APPWIDGET_UPDATE

com.startapp.android.publish.common.metaData.BootCompleteListener

android.intent.action.BOOT_COMPLETED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Services

appplus.mobi.applock.service.LockServices

android.view.InputMethod

appplus.mobi.applock.service.AppLockPlusService

android.view.InputMethod

appplus.mobi.applock.service.MyJobService

android.view.InputMethod

appplus.mobi.applock.service.NotificationService

android.accessibilityservice.AccessibilityService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd

Permissions

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.PROCESS_OUTGOING_CALLS

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.android.vending.BILLING

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.PACKAGE_USAGE_STATS

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.USE_FINGERPRINT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COURSE_LOCATION

android.permission.RESTART_PACKAGES

android.permission.CAMERA

appplus.mobi.lockdownpro.permission.MAPS_RECEIVE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.google.android.c2dm.permission.RECEIVE

appplus.mobi.lockdownpro.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

appplus.mobi.lockdownpro

appplus.mobi.applock.ActivityMain

Activities

appplus.mobi.applock.ActivityMain

appplus.mobi.applock.MainActivity

com.google.android.gms.appinvite.PreviewActivity

com.google.android.gms.tagmanager.TagManagerPreviewActivity

Permissions

Receivers

appplus.mobi.applock.service.ReceiverChangePackage

appplus.mobi.applock.service.RecentReciver

appplus.mobi.applock.service.SmsReciever

appplus.mobi.applock.service.RebootReceiver

appplus.mobi.applock.service.PhoneReceiver

appplus.mobi.applock.service.WidgetReceiver

com.startapp.android.publish.common.metaData.BootCompleteListener

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

Services

appplus.mobi.applock.service.LockServices

appplus.mobi.applock.service.AppLockPlusService

appplus.mobi.applock.service.MyJobService

appplus.mobi.applock.service.NotificationService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

4cc376972b54cea347109b7ca050d4f4b7c9d267629ff9829184ca3387297bcd