5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79

General

Target

5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79
Size

16.1MB
MD5

e3fe2245900a011a7584d312a1ef9181
SHA1

92e713dd3490bfa70805593d6ec3f9088aff7637
SHA256

5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79
SHA512

79a84e33ad8464baf9df3d01c2cba0be3555c37dd98aa86c3c6183a5875b684eb9dd5755c741dfe47325f02f367638ede0ac6fefafa37187212b5b9670b3c4bc
SSDEEP

393216:e1a6If/QV/xA1IoPD+mxhOS1OS+5Mc9iQx55ayAFfeiKhYyWtUrlu0AaJl5UPWk1:0FIfo5i1IoymfOyOS+135ayAteiKhYyG

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.kingsoft.calendar

com.kingsoft.calendar.GuidePageActivity

Activities

com.kingsoft.calendar.GuidePageActivity

android.intent.action.MAIN

com.android.calendar.EventInfoActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.android.calendar.AllInOneActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.android.calendar.GoogleCalendarUriIntentFilter

android.intent.action.VIEW

com.android.calendar.SearchActivity

android.intent.action.SEARCH

com.kingsoft.calendar.zxing.QRCaptureActivity

com.kingsoft.calendar.zxing.SCAN

com.kingsoft.calendar.zxing.encode.QREncodeActivity

com.kingsoft.calendar.zxing.ENCODE
android.intent.action.SEND

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.INTERNET
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.BLUETOOTH
android.permission.READ_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_SYNC_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.RECORD_AUDIO
com.android.launcher.permission.READ_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
com.kingsoft.calendar.permission.MIPUSH_RECEIVE
android.permission.READ_LOGS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.android.calendar.alerts.AlertReceiver

android.intent.action.EVENT_REMINDER
android.intent.action.TIME_SET
android.intent.action.BOOT_COMPLETED
android.intent.action.LOCALE_CHANGED
android.intent.action.PROVIDER_CHANGED

com.kingsoft.upgradelibrary.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.kingsoft.calendar.widget.UpgradeReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.MY_PACKAGE_REPLACED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.kingsoft.calendar.push.MipushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.kingsoft.calendar.push.NetworkConnectionReceiver

android.net.wifi.WIFI_STATE_CHANGED

com.android.calendar.widget.CalendarAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.kingsoft.calendar.APPWIDGET_UPDATE

com.android.calendar.widget.CalendarAppWidgetService$CalendarFactory

android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.LOCALE_CHANGED
android.intent.action.PROVIDER_CHANGED
com.kingsoft.calendar.APPWIDGET_SCHEDULED_UPDATE

com.android.providers.calendar.CalendarReceiver

android.intent.action.BOOT_COMPLETED

com.android.providers.calendar.CalendarUpgradeReceiver

android.intent.action.PRE_BOOT_COMPLETED

com.android.providers.calendar.CalendarProviderBroadcastReceiver

com.android.providers.calendar.intent.CalendarProvider2
android.intent.action.EVENT_REMINDER

com.bugtags.library.BugtagsReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.kingsoft.calendar.service.CalendarSyncService

android.content.SyncAdapter

com.kingsoft.calendar.service.account.GenericAccountService

android.accounts.AccountAuthenticator

com.taobao.hotfix.aidl.DownloadService

com.taobao.hotfix.action

Android Permissions

5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79

Permissions

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.BLUETOOTH

android.permission.READ_SYNC_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SYNC_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.RECORD_AUDIO

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

com.kingsoft.calendar.permission.MIPUSH_RECEIVE

android.permission.READ_LOGS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.kingsoft.calendar

com.kingsoft.calendar.GuidePageActivity

Activities

com.kingsoft.calendar.GuidePageActivity

com.android.calendar.EventInfoActivity

com.android.calendar.AllInOneActivity

com.android.calendar.GoogleCalendarUriIntentFilter

com.android.calendar.SearchActivity

com.kingsoft.calendar.zxing.QRCaptureActivity

com.kingsoft.calendar.zxing.encode.QREncodeActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.android.calendar.alerts.AlertReceiver

com.kingsoft.upgradelibrary.DownloadCompleteReceiver

com.kingsoft.calendar.widget.UpgradeReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.kingsoft.calendar.push.MipushMessageReceiver

com.kingsoft.calendar.push.NetworkConnectionReceiver

com.android.calendar.widget.CalendarAppWidgetProvider

com.android.calendar.widget.CalendarAppWidgetService$CalendarFactory

com.android.providers.calendar.CalendarReceiver

com.android.providers.calendar.CalendarUpgradeReceiver

com.android.providers.calendar.CalendarProviderBroadcastReceiver

com.bugtags.library.BugtagsReceiver

Services

com.kingsoft.calendar.service.CalendarSyncService

com.kingsoft.calendar.service.account.GenericAccountService

com.taobao.hotfix.aidl.DownloadService

Android Permissions

5441be5a948ab34a6b7d0ad65492188926d864c4397738db20bba349b67f0c79