General

  • Target

    678608fa8cdd8db82505ca51cdfcfbdda15396432d62a69f335eb293321484d8

  • Size

    5.8MB

  • MD5

    6d223b67ce9bda6eee44bd06dc01bf2c

  • SHA1

    e954f049506a9b564b00705d93aa1ae1c39bbbd1

  • SHA256

    678608fa8cdd8db82505ca51cdfcfbdda15396432d62a69f335eb293321484d8

  • SHA512

    ac64ef295e75f50af88af7c2c98c090d8b055fec5c6331ee7ded03378104154505f916345d21412c30417e709eabe17e5ec7676416a089c73a1eff628ffd75d4

  • SSDEEP

    98304:fEV/sKtwvi9vb0LPKf8Z448YCplqdBcUh5/OJxcK6kTuxHne8P1uxHpIK6epu:fE6OmS8ZyDpCyOOJxcETux9P1uxJIK3I

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 678608fa8cdd8db82505ca51cdfcfbdda15396432d62a69f335eb293321484d8
    .apk android arch:arm

    com.Cleanup.yfyw.qlj

    com.Cleanup.monarch.qlj.KaiPingAd


  • RemoteTools.jar
    .apk android
  • RemoteTools_low.jar
    .apk android
  • dm_lbx_local.jar
    .apk android
  • gdtadv2.jar
    .apk android

Android Permissions

678608fa8cdd8db82505ca51cdfcfbdda15396432d62a69f335eb293321484d8

Permissions

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_SMS

android.permission.READ_LOGS

android.permission.WRITE_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CLEAR_APP_CACHE

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher2.permission.INSTALL_SHORTCUT

com.android.launcher2.permission.UNINSTALL_SHORTCUT

com.android.launcher3.permission.INSTALL_SHORTCUT

com.android.launcher3.permission.UNINSTALL_SHORTCUT

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION