6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b

General

Target

6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b
Size

10.0MB
MD5

7a41b532b6c8bb6086835997f0821bfa
SHA1

bed0c7852773f5833eedb51c66da4e55b1249166
SHA256

6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b
SHA512

d87200e1f47031377b384f99b91f060dfb14c0e8d36800808cbfcfb37ce20b14597e84363b8f03b16197c5b27c5d1471ecd187b016cb2f8e3fddc80b415c0069
SSDEEP

196608:Vid4khBx7tIAMevrFAhcjXg1oUVmK1Hkfb3NKbf8lGp2pMG/S4N3:VJkhTiAscDwVDAAbf8Q2MG/S4N3

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b
.apk android arch:arm

com.qihoo.safe.remotecontrol

com.qihoo.safe.remotecontrol.RemoteControlActivity

Activities

com.qihoo.safe.remotecontrol.RemoteControlActivity

android.intent.action.MAIN

com.qihoo.safe.remotecontrol.widget.CreateShortcutActivity

android.intent.action.CREATE_SHORTCUT

Permissions

com.qihoo.safe.remotecontrol.update.BROAD
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_SMS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.qihoo.safe.remotecontrol.permission.INJECT_EVENTS

Receivers

com.qihoo.safe.remotecontrol.receiver.BootupReceiver

android.intent.action.BOOT_COMPLETED

com.qihoo.safe.remotecontrol.receiver.UpdateReceiver

com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_BEGIN_E
com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_END_E
com.qihoo.antivirus.update.action.UPDATED_FILE_NOTIFY_E
com.qihoo.antivirus.update.action.PATCH_FILE_NOTIFY_E
com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_INI_E
com.qihoo.antivirus.update.action.ERROR_E
com.qihoo.antivirus.update.action.CONNECT_RETRY_E
com.qihoo.antivirus.update.action.UPDATE_CHECK_OVER_E
com.qihoo.antivirus.update.action.DATA_FILE_PROGRESS_E
com.qihoo.antivirus.update.action.APP_PROGRESS_E
com.qihoo.antivirus.update.action.UPDATE_OVER_E
com.qihoo.antivirus.update.action.APK_PATCH_ERROR_E
com.qihoo.antivirus.update.action.CANCEL_E

com.qihoo.safe.test.InstrumentReceiver

com.qihoo.safe.test.ACTION_MAKE_CALL
com.qihoo.safe.test.ACTION_DROP_CALL
com.qihoo.safe.test.ACTION_DUMP_DIAGNOSTIC
com.qihoo.safe.test.ACTION_ANSWER_CALL

com.qihoo.safe.remotecontrol.widget.ScreenSharingWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

Services

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.common.account.QihooAuthenticatorService

android.accounts.AccountAuthenticator

Android Permissions

6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b

Permissions

com.qihoo.safe.remotecontrol.update.BROAD

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_SMS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WAKE_LOCK

com.qihoo.safe.remotecontrol.permission.INJECT_EVENTS

Sharing

General

Malware Config

Signatures

Files

com.qihoo.safe.remotecontrol

com.qihoo.safe.remotecontrol.RemoteControlActivity

Activities

com.qihoo.safe.remotecontrol.RemoteControlActivity

com.qihoo.safe.remotecontrol.widget.CreateShortcutActivity

Permissions

Receivers

com.qihoo.safe.remotecontrol.receiver.BootupReceiver

com.qihoo.safe.remotecontrol.receiver.UpdateReceiver

com.qihoo.safe.test.InstrumentReceiver

com.qihoo.safe.remotecontrol.widget.ScreenSharingWidgetProvider

Services

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.common.account.QihooAuthenticatorService

Android Permissions

6850b52d5649a1034ad2b98121fedee1a4e4f9d2a89d9864c1e0e32506c9778b