81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec

Sharing

Copy URL Twitter E-mail

General

Target

81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec
Size

7.4MB
MD5

70444ac70d9a6ab2c7a9cb227f93e3ec
SHA1

fa8455754e2a466eee5f8b294f3d4c248a9b8d6e
SHA256

81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec
SHA512

a424ab42a66133e26e8ac82bb665dbce3255baf7bf700138b2f95ac46ffeb01837213d5effce7f473bb6415d242ac9511cae403879006948300266a97cc055ef
SSDEEP

98304:11T4RCr78AimzOReN5zDgHEBMURZtq+7NtWROn2I2LU/xBvbQMCFzZQJ9RueOvUO:IRCrITWOQ/Dsa5WRDIgcxBvbQnFZxT9

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec
.apk android arch:arm

com.android.coolwind

com.coolcloud.android.sync.view.CoolcloudHomeActivity

Activities

com.coolcloud.uac.android.view.PersonalCenterActivity

com.coolcloud.uac.ACCESS_UAC

com.coolcloud.uac.android.view.PrologueActivity

com.coolcloud.uac.ACCESS_ACCOUNT

com.coolcloud.android.sync.view.CoolcloudHomeActivity

android.intent.action.MAIN
com.coolcloud.android.sync.view.home
android.intent.action.coolcloud.sync.launch

com.coolcloud.android.sync.view.OnekeyRecoveryActivity

com.coolcloud.android.sync.view.onekeyrecoveryactivity

com.coolcloud.android.sync.view.SyncHomeActivity

com.coolcloud.android.view.atcion_synchomeactivity

com.coolcloud.android.sync.view.PhoneSettingProgressActivity

com.coolcloud.android.view.atcion_phonesetting_progress

com.coolcloud.android.sync.view.SyncAudioActivity

com.coolcloud.android.sync.view.action_syncaudioactivity

com.coolcloud.android.sync.view.SyncPictureActivity

com.coolcloud.android.sync.view.action_syncPictureActivity

com.coolcloud.android.sync.view.SyncCrecordActivity

com.coolcloud.android.sync.view.action_syncCrecordActivity

com.coolcloud.android.sync.view.SyncSmsActivity

com.coolcloud.android.sync.view.action_syncSmsActivity

com.coolcloud.android.sync.view.PhoneSettingRecoverActivity

com.coolcloud.android.view.atcion_phonesetting_recover

com.coolcloud.android.sync.view.PhoneSettingSyncActivity

com.coolcloud.android.view.atcion_phonesetting

com.coolcloud.android.sync.view.ApkSyncActivity

com.coolcloud.android.sync.view.ApkSyncActivity

com.coolcloud.android.sync.view.ApkBackupActivity

com.coolcloud.android.sync.view.ApkBackupActivity

com.coolcloud.android.sync.view.ApkRecoverActivity

com.coolcloud.android.sync.view.ApkRecoverActivity

com.coolcloud.android.sync.view.SmsRecoverActivity

com.coolcloud.android.sync.view.action.SmsRecoverActivity

com.coolcloud.android.sync.view.ContactNeatenActivity

com.coolcloud.android.sync.view.action.ContactNeatenActivity

com.coolcloud.android.sync.view.CrecordRecoverActivity

com.coolcloud.android.sync.view.action.CrecordRecoverActivity

com.coolcloud.android.sync.view.SyncModeActivity

android.intent.action.coolcloud.firstsync

com.coolcloud.android.sync.view.ContactRecoveryActivity

android.coolwin.view.action.contactrecycleactivity

com.coolcloud.android.sync.view.RepeatedContactCombineActivity

android.coolwin.view.action.repeatedcontactcombine_activity

com.coolcloud.android.sync.view.SyncCardContactActivity

android.coolwin.view.action.synccardcontactactivity

com.coolcloud.android.sync.view.SyncQuickDialActivity

com.coolcloud.android.sync.view.quikdail

com.coolcloud.android.sync.view.FolderSelectActivity

com.coolcloud.android.sync.view.folderselect

com.coolcloud.android.sync.view.CloudContactActivity

android.coolwin.view.action.cloudcontactactivity

com.coolcloud.android.sync.view.CloudContactDetailActivity

android.coolwin.view.action.cloudcontactdetailactivity

com.coolcloud.android.netdisk.activity.NetDiskHomeActivity

om.coolcloud.android.netdisk.activity.netDiskhome

com.coolcloud.android.netdisk.activity.NetDiskDownlistActivity

android.intent.action.SEND

com.coolcloud.android.photorecover.ui.ImageGridActivity

com.coolcloud.android.photorecover.ui.imagegrid

com.coolcloud.android.photorecover.ui.TaskListActivity

com.coolcloud.android.photorecover.ui.taklist

com.coolcloud.android.audiorecover.ui.AudioGridActivity

com.coolcloud.android.audiorecover.ui.soundgrid

com.coolcloud.android.audiorecover.ui.AudioTaskListActivity

com.coolcloud.android.audiorecover.ui.soundtaklist

com.coolcloud.android.sync.view.RecyclePreViewActivity

com.coolcloud.android.sync.view.rpv

com.coolcloud.android.sync.view.FeedBackActivity

com.coolcloud.android.sync.view.feedback

com.coolcloud.android.sync.view.AboutActivity

com.coolcloud.android.sync.view.aboutscreen

com.coolcloud.android.sync.view.CoolcloudProblemActivity

com.coolcloud.android.sync.view.problem

com.coolcloud.android.sync.view.CoolcloudIntroudceActivity

com.coolcloud.android.sync.view.introudce

com.coolcloud.android.sync.view.CoolcloudHelpActivity

com.coolcloud.android.sync.view.help

com.coolcloud.android.sync.view.DialogActivity

com.coolcloud.android.sync.view.dialog_activity

com.yulong.android.antitheft.deamon.view.PromptActivity

com.yulong.android.deamon.PromptActivity

com.yulong.android.antitheft.deamon.view.SpyCamera

com.yulong.android.deamon.SpyCamera

com.yulong.android.ui.activity.findphone.FindphoneNoOpenGuide

com.yulong.android.ui.activity.coolcloud.FINDPHONENOOPENGUIDE

com.yulong.android.ui.activity.findphone.FindPhoneOpenSecurity

com.yulong.android.ui.activity.findphone.coolcloud.FINDPHONEOPENSECURITY

com.yulong.android.ui.activity.findphone.BindDeviceListActivity

com.yulong.android.action.findphone.coolcloud.bindDevicelistactivity.action

com.yulong.android.ui.activity.findphone.FindphoneShotCutActivity

com.yulong.android.action.findphone.coolcloud.findphoneShotCutActivity.action

com.yulong.android.ui.activity.findphone.FindphoneGuardAlready

com.yulong.android.ui.activity.coolcloud.FINDPHONEGUARDALREADY

com.yulong.android.antitheft.deamon.view.UpdateUacAccountActivity

com.yulong.android.deamon.UpdateUacAccountActivity

com.coolcloud.android.sync.view.SyncSmsNewActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
android.permission.READ_PROFILE
yulong.permission.ACCESS_YLPARAMS
android.yulong.permission.PRIVATE_CONTACT
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.UPDATE_APP_OPS_STATS
android.permission.WRITE_SECURE_SETTINGS
android.permission.WRITE_MEDIA_STORAGE
android.permission.CALL_PHONE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.CAMERA
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_SUPERUSER
android.permission.GET_PACKAGE_SIZE
android.permission.BATTERY_STATS
android.permission.MANAGE_USERS
yulong.permission.ACCESS_SECCENTER
android.permission.BAIDU_LOCATION_SERVICE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.MASTER_CLEAR
com.android.launcher.permission.READ_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher2.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
com.anddoes.launcher.permission.READ_SETTINGS
com.anddoes.launcher.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS

Receivers

com.funambol.android.daemon.CoolcloudAutoSyncDaemonReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REPLACED
com.coolcloud.android.sync.START_AUTOSYNCSERVICE
com.coolcloud.android.sync.REGISTER_NEXT_SYNC
com.coolcloud.android.sync.REGISTER_REALTIME_SYNC
com.coolcloud.android.sync.UNREGISTER_REALTIME_SYNC
com.coolcloud.android.sync.UNREGISTER_ALL_REALTIME_SYNC
com.coolcloud.android.sync.SILENCE_REALTIME_SYNC
com.coolcloud.android.sync.LOGON
com.coolcloud.android.sync.LOGOFF
com.coolcloud.uac.LOGIN
com.coolcloud.uac.LOGOUT
com.android.coolpush.sdk.action.20601
com.icoolme.android.usermgr.apk.login

com.coolpad.sdk.receiver.SdkReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.yulong.android.antitheft.deamon.push.FindPhoneDaemonReceiver

com.android.coolpush.sdk.action.20601
android.net.conn.CONNECTIVITY_CHANGE
com.yulong.android.action.GUARD_SEND_MESSAGE
com.coolcloud.uac.LOGIN
com.yulong.android.antitheft.deamon.action.heart.beat

com.yulong.android.antitheft.deamon.relative.SmsRelativeReceiver

android.provider.Telephony.SMS_RECEIVED
com.yulong.mms.NEW_MESSAGE_EXTERNAL
yulong.provider.Telephony.DUAL_PB_PARAM_ON_ICC_ACTION
android.intent.action.SIM_STATE_CHANGED
com.yulong.android.action.GUARD_SEND_MESSAGE

com.funambol.android.daemon.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.funambol.android.daemon.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.coolcloud.uac.android.authenticator.AuthenticationService

android.accounts.AccountAuthenticator
com.coolcloud.uac.START_SSO
com.coolcloud.uac.ACCESS_SSO

com.coolcloud.android.client.aidl.CoolcloudSyncService

com.coolcloud.android.client.aidl.ccss.action
com.coolcloud.android.sync.DATA_CHANGED
com.coolcloud.android.sync.NETWORK_CHANGED
com.coolcloud.android.sync.SimChanged
com.coolcloud.sync.uac.LOGIN
com.coolcloud.sync.uac.LOGOUT
com.coolcloud.sync.umg.LOGIN
com.coolcloud.android.sync.wizard
com.coolcloud.android.sync.SHOW_NOTIFICATION

com.funambol.android.daemon.CoolcloudAutoSyncDaemon

com.funambol.android.daemon.CoolcloudAutoSyncDaemon

com.funambol.android.daemon.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

Android Permissions

81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.READ_PROFILE

yulong.permission.ACCESS_YLPARAMS

android.yulong.permission.PRIVATE_CONTACT

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.RECORD_AUDIO

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.UPDATE_APP_OPS_STATS

android.permission.WRITE_SECURE_SETTINGS

android.permission.WRITE_MEDIA_STORAGE

android.permission.CALL_PHONE

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.CAMERA

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_SUPERUSER

android.permission.GET_PACKAGE_SIZE

android.permission.BATTERY_STATS

android.permission.MANAGE_USERS

yulong.permission.ACCESS_SECCENTER

Sharing

General

Malware Config

Signatures

Files

com.android.coolwind

com.coolcloud.android.sync.view.CoolcloudHomeActivity

Activities

com.coolcloud.uac.android.view.PersonalCenterActivity

com.coolcloud.uac.android.view.PrologueActivity

com.coolcloud.android.sync.view.CoolcloudHomeActivity

com.coolcloud.android.sync.view.OnekeyRecoveryActivity

com.coolcloud.android.sync.view.SyncHomeActivity

com.coolcloud.android.sync.view.PhoneSettingProgressActivity

com.coolcloud.android.sync.view.SyncAudioActivity

com.coolcloud.android.sync.view.SyncPictureActivity

com.coolcloud.android.sync.view.SyncCrecordActivity

com.coolcloud.android.sync.view.SyncSmsActivity

com.coolcloud.android.sync.view.PhoneSettingRecoverActivity

com.coolcloud.android.sync.view.PhoneSettingSyncActivity

com.coolcloud.android.sync.view.ApkSyncActivity

com.coolcloud.android.sync.view.ApkBackupActivity

com.coolcloud.android.sync.view.ApkRecoverActivity

com.coolcloud.android.sync.view.SmsRecoverActivity

com.coolcloud.android.sync.view.ContactNeatenActivity

com.coolcloud.android.sync.view.CrecordRecoverActivity

com.coolcloud.android.sync.view.SyncModeActivity

com.coolcloud.android.sync.view.ContactRecoveryActivity

com.coolcloud.android.sync.view.RepeatedContactCombineActivity

com.coolcloud.android.sync.view.SyncCardContactActivity

com.coolcloud.android.sync.view.SyncQuickDialActivity

com.coolcloud.android.sync.view.FolderSelectActivity

com.coolcloud.android.sync.view.CloudContactActivity

com.coolcloud.android.sync.view.CloudContactDetailActivity

com.coolcloud.android.netdisk.activity.NetDiskHomeActivity

com.coolcloud.android.netdisk.activity.NetDiskDownlistActivity

com.coolcloud.android.photorecover.ui.ImageGridActivity

com.coolcloud.android.photorecover.ui.TaskListActivity

com.coolcloud.android.audiorecover.ui.AudioGridActivity

com.coolcloud.android.audiorecover.ui.AudioTaskListActivity

com.coolcloud.android.sync.view.RecyclePreViewActivity

com.coolcloud.android.sync.view.FeedBackActivity

com.coolcloud.android.sync.view.AboutActivity

com.coolcloud.android.sync.view.CoolcloudProblemActivity

com.coolcloud.android.sync.view.CoolcloudIntroudceActivity

com.coolcloud.android.sync.view.CoolcloudHelpActivity

com.coolcloud.android.sync.view.DialogActivity

com.yulong.android.antitheft.deamon.view.PromptActivity

com.yulong.android.antitheft.deamon.view.SpyCamera

com.yulong.android.ui.activity.findphone.FindphoneNoOpenGuide

com.yulong.android.ui.activity.findphone.FindPhoneOpenSecurity

com.yulong.android.ui.activity.findphone.BindDeviceListActivity

com.yulong.android.ui.activity.findphone.FindphoneShotCutActivity

com.yulong.android.ui.activity.findphone.FindphoneGuardAlready

com.yulong.android.antitheft.deamon.view.UpdateUacAccountActivity

com.coolcloud.android.sync.view.SyncSmsNewActivity

Permissions

Receivers

com.funambol.android.daemon.CoolcloudAutoSyncDaemonReceiver

com.coolpad.sdk.receiver.SdkReceiver

com.yulong.android.antitheft.deamon.push.FindPhoneDaemonReceiver

com.yulong.android.antitheft.deamon.relative.SmsRelativeReceiver

com.funambol.android.daemon.SmsReceiver

com.funambol.android.daemon.MmsReceiver

Services

com.coolcloud.uac.android.authenticator.AuthenticationService

com.coolcloud.android.client.aidl.CoolcloudSyncService

com.funambol.android.daemon.CoolcloudAutoSyncDaemon

com.funambol.android.daemon.HeadlessSmsSendService

Android Permissions

81a1d64f2a236f70dba19d84cff2e2bd1489ba469b14c63a132aaa31662964ec