ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6

Sharing

Copy URL Twitter E-mail

General

Target

ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6
Size

9.0MB
MD5

d0027772306fb0ca27f162fcd9deca98
SHA1

fddd74a0e8be1db6280900c8fadbe24c291fb301
SHA256

ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6
SHA512

b2f81c32db700a63468d977521dc8081b9ed4d59156418a3ee9c609657eddd42b0b1819406c16e53103780a761907dba8ef265ccf34f5307240e10475f6574c7
SSDEEP

196608:v90pacvQdPteegs50xbBpMObLG4o/ryrjk+EGdrECZdqB/Ci76UrF7XlDIvWzUSV:v90paEQlteegs50xbBpMObLG4o/ryrje

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6
.apk android arch:arm arch:mips arch:x86

com.when.coco

.Login

Activities

.Login

android.intent.action.MAIN
android.intent.action.VIEW
com.gau.go.launcher.action.GO_WIDGET_CONVERT_3D
com.gau.go.launcherex.gowidget

.share.ShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.LinkListener

android.intent.action.VIEW

.NewMain

android.intent.action.MAIN

.MonthActivity

android.intent.action.MAIN

.ScheduleEdit

android.intent.action.MAIN
com.when.coco.create

.ScheduleDetail

android.intent.action.MAIN

.GoWidgetSetup4x3

android.intent.action.MAIN
com.when.coco.gowidget.theme

com.when.coco.NoteList

android.intent.action.MAIN

com.when.coco.ScheduleList

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.when.coco.widget.AppWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.WeatherScheduleConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.WeatherNumClockWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.ComplexViewConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.INTERNET
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.REORDER_TASKS
android.permission.GET_TASKS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.RESTART_PACKAGES
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_USER_PRESENT
android.permission.KILL_BACKGROUND_PROCESSES

Receivers

.receiver.UploadReceiver

coco.action.schedule.upload_image

.receiver.ServiceReceiver

android.intent.action.BOOT_COMPLETED

.receiver.SyncReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.when.android.action.sync365
coco.action.schedule.update
coco.action.birthday.update
coco.action.note.update

.receiver.AlarmReceiver

com.coco.ALARM_ALERT
coco.action.ALARM_DAY

.receiver.StatReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

.receiver.NotifyDateReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
coco.action.schedule.update
coco.action.after.logout
coco.action.after.login.widget.update
coco.action.notify.week.calendar.update
coco.action.firstday.change

.receiver.NotifyWeatherReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
com.coco.notify.weather.update
com.coco.notify.weather.show

com.when.birthday.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.when.birthday.receiver.LogOutReceiver

coco.action.after.logout

com.when.birthday.receiver.TimeSetReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.when.android.calendar365.messagebox.MessageLogReceiver

coco.action.after.logout

com.when.coco.receiver.WidgetReceiver

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
coco.action.theme.changed
coco.action.after.logout
coco.action.after.login.widget.update
coco.action.after.login
coco.action.theme.setup.bg.changed
coco.action.WEATHER_UPDATE
coco.action.unsubscribe.calendar
coco.action.instance.update
coco.action.delete.schedule
coco.action.weather.add.delete.sequence.update
coco.action.schedule.update
coco.action.note.update
coco.action.calendar.has_new_theme
coco.action.subscribe.huangli.calendar
coco.action.calendar.sequence.update
coco.action.widget.setup.bg4x3
coco.action.subscribe.calendar

com.when.coco.widget.Widget4x3

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.FIRST_SELECTOR_WIDGET
com.when.coco.TWO_SELECTOR_WIDGET
com.when.coco.THREE_SELECTOR_WIDGET
coco.action.firstday.change

com.when.coco.widget.WeatherScheduleWidget4x3

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.WeatherScheduleWidget4x3.SETUP
com.when.coco.widget.WeatherScheduleWidget4x3.UPDATE_WIDGET_UP_DAY
com.when.coco.widget.WeatherScheduleWidget4x3.UPDATE_WIDGET_DOWN_DAY
com.when.coco.widget.COLLECTION_VIEW_EXTRA

.widget.WeatherNumberClockWidget4x2

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET

com.when.coco.widget.ComplexViewWidget4x4

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.widget.ComplexViewWidget4x4.UPDATE_WIDGET_UP_DAY
com.when.coco.widget.ComplexViewWidget4x4.UPDATE_WIDGET_DOWN_DAY
com.when.coco.widget.ComplexViewWidget4x4.TODAY
com.when.coco.widget.ComplexViewWidget4x4.TOMORROW
com.when.coco.widget.ComplexViewWidget4x4.WEEK
com.when.coco.widget.ComplexViewWidget4x4.MONTH
com.when.coco.widget.COLLECTION_VIEW_EXTRA
coco.action.firstday.change

com.when.coco.widget.Widget1x1

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.FIRST_SELECTOR_WIDGET
com.when.coco.TWO_SELECTOR_WIDGET
com.when.coco.THREE_SELECTOR_WIDGET

com.when.coco.widget.Widget4x1

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.whem.coco.huangli.toast

com.when.coco.receiver.GoWidgetReceiver

com.when.coco.gowidget.applytheme

com.when.calslq.receiver.NetStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.tencent.android.tpush.XGPushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.tencent.android.tpush.action.SDK
android.intent.action.USER_PRESENT
com.tencent.android.tpush.action.INTERNAL_PUSH_MESSAGE

com.when.coco.receiver.XGPushReceiver

com.tencent.android.tpush.action.PUSH_MESSAGE
com.tencent.android.tpush.action.FEEDBACK

Services

.services.AlarmService

coco.action.GET_NOTIFY
coco.action.INIT_ALARM

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.REORDER_TASKS

android.permission.GET_TASKS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.KILL_BACKGROUND_PROCESSES

Sharing

General

Malware Config

Signatures

Files

com.when.coco

.Login

Activities

.Login

.share.ShareActivity

.LinkListener

.NewMain

.MonthActivity

.ScheduleEdit

.ScheduleDetail

.GoWidgetSetup4x3

com.when.coco.NoteList

com.when.coco.ScheduleList

com.tencent.tauth.AuthActivity

com.when.coco.widget.AppWidgetConfigure

com.when.coco.widget.WeatherScheduleConfigure

com.when.coco.widget.WeatherNumClockWidgetConfigure

com.when.coco.widget.ComplexViewConfigure

Permissions

Receivers

.receiver.UploadReceiver

.receiver.ServiceReceiver

.receiver.SyncReceiver

.receiver.AlarmReceiver

.receiver.StatReceiver

.receiver.NotifyDateReceiver

.receiver.NotifyWeatherReceiver

com.when.birthday.receiver.BootReceiver

com.when.birthday.receiver.LogOutReceiver

com.when.birthday.receiver.TimeSetReceiver

com.when.android.calendar365.messagebox.MessageLogReceiver

com.when.coco.receiver.WidgetReceiver

com.when.coco.widget.Widget4x3

com.when.coco.widget.WeatherScheduleWidget4x3

.widget.WeatherNumberClockWidget4x2

com.when.coco.widget.ComplexViewWidget4x4

com.when.coco.widget.Widget1x1

com.when.coco.widget.Widget4x1

com.when.coco.receiver.GoWidgetReceiver

com.when.calslq.receiver.NetStateReceiver

com.tencent.android.tpush.XGPushReceiver

com.when.coco.receiver.XGPushReceiver

Services

.services.AlarmService

com.baidu.location.f

Android Permissions

ab2d970ed53f79fdd2eff7b78519b0681e82c96955ed9f89a59864f9111208d6