ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b

Sharing

Copy URL Twitter E-mail

General

Target

ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b
Size

19.1MB
MD5

9e34d97b67edfe6f50ad51bb86c72ac3
SHA1

acd25e4f5e110996abfc254d6de047c5686a2350
SHA256

ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b
SHA512

2a4a0d2b3ceb02d8ea4e3cee176e4c2a1e493a5f2773a7de5494d3a036240e333c797ae70144e5b04a32487e092fb194f1aedd2cda75df0f2c451b23fe4a847c
SSDEEP

393216:O011MlemVx5WxIJ3kpy3nRtpvz1IqM+hPv9Qo962o+9EYl8eIK4viK/nCbLo/1:oh2IJ3TTpRIqpBFD962orYl9evzC+1

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 4 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS

Files

ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b
.apk android arch:arm

com.vlocker.locker

com.vlocker.settings.LaunchActivity

Activities

com.vlocker.share.ShareActivity

android.intent.action.VIEW

com.vlocker.settings.SubSetingActivity

android.intent.action.start.vlocker

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.vlocker.settings.SettingsActivity

android.intent.action.VIEW

com.vlocker.settings.LaunchActivity

android.intent.action.MAIN

com.vlocker.v4.video.activity.VideoDetailActivity

android.intent.action.VIEW

com.vlocker.v4.theme.activity.ThemeDetailsActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareResultActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY
com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

com.qc.eg.open.QH5Activity

com.qc.eg.h5.Action

com.phone.incall.show.settings.show.CallShowSettingsActivity

com.phone.incall.show_ACTION_CALL_SHOW_SETTING

Permissions

android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.REQUEST_INSTALL_PACKAGES
com.android.launcher3.permission.INSTALL_SHORTCUT
com.android.launcher3.permission.UNINSTALL_SHORTCUT
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CAMERA
com.android.alarm.permission.SET_ALARM
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_CONTACTS
android.permission.BROADCAST_STICKY
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_ACCOUNTS
android.permission.REORDER_TASKS
android.permission.DISABLE_KEYGUARD
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_SETTINGS
android.permission.CHANGE_CONFIGURATION
android.permission.EXPAND_STATUS_BAR
android.permission.READ_SMS
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
android.permission.PACKAGE_USAGE_STATS
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.FORCE_STOP_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER
android.permission.USE_FINGERPRINT
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_STATS
android.permission.WRITE_SYNC_SETTINGS
android.permission.SEND_SMS
android.permission.FOREGROUND_SERVICE
com.vlocker.locker.permission.MIPUSH_RECEIVE
android.permission.SYSTEM_OVERLAY_WINDOW
com.asus.msa.SupplementaryDID.ACCESS
android.permission.QUERY_ALL_PACKAGES
com.vlocker.locker.openadsdk.permission.TT_PANGOLIN
android.permission.READ_CALL_LOG
android.permission.CALL_PHONE
android.permission.ANSWER_PHONE_CALLS
android.permission.GRANT_RUNTIME_PERMISSIONS
android.Manifest.permission.MEDIA_CONTENT_CONTROL

Receivers

com.vlocker.msg.McmPushReceiver

com.moxiu.sdk.mopush.vlocker

com.vlocker.receiver.UserPresentReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.USER_PRESENT
android.action.vlocker.restart
android.intent.action.TIME_TICK
android.intent.action.TIME_SET
android.intent.action.WALLPAPER_CHANGED

com.vlocker.receiver.BootReceiver

action_get_and_install_plugin
ACTION_NOTIFY_MEM_CHANGE
action_v5_push_message
android.intent.action.ACTION_UNSOL_RESPONSE_OEM_HOOK_RAW
android.intent.action.ALARM_CHANGED
android.intent.action.BADGE_COUNT_UPDATE
android.intent.action.GTALK_CONNECTED
android.intent.action.GTALK_DISCONNECTED
android.intent.action.MEDIA_SCANNER_FINISHED
android.intent.action.MEDIA_SCANNER_STARTED
android.intent.action.PROVIDER_CHANGED
android.intent.action.RINGTONE_ADD
android.intent.action.ultimatesnapshot
android.net.sip.SIP_SERVICE_UP
applock_cloudcfg_changed_notification
broadcast_action_close_pop
broadcast_action_request_query
com.android.calendar.APPWIDGET_UPDATE
com.android.contacts.favorites.updated
com.android.huawei.DATASERVICE_SETTING_CHANGED
com.android.internal.telephony
com.android.launcher.action.INSTALL_SHORTCUT
com.android.launcher.action.UNINSTALL_SHORTCUT
com.baidu.android.pushservice.action.METHOD
com.baidu.ufosdk.getappkeysuccess_getnewhistoryflag
com.bytedance.frameworks.plugin.ACTION_REPORTER
com.cmcm.screensaver.screen_off
com.cmcm.screensaver.screen_on
com.google.android.checkin.CHECKIN_COMPLETE
com.google.android.talk.MCS_CONNECTION_SERVICE_STARTED
com.huawei.android.push.intent.REGISTER
com.huawei.android.push.intent.SOCKET_INFO
com.huawei.intent.action.PUSH_STATE
com.huawei.mms.RINGER_MODE_CHANGED
com.kingroot.common.ACTION_NEW_APP_STARTED
com.kingroot.common.ACTION_NOTIFY_IN_SELF_APP_MAIN
com.kingroot.common.ACTION_NOTIFY_OUT_SELF_APP_BY_MAIN
com.kingroot.common.ACTION_SWITCH_IN_DESKTOP
com.kingroot.common.ACTION_SWITCH_OUT_DESKTOP
com.kingroot.common.ACTION_TOP_ACTIVITY_CHANGED
com.kingroot.common.ACTION_TOP_APP_CHANGED
com.kingroot.kinguser.gamebox.ACTION_GAME_ADDED
com.morgoo.doirplugin.PACKAGE_ADDED
com.qihoo.action.UPDATE_NOTIFY
com.qihoo.antivirus.sync.ActivityResultChange
com.qihoo.appstore.appwatcher.removeall
com.qihoo.appstore.appwatcher.reset
com.qihoo.root.rooting
com.qihoo.root.rootover
com.qihoo360.launcher.action.APP_ICON_NOTIFICATION_COUNT
com.sina.weibo.action.push.active.groupscheme
com.sina.weibo.action.push.active.record.complete
com.sina.weibo.guardunion.NEW_DATA
com.sina.weibo.photo.action.UPDATE_VIDEO_CONFIG
com.sina.weibo.video.debug.ACTION_PLAYER_LOG_SAVED
com.sina.weibo.video.debug.ACTION_PLAYER_LOG_START
com.taobao.bootimage.show.coldstart
com.taobao.bootimage.show.finish
com.taobao.event.HomePageLoadFinished
com.taobao.tao.messagkit.receive
com.taobao.taobao.action.BUNDLES_INSTALLED
com.taobao.taobao.intent.action.INIT
com.tencent.android.qqdownloader.action.CAN_UPDATE_APP_SUM_CHANGED
com.tencent.assistant.ipc.firststart.action
com.tencent.intent.QZONE_PRE_DOWNLOAD_CANCEL
com.tencent.mm.Intent.ACTION_CLICK_FLOW_REPORT
com.tencent.mm.plugin.openapi.Intent.ACTION_HANDLE_APP_REGISTER
com.tencent.mm.ui.ACTION_ACTIVE
com.tencent.mm.ui.ACTION_DEACTIVE
com.tencent.mobileqq.activity.NotifyPushSettingActivity.ConfigPCActive
com.tencent.mobileqq.broadcast.qq
com.tencent.mobileqq.cooperation.plugin.comic_plugin.apk
com.tencent.mobileqq.cooperation.plugin.Photoplus.apk
com.tencent.mobileqq.cooperation.plugin.qlink_plugin.apk
com.tencent.mobileqq.cooperation.plugin.qqreaderplugin.apk
com.tencent.mobileqq.msf.wakeup
com.tencent.mobileqq.openapi.ACTION_LOGIN
com.tencent.mobileqq.PreLoadComicProcess
com.tencent.mobileqq.qqwifi.scanStateChange
com.tencent.mobileqq.secmsg.NetReconnect
com.tencent.plugin.state.change
com.tencent.process.exit
com.tencent.process.starting
com.tencent.process.stopping
com.tencent.process.tmdownloader.exit
com.tencent.qplus.THEME_INVALIDATE
com.tencent.qplus.THEME_UPDATE
com.tencent.qq.syncQQMessage
com.tencent.qqhead.getheadreq
com.tencent.qqmusic.ACTION_FREE_FLOW_INFO_REFRESH.QQMusicPhone
com.tencent.qqmusic.ACTION_META_CHANGED.QQMusicPhone
com.tencent.qqmusic.ACTION_SDCARD_STATE_CHANGED.QQMusicPhone
com.tencent.qqmusic.ACTION_SERVICE_REPAINT_WIDGET.QQMusicPhone
com.tencent.receiver.qfav.srvaddr
com.tencent.receiver.soso
com.tencent.redpoint.broadcast.push.av
com.tentcent.mobileqq.dpc.broadcast
com.xiaomi.push.service_started
download.app.DOWNLOAD_APP
event_checked_result
event_file_downloaded
event_update_begin
event_update_end
event_update_progress
finishNOOSN
home_search_enable
hotfix.action.update
huawei.intent.action.POWER_MODE_CHANGED_ACTION
miui.intent.action.NETWORK_BLOCKED
miui.intent.action.NETWORK_CONNECTED
mqq.intent.action.EXITcom.tencent.mobileqq
mqq.intent.action.LAUNCH_com.tencent.mobileqq
netAnaly.day.flow.collect
qqcomic.downloader.tasksfinished.broadcast
qy.player.core.type
sina.weibo.action.NOUSER
TAOBAO_DELAY_START_LOGIN
TAOBAO_DELAY_START_POWMSG
tencent.video.q2v.GroupSystemMsg
wifi.intent.action.INTERNET_ACCESS_ENABLED
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
android.intent.action.USER_PRESENT
android.intent.action.DATE_CHANGED
android.intent.action.ACTION_NEW_PICTURE
android.intent.action.ACTION_NEW_VIDEO
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.TIME_SET
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.ACTION_BATTERY_LOW
android.intent.action.ACTION_BATTERY_OKAY

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.inmobi.share.id

com.phone.incall.show.call.strategy.transfer.CallTransferReceiver

zeus_action_call_state_change

com.phone.incall.show.call.strategy.incallreceiver.CallBroadcastReceiver

android.intent.action.PHONE_STATE

com.mx.download.control.BroadcastControl

android.net.conn.CONNECTIVITY_CHANGE

Services

com.vlocker.ui.cover.LockerService

com.softmgr.sdk.ACTION_PRIORITY_SERVICE

com.vlocker.service.NotificationListener

android.service.notification.NotificationListenerService

com.vlocker.setting.SettingService

android.accessibilityservice.AccessibilityService

com.baidu.location.f

com.baidu.location.service_v2.2

com.vlocker.account.AccountSyncService

android.content.SyncAdapter

com.vlocker.account.AccountService

android.accounts.AccountAuthenticator

com.vlocker.v4.videolauncher.LockerWallpaperService

android.service.wallpaper.WallpaperService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.qc.eg.p.dl.DownloadService

com.qc.eg.sd.dl.DOWNLOAD_SERVICE

com.phone.incall.show.call.strategy.ui.floatwin.CallFloatShowService

com.call_action

com.phone.incall.show.call.strategy.notification.InCallNotificationService

android.service.notification.NotificationListenerService
5fe4de913497750d8d03b83f287cc55f
.apk android arch:arm

com.byted.pangle

com.bytedance.sdk.openadsdk.core.activity.base.TTWebPageActivity

Activities

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
com.asus.msa.SupplementaryDID.ACCESS

Receivers

Services
gdtadv2.jar
.apk android arch:arm64 arch:arm

Android Permissions

ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.REQUEST_INSTALL_PACKAGES

com.android.launcher3.permission.INSTALL_SHORTCUT

com.android.launcher3.permission.UNINSTALL_SHORTCUT

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

com.android.alarm.permission.SET_ALARM

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.BROADCAST_STICKY

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_ACCOUNTS

android.permission.REORDER_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.EXPAND_STATUS_BAR

android.permission.READ_SMS

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

android.permission.PACKAGE_USAGE_STATS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.FORCE_STOP_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

com.fingerprints.service.ACCESS_FINGERPRINT_MANAGER

android.permission.USE_FINGERPRINT

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

Sharing

General

Malware Config

Signatures

Files

com.vlocker.locker

com.vlocker.settings.LaunchActivity

Activities

com.vlocker.share.ShareActivity

com.vlocker.settings.SubSetingActivity

com.tencent.tauth.AuthActivity

com.vlocker.settings.SettingsActivity

com.vlocker.settings.LaunchActivity

com.vlocker.v4.video.activity.VideoDetailActivity

com.vlocker.v4.theme.activity.ThemeDetailsActivity

com.sina.weibo.sdk.share.WbShareResultActivity

com.qc.eg.open.QH5Activity

com.phone.incall.show.settings.show.CallShowSettingsActivity

Permissions

Receivers

com.vlocker.msg.McmPushReceiver

com.vlocker.receiver.UserPresentReceiver

com.vlocker.receiver.BootReceiver

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.phone.incall.show.call.strategy.transfer.CallTransferReceiver

com.phone.incall.show.call.strategy.incallreceiver.CallBroadcastReceiver

com.mx.download.control.BroadcastControl

Services

com.vlocker.ui.cover.LockerService

com.vlocker.service.NotificationListener

com.vlocker.setting.SettingService

com.baidu.location.f

com.vlocker.account.AccountSyncService

com.vlocker.account.AccountService

com.vlocker.v4.videolauncher.LockerWallpaperService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.qc.eg.p.dl.DownloadService

com.phone.incall.show.call.strategy.ui.floatwin.CallFloatShowService

com.phone.incall.show.call.strategy.notification.InCallNotificationService

com.byted.pangle

com.bytedance.sdk.openadsdk.core.activity.base.TTWebPageActivity

Activities

Permissions

Receivers

Services

Android Permissions

ba2e0493d003563c46a47c46f1edba6a70c85b541a81e17907ec50c015c33e4b