c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368

Sharing

Copy URL Twitter E-mail

General

Target

c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368
Size

6.8MB
MD5

941fdd0de764788c2db39979c2a585c1
SHA1

e9ac62f818f9607d0abca485b23309fd03e67fbf
SHA256

c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368
SHA512

57f05175c97b533772bd1bc97dc87f1f0abd70d65bf41dd6c9154ebe741b7340b8ba16fb79a390ccc3522bcb0e09b602cfec69339b6486889dccb509ab04288c
SSDEEP

196608:exp+wnyULoUU7F2xxbBptObLG4ocEVcOQ7SwpFn/agQHzI1lGtKFt0hNG4SJN+aN:w+wnyyob7F2xxbBptObLG4ocEVcOQ7S+

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368
.apk android arch:arm arch:mips arch:x86

com.when.coco

.Login

Activities

.Login

android.intent.action.MAIN
android.intent.action.VIEW

.share.ShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

.LinkListener

android.intent.action.VIEW

.ScheduleEdit

android.intent.action.MAIN
com.when.coco.create

.ScheduleDetail

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.when.coco.widget.AppWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.WeatherScheduleConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.WeatherNumClockWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.when.coco.widget.ComplexViewConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

.DataProviderActivity

android.intent.action.VIEW

Permissions

android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.READ_PHONE_STATE
android.permission.READ_CONTACTS
android.permission.INTERNET
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.REORDER_TASKS
android.permission.GET_TASKS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.RESTART_PACKAGES
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_USER_PRESENT
android.permission.KILL_BACKGROUND_PROCESSES

Receivers

.receiver.UploadReceiver

coco.action.schedule.upload_image

.receiver.ServiceReceiver

android.intent.action.BOOT_COMPLETED
com.when.action.Restart_Service

.receiver.SyncReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.when.android.action.sync365
coco.action.schedule.update
coco.action.birthday.update
coco.action.note.update

.receiver.AlarmReceiver

com.coco.ALARM_ALERT
coco.action.ALARM_DAY

.receiver.AlarmInitReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

.receiver.StatReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE

.receiver.NotifyDateReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.DATE_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
coco.action.schedule.update
coco.action.after.logout
coco.action.after.login.widget.update
coco.action.notify.week.calendar.update

com.when.birthday.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.when.birthday.receiver.LogOutReceiver

coco.action.after.logout

com.when.birthday.receiver.TimeSetReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.when.android.calendar365.messagebox.MessageLogReceiver

coco.action.after.logout

com.when.coco.receiver.WidgetReceiver

android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
coco.action.theme.changed
coco.action.after.logout
coco.action.after.login.widget.update
coco.action.after.login
coco.action.theme.setup.bg.changed
coco.action.WEATHER_UPDATE
coco.action.unsubscribe.calendar
coco.action.instance.update
coco.action.delete.schedule
coco.action.weather.add.delete.sequence.update
coco.action.schedule.update
coco.action.note.update
coco.action.calendar.has_new_theme
coco.action.subscribe.huangli.calendar
coco.action.calendar.sequence.update

com.when.coco.widget.Widget4x3

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.FIRST_SELECTOR_WIDGET
com.when.coco.TWO_SELECTOR_WIDGET
com.when.coco.THREE_SELECTOR_WIDGET
coco.action.firstday.change

com.when.coco.widget.WeatherScheduleWidget4x3

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.WeatherScheduleWidget4x3.SETUP
com.when.coco.widget.WeatherScheduleWidget4x3.UPDATE_WIDGET_UP_DAY
com.when.coco.widget.WeatherScheduleWidget4x3.UPDATE_WIDGET_DOWN_DAY
com.when.coco.widget.COLLECTION_VIEW_EXTRA

.widget.WeatherNumberClockWidget4x2

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET

com.when.coco.widget.ComplexViewWidget4x4

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.widget.ComplexViewWidget4x4.UPDATE_WIDGET_UP_DAY
com.when.coco.widget.ComplexViewWidget4x4.UPDATE_WIDGET_DOWN_DAY
com.when.coco.widget.ComplexViewWidget4x4.TODAY
com.when.coco.widget.ComplexViewWidget4x4.TOMORROW
com.when.coco.widget.ComplexViewWidget4x4.WEEK
com.when.coco.widget.ComplexViewWidget4x4.MONTH
com.when.coco.widget.COLLECTION_VIEW_EXTRA
coco.action.firstday.change

com.when.coco.widget.Widget1x1

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.when.coco.FIRST_SELECTOR_WIDGET
com.when.coco.TWO_SELECTOR_WIDGET
com.when.coco.THREE_SELECTOR_WIDGET

com.when.coco.widget.Widget4x1

android.appwidget.action.APPWIDGET_UPDATE
com.android.UPDATE_WIDGET
com.whem.coco.huangli.toast

com.when.calslq.receiver.NetStateReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.DATE_CHANGED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

com.tencent.android.tpush.XGPushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
com.tencent.android.tpush.action.SDK
android.intent.action.USER_PRESENT
com.tencent.android.tpush.action.INTERNAL_PUSH_MESSAGE

com.when.coco.receiver.XGPushReceiver

com.tencent.android.tpush.action.PUSH_MESSAGE
com.tencent.android.tpush.action.FEEDBACK

Services

Android Permissions

c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368

Permissions

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.READ_CONTACTS

android.permission.INTERNET

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.REORDER_TASKS

android.permission.GET_TASKS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_WIFI_STATE

android.permission.RESTART_PACKAGES

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.KILL_BACKGROUND_PROCESSES

Sharing

General

Malware Config

Signatures

Files

com.when.coco

.Login

Activities

.Login

.share.ShareActivity

.LinkListener

.ScheduleEdit

.ScheduleDetail

com.tencent.tauth.AuthActivity

com.when.coco.widget.AppWidgetConfigure

com.when.coco.widget.WeatherScheduleConfigure

com.when.coco.widget.WeatherNumClockWidgetConfigure

com.when.coco.widget.ComplexViewConfigure

.DataProviderActivity

Permissions

Receivers

.receiver.UploadReceiver

.receiver.ServiceReceiver

.receiver.SyncReceiver

.receiver.AlarmReceiver

.receiver.AlarmInitReceiver

.receiver.StatReceiver

.receiver.NotifyDateReceiver

com.when.birthday.receiver.BootReceiver

com.when.birthday.receiver.LogOutReceiver

com.when.birthday.receiver.TimeSetReceiver

com.when.android.calendar365.messagebox.MessageLogReceiver

com.when.coco.receiver.WidgetReceiver

com.when.coco.widget.Widget4x3

com.when.coco.widget.WeatherScheduleWidget4x3

.widget.WeatherNumberClockWidget4x2

com.when.coco.widget.ComplexViewWidget4x4

com.when.coco.widget.Widget1x1

com.when.coco.widget.Widget4x1

com.when.calslq.receiver.NetStateReceiver

com.tencent.android.tpush.XGPushReceiver

com.when.coco.receiver.XGPushReceiver

Services

Android Permissions

c58e2eaecee565b45e9ba00e158e4db3d8ec696b2c0745d12d1702a3e1afe368