cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b

General

Target

cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b
Size

21.1MB
MD5

02ecbae7a6105f37d3824f6156cb01fd
SHA1

c7d05989c72649cf596ce575d9ff8ad20757b977
SHA256

cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b
SHA512

b8ed74f5bff9359de457663769057d8477c457e163dc49549db9a9246ce8a4fa2c65bb3aa9e807a01fcbcef108c9e0212bbb04510f238425fb5c6082cd5af2f6
SSDEEP

196608:JnwKAC9YV0MK7lvl1EfWq/rdYgxQnmmxBr8Q7XTD+DGmMJZvkH0kA:WKi0/1XqzdYganc4DSD/MvLkA

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b
.apk android arch:arm64 arch:arm

com.sec.android.app.launches

com.android.launcher3.Launcher

Activities

com.android.launcher3.dragndrop.AddItemActivity

android.content.pm.action.CONFIRM_PIN_SHORTCUT
android.content.pm.action.CONFIRM_PIN_APPWIDGET

com.android.homescreen.settings.HomeScreenSettingsActivity

com.sec.android.intent.action.SEC_APPLICATION_SETTINGS

com.android.launcher3.Launcher

android.intent.action.MAIN
android.intent.action.SEARCH

com.android.launcher3.SecondaryDisplayLauncher

android.intent.action.MAIN

Permissions

android.permission.CALL_PHONE
android.permission.CALL_PRIVILEGED
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.BIND_APPWIDGET
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_DELETE_PACKAGES
android.permission.CHANGE_COMPONENT_ENABLED_STATE
com.sec.permission.BACKUP_RESTORE_HOMESCREEN
com.wssnps.permission.COM_WSSNPS
android.permission.READ_CONTACTS
com.samsung.android.scloud.backup.lib.read
com.samsung.android.scloud.backup.lib.write
com.samsung.android.game.gamehome.permission.READ_CONTENT
com.samsung.android.game.gamehome.permission.ENABLE_GAMEHOME
com.samsung.android.launcher.permission.READ_SETTINGS
com.samsung.android.launcher.permission.WRITE_SETTINGS
com.samsung.android.app.cocktailbarservice.permission.EDGE_HANDLER_STATE
com.samsung.android.app.spage.permission.BIND_PAGE_OVERLAY
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.samsung.applock.permission.STATUSCHANGED
com.samsung.applock.permission.STATUS_UPDATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_SECURE_SETTINGS
android.permission.INTERACT_ACROSS_USERS
com.sec.spp.permission.TOKEN_7a5f804cc262287eb04533c2710ab9c40b22378608c41d3e29d3fe2678dccb7ce0ed0c13536e26c1bde6e5f948c38e9b975760411845759105efee6182daf180cdf23b755c8f20fb644ef8e7413a7337006448970f9aced3765a1b15cf1a622e3f817e6ec97b38896ab236492830a8f510826f14cbcb839c1d832837f4e592ed
android.permission.MANAGE_ACTIVITY_STACKS
android.permission.PACKAGE_USAGE_STATS
android.permission.CONTROL_REMOTE_APP_TRANSITION_ANIMATIONS
com.samsung.android.app.omcagent.permission.READ_PROVIDER
com.samsung.android.app.pad.permission.READ_PROVIDER
com.samsung.android.app.pad.permission.WRITE_PROVIDER
com.sec.android.app.launches.permission.READ_SETTINGS
com.sec.android.app.launches.permission.WRITE_SETTINGS
com.sec.android.stk.permission.EVENT
com.sec.android.diagmonagent.permission.DIAGMON
com.sec.android.diagmonagent.permission.PROVIDER
android.permission.READ_PHONE_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.PACKAGE_USAGE_STATS
com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER
com.samsung.android.rubin.persona.permission.READ_PERSONA_MANAGER
com.samsung.android.rubin.app.ui.permission.LAUNCH_RUBIN_SETTING
android.permission.VIBRATE
com.samsung.android.permission.SSRM_NOTIFICATION_PERMISSION
com.samsung.android.permission.ADD_PAIR_APP_SHORTCUT
android.permission.READ_LOGS
android.permission.FLASHLIGHT
net.dinglisch.android.tasker.PERMISSION_RUN_TASKS
android.permission.BLUETOOTH_ADMIN
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.USE_FINGERPRINT
android.permission.ACCESS_WIFI_STATE
android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_NOTIFICATION_POLICY android.permission.BIND_APPWIDGET android.permission.BROADCAST_STICKY android.permission.CALL_PRIVILEGED android.permission.CHANGE_COMPONENT_ENABLED_STATE android.permission.CONTROL_REMOTE_APP_TRANSITION_ANIMATIONS android.permission.EXPAND_STATUS_BAR android.permission.FORCE_STOP_PACKAGES android.permission.INTERACT_ACROSS_USERS android.permission.INTERNET android.permission.MANAGE_ACTIVITY_STACKS android.permission.MANAGE_USERS android.permission.PACKAGE_USAGE_STATS android.permission.READ_CONTACTS android.permission.READ_EXTERNAL_STORAGE android.permission.READ_WALLPAPER_INTERNAL android.permission.RECEIVE_BOOT_COMPLETED android.permission.REQUEST_DELETE_PACKAGES android.permission.VIBRATE android.permission.VIEW_INSTANT_APPS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WRITE_SECURE_SETTINGS android.permission.WRITE_SETTINGS com.samsung.android.app.omcagent.permission.READ_PROVIDER com.samsung.android.app.pad.permission.READ_PROVIDER com.samsung.android.app.pad.permission.WRITE_PROVIDER com.samsung.android.app.spage.permission.BIND_PAGE_OVERLAY com.samsung.android.app.spage.permission.READ_NOTIFICATION_STATUS com.samsung.android.game.gamehome.permission.ENABLE_GAMEHOME com.samsung.android.game.gamehome.permission.READ_CONTENT com.samsung.android.knox.container.permission.MANAGED_PROFILE_REFRESH com.samsung.android.launcher.permission.CHANGE_HOMEONLYMODE com.samsung.android.launcher.permission.READ_SETTINGS com.samsung.android.launcher.permission.WRITE_SETTINGS com.samsung.android.permission.ADD_PAIR_APP_SHORTCUT com.samsung.android.permission.SSRM_NOTIFICATION_PERMISSION com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY com.samsung.android.rubin.app.ui.permission.LAUNCH_RUBIN_SETTING com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER com.samsung.android.rubin.persona.permission.READ_PERSONA_MANAGER com.samsung.android.scloud.backup.lib.read com.samsung.android.scloud.backup.lib.write com.samsung.android.virtualscreen.permission.MANAGE_VIRTUAL_SCREEN com.samsung.applock.permission.STATUSCHANGED com.samsung.applock.permission.STATUS_UPDATE com.samsung.systemui.permission.DRAGANDDROP com.sec.android.app.desktoplauncher.permission.READ_SETTINGS com.sec.android.daemonapp.ap.accuweather.ACCUWEATHER_DAEMON_ACCESS_PROVIDER com.sec.android.diagmonagent.permission.DIAGMON com.sec.android.diagmonagent.permission.PROVIDER com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.sec.android.stk.permission.EVENT com.sec.knox.APK_INSTALL_LWC com.sec.permission.BACKUP_RESTORE_HOMESCREEN com.sec.spp.permission.TOKEN_7a5f804cc262287eb04533c2710ab9c40b22378608c41d3e29d3fe2678dccb7ce0ed0c13536e26c1bde6e5f948c38e9b975760411845759105efee6182daf180cdf23b755c8f20fb644ef8e7413a7337006448970f9aced3765a1b15cf1a622e3f817e6ec97b38896ab236492830a8f510826f14cbcb839c1d832837f4e592ed com.wssnps.permission.COM_WSSNPS

Receivers

com.android.launcher3.InstallShortcutReceiver

com.android.launcher.action.INSTALL_SHORTCUT

com.android.launcher3.SessionCommitReceiver

android.content.pm.action.SESSION_COMMITTED

com.android.launcher3.AppWidgetsRestoredReceiver

android.appwidget.action.APPWIDGET_HOST_RESTORED

com.android.homescreen.bnr.SmartSwitchBnr

com.sec.android.intent.action.REQUEST_BACKUP_HOMELAYOUT
com.sec.android.intent.action.REQUEST_RESTORE_HOMELAYOUT
com.samsung.knox.securefolder.REQUEST_BACKUP_HOMESCREEN_LAYOUT
com.samsung.knox.securefolder.REQUEST_RESTORE_HOMESCREEN_LAYOUT

com.android.homescreen.bnr.RestoreContactShortcutReceiver

com.samsung.android.launcher.action.RESTORE_CONTACT_SHORTCUT

com.android.homescreen.model.provider.sprintid.ChameleonUpdateReceiver

com.samsung.intent.action.CSC_CHAMELEON_UPDATE_LAUNCHER

com.android.homescreen.shortcut.UnInstallShortcutReceiver

com.android.launcher.action.UNINSTALL_SHORTCUT

com.applisto.appcloner.classes.FakeCamera$FakeCameraReceiver

com.applisto.appcloner.action.FAKE_CAMERA_SELECT_CAMERA_PICTURE
com.applisto.appcloner.action.FAKE_CAMERA_ROTATE_CLOCKWISE
com.applisto.appcloner.action.FAKE_CAMERA_ROTATE_ANTI_CLOCKWISE

Services

com.android.launcher3.notification.NotificationListener

android.service.notification.NotificationListenerService

com.android.quickstep.TouchInteractionService

android.intent.action.QUICKSTEP_SERVICE

Android Permissions

cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b

Permissions

android.permission.CALL_PHONE

android.permission.CALL_PRIVILEGED

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.BIND_APPWIDGET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REQUEST_DELETE_PACKAGES

android.permission.CHANGE_COMPONENT_ENABLED_STATE

com.sec.permission.BACKUP_RESTORE_HOMESCREEN

com.wssnps.permission.COM_WSSNPS

android.permission.READ_CONTACTS

com.samsung.android.scloud.backup.lib.read

com.samsung.android.scloud.backup.lib.write

com.samsung.android.game.gamehome.permission.READ_CONTENT

com.samsung.android.game.gamehome.permission.ENABLE_GAMEHOME

com.samsung.android.launcher.permission.READ_SETTINGS

com.samsung.android.launcher.permission.WRITE_SETTINGS

com.samsung.android.app.cocktailbarservice.permission.EDGE_HANDLER_STATE

com.samsung.android.app.spage.permission.BIND_PAGE_OVERLAY

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.samsung.applock.permission.STATUSCHANGED

com.samsung.applock.permission.STATUS_UPDATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_SECURE_SETTINGS

android.permission.INTERACT_ACROSS_USERS

com.sec.spp.permission.TOKEN_7a5f804cc262287eb04533c2710ab9c40b22378608c41d3e29d3fe2678dccb7ce0ed0c13536e26c1bde6e5f948c38e9b975760411845759105efee6182daf180cdf23b755c8f20fb644ef8e7413a7337006448970f9aced3765a1b15cf1a622e3f817e6ec97b38896ab236492830a8f510826f14cbcb839c1d832837f4e592ed

android.permission.MANAGE_ACTIVITY_STACKS

android.permission.PACKAGE_USAGE_STATS

android.permission.CONTROL_REMOTE_APP_TRANSITION_ANIMATIONS

com.samsung.android.app.omcagent.permission.READ_PROVIDER

com.samsung.android.app.pad.permission.READ_PROVIDER

com.samsung.android.app.pad.permission.WRITE_PROVIDER

com.sec.android.app.launches.permission.READ_SETTINGS

com.sec.android.app.launches.permission.WRITE_SETTINGS

com.sec.android.stk.permission.EVENT

com.sec.android.diagmonagent.permission.DIAGMON

com.sec.android.diagmonagent.permission.PROVIDER

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.PACKAGE_USAGE_STATS

com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER

com.samsung.android.rubin.persona.permission.READ_PERSONA_MANAGER

com.samsung.android.rubin.app.ui.permission.LAUNCH_RUBIN_SETTING

android.permission.VIBRATE

com.samsung.android.permission.SSRM_NOTIFICATION_PERMISSION

com.samsung.android.permission.ADD_PAIR_APP_SHORTCUT

android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_NOTIFICATION_POLICY android.permission.BIND_APPWIDGET android.permission.BROADCAST_STICKY android.permission.CALL_PRIVILEGED android.permission.CHANGE_COMPONENT_ENABLED_STATE android.permission.CONTROL_REMOTE_APP_TRANSITION_ANIMATIONS android.permission.EXPAND_STATUS_BAR android.permission.FORCE_STOP_PACKAGES android.permission.INTERACT_ACROSS_USERS android.permission.INTERNET android.permission.MANAGE_ACTIVITY_STACKS android.permission.MANAGE_USERS android.permission.PACKAGE_USAGE_STATS android.permission.READ_CONTACTS android.permission.READ_EXTERNAL_STORAGE android.permission.READ_WALLPAPER_INTERNAL android.permission.RECEIVE_BOOT_COMPLETED android.permission.REQUEST_DELETE_PACKAGES android.permission.VIBRATE android.permission.VIEW_INSTANT_APPS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WRITE_SECURE_SETTINGS android.permission.WRITE_SETTINGS com.samsung.android.app.omcagent.permission.READ_PROVIDER com.samsung.android.app.pad.permission.READ_PROVIDER com.samsung.android.app.pad.permission.WRITE_PROVIDER com.samsung.android.app.spage.permission.BIND_PAGE_OVERLAY com.samsung.android.app.spage.permission.READ_NOTIFICATION_STATUS com.samsung.android.game.gamehome.permission.ENABLE_GAMEHOME com.samsung.android.game.gamehome.permission.READ_CONTENT com.samsung.android.knox.container.permission.MANAGED_PROFILE_REFRESH com.samsung.android.launcher.permission.CHANGE_HOMEONLYMODE com.samsung.android.launcher.permission.READ_SETTINGS com.samsung.android.launcher.permission.WRITE_SETTINGS com.samsung.android.permission.ADD_PAIR_APP_SHORTCUT com.samsung.android.permission.SSRM_NOTIFICATION_PERMISSION com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY com.samsung.android.rubin.app.ui.permission.LAUNCH_RUBIN_SETTING com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER com.samsung.android.rubin.persona.permission.READ_PERSONA_MANAGER com.samsung.android.scloud.backup.lib.read com.samsung.android.scloud.backup.lib.write com.samsung.android.virtualscreen.permission.MANAGE_VIRTUAL_SCREEN com.samsung.applock.permission.STATUSCHANGED com.samsung.applock.permission.STATUS_UPDATE com.samsung.systemui.permission.DRAGANDDROP com.sec.android.app.desktoplauncher.permission.READ_SETTINGS com.sec.android.daemonapp.ap.accuweather.ACCUWEATHER_DAEMON_ACCESS_PROVIDER com.sec.android.diagmonagent.permission.DIAGMON com.sec.android.diagmonagent.permission.PROVIDER com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.sec.android.stk.permission.EVENT com.sec.knox.APK_INSTALL_LWC com.sec.permission.BACKUP_RESTORE_HOMESCREEN com.sec.spp.permission.TOKEN_7a5f804cc262287eb04533c2710ab9c40b22378608c41d3e29d3fe2678dccb7ce0ed0c13536e26c1bde6e5f948c38e9b975760411845759105efee6182daf180cdf23b755c8f20fb644ef8e7413a7337006448970f9aced3765a1b15cf1a622e3f817e6ec97b38896ab236492830a8f510826f14cbcb839c1d832837f4e592ed com.wssnps.permission.COM_WSSNPS

Sharing

General

Malware Config

Signatures

Files

com.sec.android.app.launches

com.android.launcher3.Launcher

Activities

com.android.launcher3.dragndrop.AddItemActivity

com.android.homescreen.settings.HomeScreenSettingsActivity

com.android.launcher3.Launcher

com.android.launcher3.SecondaryDisplayLauncher

Permissions

Receivers

com.android.launcher3.InstallShortcutReceiver

com.android.launcher3.SessionCommitReceiver

com.android.launcher3.AppWidgetsRestoredReceiver

com.android.homescreen.bnr.SmartSwitchBnr

com.android.homescreen.bnr.RestoreContactShortcutReceiver

com.android.homescreen.model.provider.sprintid.ChameleonUpdateReceiver

com.android.homescreen.shortcut.UnInstallShortcutReceiver

com.applisto.appcloner.classes.FakeCamera$FakeCameraReceiver

Services

com.android.launcher3.notification.NotificationListener

com.android.quickstep.TouchInteractionService

Android Permissions

cdba45fc490fe6e49f19da472440d4e1524b8b092efc2814e24673c00627287b