d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e

Sharing

Copy URL Twitter E-mail

General

Target

d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e
Size

9.8MB
MD5

b9c75afb994499b4e77f3d4193983254
SHA1

bcbf0992d80d82667efacdc2481745eacc2e48ff
SHA256

d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e
SHA512

9bacc734baebb652091446a636f86c9d8f9fa9bcc7897c1f9ca415541c8fa4e4be71936c803fffc375672fc4f7f0da82d56ba3a7cfdb52c51c54a2d0f0e20c4d
SSDEEP

196608:hpB+chOTy+NmgnKJX3zyqgBHiLPlS1h55DSzJ3bEmqY1NW+mdg1L:k+iyqTnKJOVBHmI7DSdoM1N5mS1L

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 5 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e
.apk android arch:arm

com.cleanmaster.security_cn

ks.cm.antivirus.main.SplashActivity

Activities

ks.cm.antivirus.scan.network.ui.CnWifiScanResultActivity

com.cleanmaster.security_cn.action.WIFI_SCAN

ks.cm.antivirus.feedback.CnFeedBackActivity

com.cleanmaster.security_cn.action.FEEDBACK

com.cleanmaster.applocklib.ui.main.AppLockMainActivity

android.intent.action.MAIN

ks.cm.antivirus.main.SplashActivity

android.intent.action.MAIN
ks.cm.antivirus.news

ks.cm.antivirus.scan.ScanMainActivity

ks.cm.applock.theme

ks.cm.antivirus.api.ActionRouterActivity

ks.cm.antivirus.launch
ks.cm.antivirus.query

ks.cm.antivirus.applock.protect.SecretBoxActivity

android.intent.action.MAIN

ks.cm.antivirus.applock.protect.bookmark.SecretBoxBookmarksShareActivity

android.intent.action.SEND

ks.cm.antivirus.applock.main.ui.AppLockMainActivity

android.intent.action.MAIN

ks.cm.antivirus.applock.ui.AppLockCnRecommendRouterActivity

cn.ks.cm.antivirus.launch
ks.cm.antivirus.query

ks.cm.antivirus.applock.ui.AppLockOAuthActivity

ks.cm.antivirus.applock.AppLockOAuthActivity.START

ks.cm.antivirus.scan.PrivateWebViewActivity

android.intent.action.VIEW

com.ijinshan.kbackup.activity.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

com.cleanmaster.applink.DeepLinkActivity

android.intent.action.VIEW

com.ijinshan.ShouJiKong.AndroidDaemon.ui.MainTabActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.ijinshan.ShouJiKong.AndroidDaemon.ui.search.SearchActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_COARSE_UPDATES
android.permission.BROADCAST_STICKY
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
android.permission.WRITE_INTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_SMS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.BATTERY_STATS
android.permission.WRITE_SMS
android.permission.WRITE_CALL_LOG
android.permission.WRITE_CONTACTS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.RECEIVE_WAP_PUSH
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
com.cleanmaster.security.permission.MAPS_RECEIVE
com.sec.android.provider.logsprovider.permission.READ_LOGS
com.sec.android.provider.logsprovider.permission.WRITE_LOGS
com.google.android.gms.permission.ACTIVITY_RECOGNITION
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
android.permission.PACKAGE_USAGE_STATS
android.permission.READ_EXTERNAL_STORAGE

Receivers

ks.cm.antivirus.applock.receiver.PhoneCallReceiver

android.intent.action.PHONE_STATE

ks.cm.antivirus.applock.receiver.AppLockReportReceiver

ks.cm.antivirus.applock.action.report

ks.cm.antivirus.applock.receiver.SecretBoxShortcutStatusReceiver

ks.cm.antivirus.applock.action.shortcut.status

ks.cm.antivirus.scheduletask.ScheduleTaskAlarmReceiver

ks.cm.antivirus.push2.task_execution

com.cmcm.locker.sdk.logic.FakeLockerReceiver

com.cmcm.intent.fake.action.LOCKER_ACTIVE

ks.cm.antivirus.utils.InstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

ks.cm.antivirus.utils.CMSDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
com.cmcm.locker.sdk.ACTION_PASSWORD_FAILED
com.cmcm.locker.sdk.ACTION_PASSWORD_SUCCEEDED

ks.cm.antivirus.watcher.ScanReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

ks.cm.antivirus.receiver.AutoRunReceiver

android.intent.action.BOOT_COMPLETED

ks.cm.antivirus.receiver.UserUnLockReceiver

android.intent.action.USER_PRESENT

ks.cm.antivirus.receiver.SmsFilterReceiver

android.provider.Telephony.SMS_RECEIVED

ks.cm.antivirus.widget.AppWidgetProviderControl

com.cleanmaster.security.ACTION_UPDATE_APPWIDGET
android.appwidget.action.APPWIDGET_UPDATE
ks.cm.antivirus.widget.ACTION_SAFE
ks.cm.antivirus.widget.ACTION_RISK
ks.cm.antivirus.widget.ACTION_DANGER
ks.cm.antivirus.widget.ACTION_DESTROY

ks.cm.antivirus.applock.widget.AppLockWidgetProviderControl

android.appwidget.action.APPWIDGET_UPDATE
ks.cm.antivirus.applock.widget.ACTION_ENABLE
ks.cm.antivirus.applock.widget.ACTION_DISABLE

com.ijinshan.kbackup.receiver.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.ijinshan.kbackup.receiver.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.ijinshan.user.core.sdk.ssologin.LoginCheckReceiver

com.ijinshan.user.ssocheck

com.kbackup.AutoBackupReceiver

com.ijinshan.cmbackupsdk.autobackup

ks.cm.antivirus.notification.NotificationDismissReceiver

ks.cm.antivirus.notification.action.cancel

com.ijinshan.screensavershared.ScreenSaverNullReceiver

com.ijinshan.screensaveshared.StartUIProcess

com.ijinshan.screensavershared.mutual.CharingSaverStateReceiver

com.charingsaver.state.action

ks.cm.antivirus.receiver.DummyPackageReceiver

android.intent.action.PACKAGE_REPLACED

ks.cm.antivirus.applock.sdkrule.AppLockActiveReceiver

com.cleanmaster.applocklib.intent.receiver.APPLOCK_ACTIVE

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.BootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.AlarmUpdateReceiver

android.net.jinshan.appupdate.alarm
com.ijinshan.action.selfupgrade.alarm
com.ijinshan.action.cache.alarm

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.CAppEventReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_RESTARTED

Services

com.ijinshan.duba.service.PcConnectService

com.cleanmaster.security_cn.service.PcConnectServicex

ks.cm.antivirus.defend.DefendService

ks.cm.antivirus.defend.DefendService.RESTART
ks.cm.antivirus.remotedata.IRemoteDataBinder.SECURITY
ks.cm.antivirus.ibattery.interfaces.IBatteryClient.SECURITY
ks.cm.antivirus.notification.NotificationClient.SECURITY
ks.cm.antivirus.ad.replace.AdReplaceAction.SECURITY

ks.cm.antivirus.applock.service.AppLockService

ks.cm.antivirus.applock.service.takepicture
ks.cm.antivirus.applock.service.endservice

ks.cm.antivirus.applock.service.NotificationMonitorService

android.service.notification.NotificationListenerService

ks.cm.antivirus.defend.CrashReportService

com.cleanmaster.security.crash.report

ks.cm.antivirus.neweng.service.ScanService

ks.cm.antivirus.watcher.ACTION_EXAM.SECURITY

ks.cm.antivirus.api.CMSecurityAPIService

ks.cm.antivirus.api.SECURITY

com.locker.sdk.service.CMLockerSDKService

action_cmlocker_service_start
action_cmlocker_service_stop
action_accessibility_service_connection

com.cmcm.locker.sdk.logic.service.NotificationListener

android.service.notification.NotificationListenerService
cmlocker_sdk_action_bind_locker_service

com.cmcm.locker.sdk.logic.service.NotifyAccessibilityService

android.accessibilityservice.AccessibilityService

com.ijinshan.kbackup.service.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE

ks.cm.antivirus.wallpaper.KLiveWallPaperService

android.service.wallpaper.WallpaperService

ks.cm.antivirus.applock.service.AppLockAccessibilityService

android.accessibilityservice.AccessibilityService

ks.cm.antivirus.applock.service.AppLockAccessibilityServicePreJB

android.accessibilityservice.AccessibilityService

com.ijinshan.ShouJiKong.AndroidDaemon.ui.push.WebViewService

com.ijinshan.ShouJiKong.AndroidDaemon.action.web_service

com.ijinshan.ShouJiKong.AndroidDaemon.AppDaemonService

com.ijinshan.ShouJiKong.AndroidDaemon.action.APP_SERVICE
ap.dex
.apk android
appupgrade.dex
.apk android
dbcompt.dex
.apk android
gdtad.jar
.apk android

Android Permissions

d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e

Permissions

android.permission.ACCESS_COARSE_UPDATES

android.permission.BROADCAST_STICKY

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

android.permission.WRITE_INTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_SMS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.BATTERY_STATS

android.permission.WRITE_SMS

android.permission.WRITE_CALL_LOG

android.permission.WRITE_CONTACTS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.RECEIVE_WAP_PUSH

Sharing

General

Malware Config

Signatures

Files

com.cleanmaster.security_cn

ks.cm.antivirus.main.SplashActivity

Activities

ks.cm.antivirus.scan.network.ui.CnWifiScanResultActivity

ks.cm.antivirus.feedback.CnFeedBackActivity

com.cleanmaster.applocklib.ui.main.AppLockMainActivity

ks.cm.antivirus.main.SplashActivity

ks.cm.antivirus.scan.ScanMainActivity

ks.cm.antivirus.api.ActionRouterActivity

ks.cm.antivirus.applock.protect.SecretBoxActivity

ks.cm.antivirus.applock.protect.bookmark.SecretBoxBookmarksShareActivity

ks.cm.antivirus.applock.main.ui.AppLockMainActivity

ks.cm.antivirus.applock.ui.AppLockCnRecommendRouterActivity

ks.cm.antivirus.applock.ui.AppLockOAuthActivity

ks.cm.antivirus.scan.PrivateWebViewActivity

com.ijinshan.kbackup.activity.ComposeSmsActivity

com.cleanmaster.applink.DeepLinkActivity

com.ijinshan.ShouJiKong.AndroidDaemon.ui.MainTabActivity

com.ijinshan.ShouJiKong.AndroidDaemon.ui.search.SearchActivity

Permissions

Receivers

ks.cm.antivirus.applock.receiver.PhoneCallReceiver

ks.cm.antivirus.applock.receiver.AppLockReportReceiver

ks.cm.antivirus.applock.receiver.SecretBoxShortcutStatusReceiver

ks.cm.antivirus.scheduletask.ScheduleTaskAlarmReceiver

com.cmcm.locker.sdk.logic.FakeLockerReceiver

ks.cm.antivirus.utils.InstallReferrerReceiver

ks.cm.antivirus.utils.CMSDeviceAdminReceiver

ks.cm.antivirus.watcher.ScanReceiver

ks.cm.antivirus.receiver.AutoRunReceiver

ks.cm.antivirus.receiver.UserUnLockReceiver

ks.cm.antivirus.receiver.SmsFilterReceiver

ks.cm.antivirus.widget.AppWidgetProviderControl

ks.cm.antivirus.applock.widget.AppLockWidgetProviderControl

com.ijinshan.kbackup.receiver.MmsReceiver

com.ijinshan.kbackup.receiver.SmsReceiver

com.ijinshan.user.core.sdk.ssologin.LoginCheckReceiver

com.kbackup.AutoBackupReceiver

ks.cm.antivirus.notification.NotificationDismissReceiver

com.ijinshan.screensavershared.ScreenSaverNullReceiver

com.ijinshan.screensavershared.mutual.CharingSaverStateReceiver

ks.cm.antivirus.receiver.DummyPackageReceiver

ks.cm.antivirus.applock.sdkrule.AppLockActiveReceiver

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.BootBroadcastReceiver

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.AlarmUpdateReceiver

com.ijinshan.ShouJiKong.AndroidDaemon.boardcast.CAppEventReceiver

Services

com.ijinshan.duba.service.PcConnectService

ks.cm.antivirus.defend.DefendService

ks.cm.antivirus.applock.service.AppLockService

ks.cm.antivirus.applock.service.NotificationMonitorService

ks.cm.antivirus.defend.CrashReportService

ks.cm.antivirus.neweng.service.ScanService

ks.cm.antivirus.api.CMSecurityAPIService

com.locker.sdk.service.CMLockerSDKService

com.cmcm.locker.sdk.logic.service.NotificationListener

com.cmcm.locker.sdk.logic.service.NotifyAccessibilityService

com.ijinshan.kbackup.service.HeadlessSmsSendService

ks.cm.antivirus.wallpaper.KLiveWallPaperService

ks.cm.antivirus.applock.service.AppLockAccessibilityService

ks.cm.antivirus.applock.service.AppLockAccessibilityServicePreJB

com.ijinshan.ShouJiKong.AndroidDaemon.ui.push.WebViewService

com.ijinshan.ShouJiKong.AndroidDaemon.AppDaemonService

Android Permissions

d96a6385274066ac068ea26cf4e89bb06de7223351b2116231d827bbe09f230e