General

  • Target

    dfdbabfa486af70754fdc6043819f7822e787c5b7f2a0207e0178173a721310d

  • Size

    12.3MB

  • MD5

    ce4a50b8d131092e90f7c3b9f582881e

  • SHA1

    26d36fb5308838f82b74818526e40055e5176688

  • SHA256

    dfdbabfa486af70754fdc6043819f7822e787c5b7f2a0207e0178173a721310d

  • SHA512

    cb1509adba4cbd6c9dcac81e3fd798b9a447999bf3ebdbc3cdee904655c3c625c0c73518c016a25278dd4ceaf22fc08a0975168057d27e66d695781a6b2b9c08

  • SSDEEP

    196608:tSBMNY2dZxPuWGWt7Q7jA0MGL6sWfyNj9K9ahslyFbZhdzMS4LlLyXfltatme4DH:MBGYYXuE7EAG6s/K92sQnyfmne4D

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 5 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • dfdbabfa486af70754fdc6043819f7822e787c5b7f2a0207e0178173a721310d
    .apk android arch:arm arch:x86

    com.mobiletool.appstore

    com.sogou.androidtool.SplashActivity


  • clean_robot.apk
    .apk android

    com.sogou.clean.robot

    com.sogou.clean.robot.MainActivity


Android Permissions

dfdbabfa486af70754fdc6043819f7822e787c5b7f2a0207e0178173a721310d

Permissions

com.htc.launcher.permission.READ_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MANAGE_OWN_CALLS

android.permission.READ_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

org.adw.launcher_donut.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.WRITE_SETTINGS

com.huawei.launcher.permission.READ_SETTINGS

com.huawei.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.WRITE_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS