General

  • Target

    e11784fbebcf5610eab15c58cc4a37e445c3db3168e33a6d2e1c2cc6b4a33dd2

  • Size

    12.4MB

  • MD5

    215f03bc9ea0913b9716801f3d401271

  • SHA1

    d8d9451a37043912bcd7297060bd1b4328632252

  • SHA256

    e11784fbebcf5610eab15c58cc4a37e445c3db3168e33a6d2e1c2cc6b4a33dd2

  • SHA512

    df39e7e396bd94346ec20202d6325a568647ad3cb84f20f56a7a6ff351406f3fd4faaca3326376b73c542bf91e9309f8793389706cc2e9093258fd46ba645840

  • SSDEEP

    196608:3jWQDRSEb+hAM9KLkw1Bp2X5odjA0MGL6sW1onJiruIm9hHlyFaNZVfEnn6DXCna:3d4PcAGBEX2AG6sXTIm7HhTe2e3K42

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 5 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • e11784fbebcf5610eab15c58cc4a37e445c3db3168e33a6d2e1c2cc6b4a33dd2
    .apk android arch:arm arch:x86

    com.mobiletool.appstore

    com.sogou.androidtool.SplashActivity


  • clean_robot.apk
    .apk android

    com.sogou.clean.robot

    com.sogou.clean.robot.MainActivity


Android Permissions

e11784fbebcf5610eab15c58cc4a37e445c3db3168e33a6d2e1c2cc6b4a33dd2

Permissions

com.htc.launcher.permission.READ_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MANAGE_OWN_CALLS

android.permission.READ_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

org.adw.launcher_donut.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.WRITE_SETTINGS

com.huawei.launcher.permission.READ_SETTINGS

com.huawei.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.WRITE_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS