General

  • Target

    ef88eb802a71fc88d4b5aee1bf5a85cf2400f47d4b2faa16f808f4c8be105387

  • Size

    12.4MB

  • MD5

    efae5e9ad915224878f0aa062e33ae8a

  • SHA1

    a5d9aa91eaf795505e73293b8a5265d481fb09c4

  • SHA256

    ef88eb802a71fc88d4b5aee1bf5a85cf2400f47d4b2faa16f808f4c8be105387

  • SHA512

    a4b221e8c61968952bc50653a66d817090e00d5b62bdfa9600501e20299a0262b9c9ff147fac9c253602f0892d4b355d00e8a0c3024fba3735294562208807d6

  • SSDEEP

    196608:sgm6SBMNY2dZxPuWGWt7QGjA0MGL6sWFv63QgUHhBlyFJV5xqYFszj4VYdawjk8/:s5vBGYYXuE7FAG6sSgUBByrDinlp4JK

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 5 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • ef88eb802a71fc88d4b5aee1bf5a85cf2400f47d4b2faa16f808f4c8be105387
    .apk android arch:arm arch:x86

    com.mobiletool.appstore

    com.sogou.androidtool.SplashActivity


  • clean_robot.apk
    .apk android

    com.sogou.clean.robot

    com.sogou.clean.robot.MainActivity


Android Permissions

ef88eb802a71fc88d4b5aee1bf5a85cf2400f47d4b2faa16f808f4c8be105387

Permissions

com.htc.launcher.permission.READ_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ANSWER_PHONE_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MANAGE_OWN_CALLS

android.permission.READ_CALL_LOG

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

org.adw.launcher_donut.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

com.sec.android.app.twlauncher.settings.READ_SETTINGS

com.sec.android.app.twlauncher.settings.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.WRITE_SETTINGS

com.huawei.launcher.permission.READ_SETTINGS

com.huawei.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.WRITE_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS