04432d0c8f5b06c1403eb642b17e1e24

General

Target

04432d0c8f5b06c1403eb642b17e1e24
Size

1.3MB
MD5

04432d0c8f5b06c1403eb642b17e1e24
SHA1

f43ef8d1b5919d74b1797f7b775eace22f2d2190
SHA256

dd87693110db36c9fd2641cd2ceffcef7b5fb267bc93ee86b6bfd256d6b839a8
SHA512

c3fb30b675903c7733242c86db93b4af0cd4c86e164b453ee203a69b180ddf239e83ad0ae0295ca08f30998597ffeab603d5f7f968abc77bc15fd4ce41db64cb
SSDEEP

24576:ql2fw7UKU+wHWrxnL5BMAHml21FKqeKYI9jxeFq1euag81hxBrarRYxF:WQtKNwHq9LkcFKqeDI9teF3BBrIRW

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

04432d0c8f5b06c1403eb642b17e1e24
.apk android arch:arm

com.netword

.SplashActivity

Activities

.SplashActivity

android.intent.action.MAIN
android.intent.action.CALL_BUTTON

com.netword.StratActivity

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.CALL_PHONE

Receivers

com.netword.service.BootBroadcastReceiver

com.dbjtech.waiqin.destroy
android.intent.action.BOOT_COMPLETED

Services

Android Permissions

04432d0c8f5b06c1403eb642b17e1e24

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

Files

com.netword

.SplashActivity

Activities

.SplashActivity

com.netword.StratActivity

Permissions

Receivers

com.netword.service.BootBroadcastReceiver

Services

Android Permissions

04432d0c8f5b06c1403eb642b17e1e24