2bc62e1123eebe10fe1cadf80b3fadaa

General

Target

2bc62e1123eebe10fe1cadf80b3fadaa
Size

13.4MB
MD5

2bc62e1123eebe10fe1cadf80b3fadaa
SHA1

1881d898ae77aa1fffeb77b023e016a3e01d4710
SHA256

acb0b57c5bce02b55574366095d50cfc7fe1accf93b44bb653accf1d0c96a384
SHA512

3022bc18995db742b8f891843faa5c2b2109ebb77855c55662bae4b5d7278a2e76b3f4b597976f7686fc8bb125c7d5ddd4ed94f430843496b13523bf02d26000
SSDEEP

393216:QWwypMUF5azC6hmVnXnZXA3UXvCREjsc7NUu:Bn5YmhZPvNjWu

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

2bc62e1123eebe10fe1cadf80b3fadaa
.apk android arch:arm64 arch:arm

cn.swifthawk.picku.free

com.swifthawk.picku.free.splash.SplashHulkActivity

Activities

com.xpro.camera.lite.activites.CameraActivity

android.media.action.IMAGE_CAPTURE

com.xpro.camera.lite.activites.GalleryActivity

android.intent.action.MAIN
android.intent.action.PICK
android.intent.action.PICK

com.xpro.camera.lite.activites.DeepLinkActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.swifthawk.picku.free.splash.SplashHulkActivity

android.intent.action.MAIN
android.intent.action.VIEW

org.n.account.ui.view.ProfileCenterActivity

cn.swifthawk.picku.free.njord.account.profile

com.xpro.camera.lite.activites.ShareEditActivity

android.intent.action.SEND

com.xpro.camera.lite.activites.ShareCutoutActivity

android.intent.action.SEND

com.xpro.camera.account.AccountLoginDialogActivity

cn.swifthawk.picku.free.njord.account.login

org.n.activity.ActivityBrowserImp

cn.swifthawk.picku.free.n.activity.browserimp

org.n.activity.WebActivity

cn.swifthawk.picku.free.n.activity.web

Permissions

android.permission.CAMERA
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.INTERNET
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.ACCESS_NETWORK_STATE
android.permission.EXPAND_STATUS_BAR
android.permission.WAKE_LOCK
com.android.alarm.permission.SET_ALARM
android.permission.CHANGE_WIFI_STATE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
com.google.android.c2dm.permission.RECEIVE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
android.permission.WRITE_SETTINGS
android.settings.action.MANAGE_OVERLAY_PERMISSION
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
com.asus.msa.SupplementaryDID.ACCESS
com.android.vending.BILLING
android.permission.READ_LOGS

Receivers

com.tools.athene.MonitorReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

org.adoto.xrg.receiver.PlayReceiver

com.android.vending.INSTALL_REFERRER

org.adoto.xrg.receiver.GuardPlayReceiver

com.android.vending.INSTALL_REFERRER

com.adjust.sdk.AdjustReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.apollo.downloadlibrary.DownloadReceiver

android.intent.action.BOOT_COMPLETED
cn.swifthawk.picku.free.okdownload.DOWNLOAD_WAKEUP
cn.swifthawk.picku.free.okdownload.DOWNLOAD_OPEN
cn.swifthawk.picku.free.okdownload.DOWNLOAD_LIST
cn.swifthawk.picku.free.okdownload.DOWNLOAD_HIDE

com.vector.adkur

cn.swifthawk.picku.free.vector.success
cn.swifthawk.picku.free.vector.dp
cn.swifthawk.picku.free.vector.in
cn.swifthawk.picku.free.vector.gin
cn.swifthawk.picku.free.vector.oin
cn.swifthawk.picku.free.vector.rno

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.v14.RUN_JOB
net.vrallev.android.job.v14.RUN_JOB

com.evernote.android.job.JobBootReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.lachesis.account.AuthenticationService

android.accounts.AccountAuthenticator

com.lachesis.account.SyncService

android.content.SyncAdapter

com.lachesis.gcm.PlutoGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

com.evernote.android.job.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

2bc62e1123eebe10fe1cadf80b3fadaa

Permissions

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_NETWORK_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.CHANGE_WIFI_STATE

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

com.google.android.c2dm.permission.RECEIVE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.WRITE_SETTINGS

android.settings.action.MANAGE_OVERLAY_PERMISSION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECEIVE_BOOT_COMPLETED

com.asus.msa.SupplementaryDID.ACCESS

com.android.vending.BILLING

android.permission.READ_LOGS

Sharing

General

Malware Config

Signatures

Files

cn.swifthawk.picku.free

com.swifthawk.picku.free.splash.SplashHulkActivity

Activities

com.xpro.camera.lite.activites.CameraActivity

com.xpro.camera.lite.activites.GalleryActivity

com.xpro.camera.lite.activites.DeepLinkActivity

com.swifthawk.picku.free.splash.SplashHulkActivity

org.n.account.ui.view.ProfileCenterActivity

com.xpro.camera.lite.activites.ShareEditActivity

com.xpro.camera.lite.activites.ShareCutoutActivity

com.xpro.camera.account.AccountLoginDialogActivity

org.n.activity.ActivityBrowserImp

org.n.activity.WebActivity

Permissions

Receivers

com.tools.athene.MonitorReceiver

org.adoto.xrg.receiver.PlayReceiver

org.adoto.xrg.receiver.GuardPlayReceiver

com.adjust.sdk.AdjustReferrerReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.apollo.downloadlibrary.DownloadReceiver

com.vector.adkur

com.evernote.android.job.v14.PlatformAlarmReceiver

com.evernote.android.job.JobBootReceiver

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.lachesis.account.AuthenticationService

com.lachesis.account.SyncService

com.lachesis.gcm.PlutoGcmService

com.evernote.android.job.gcm.PlatformGcmService

Android Permissions

2bc62e1123eebe10fe1cadf80b3fadaa