72f59e57d472600174cf93e5d6f28cb6

General

Target

72f59e57d472600174cf93e5d6f28cb6
Size

3.3MB
MD5

72f59e57d472600174cf93e5d6f28cb6
SHA1

173ee279f8ea45b9b0a6bc51e65d38f2ddbd089a
SHA256

bd41f9928bb99624ab0a85848163daceec4435e792f8b6df412839abada9579a
SHA512

ee99e0f192fe1d2176d8ae3a9ae09db4881bb30a5cd1d2aea6a4ff4ee9db0f0722f2932d9e8fd3f10e947ae1e102eb34010c0f949db102cd2e485628dcbed3c6
SSDEEP

98304:6vhZtw5tUYwBz97YQxAjR18Nxe4/9CotQ6gscb:oHgGRpCP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA

Files

72f59e57d472600174cf93e5d6f28cb6
.apk android

com.gozap.labi.android

.ui.LaBiWelcomeActivity

Activities

.ui.LaBiWelcomeActivity

android.intent.action.MAIN

.ui.MainActivity

android.intent.action.SEND

Permissions

android.permission.INTERNET
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.RESTART_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_PHONE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SET_WALLPAPER
android.permission.WRITE_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.WAKE_LOCK
android.permission.READ_LOGS
com.android.launcher.permission.READ_SETTINGS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.GET_ACCOUNTS
android.permission.WRITE_APN_SETTINGS
android.permission.CAMERA
android.permission.VIBRATE

Receivers

.push.receiver.LabiBootBroadcastReceiver

android.intent.action.BOOT_COMPLETED

.push.receiver.ShutdownReceiver

android.intent.action.ACTION_SHUTDOWN

.push.receiver.ScreenUnlockReceiver

android.intent.action.USER_PRESENT

.push.receiver.LogonTimeoutCheckAlarmReceiver

com.gozap.labi.android.intent.action.LOGON_TIMEOUT_CHECK

.push.receiver.DelayLogonAlarmReceiver

com.gozap.labi.android.intent.action.LOGON

.push.receiver.HeartBeatCheckReceiver

com.gozap.labi.android.intent.action.HEARTBEAT_CHECK

.push.receiver.DelaySyncAlarmReceiver

com.gozap.labi.android.intent.action.DELAY_SYNC

.push.receiver.TimingSyncReceiver

com.gozap.labi.android.intent.action.TIMING_SYNC

.push.receiver.TimingOnlineReceiver

com.gozap.labi.android.intent.action.TIMING_ONLINE

.push.receiver.TimingOfflineReceiver

com.gozap.labi.android.intent.action.TIMING_OFFLINE

.push.receiver.CalllogReceiver

android.intent.action.PHONE_STATE

.push.receiver.SMSReceiver

android.provider.Telephony.SMS_RECEIVED

.push.receiver.CalendarNotifyReceiver

com.gozap.labi.android.intent.action.CALENDAR_NOTIFY

com.gozap.labi.android.ui.widget.desktop.LabiDesktopWidget

android.appwidget.action.APPWIDGET_UPDATE

Services

Android Permissions

72f59e57d472600174cf93e5d6f28cb6

Permissions

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SET_WALLPAPER

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.WAKE_LOCK

android.permission.READ_LOGS

com.android.launcher.permission.READ_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.GET_ACCOUNTS

android.permission.WRITE_APN_SETTINGS

android.permission.CAMERA

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

Files

com.gozap.labi.android

.ui.LaBiWelcomeActivity

Activities

.ui.LaBiWelcomeActivity

.ui.MainActivity

Permissions

Receivers

.push.receiver.LabiBootBroadcastReceiver

.push.receiver.ShutdownReceiver

.push.receiver.ScreenUnlockReceiver

.push.receiver.LogonTimeoutCheckAlarmReceiver

.push.receiver.DelayLogonAlarmReceiver

.push.receiver.HeartBeatCheckReceiver

.push.receiver.DelaySyncAlarmReceiver

.push.receiver.TimingSyncReceiver

.push.receiver.TimingOnlineReceiver

.push.receiver.TimingOfflineReceiver

.push.receiver.CalllogReceiver

.push.receiver.SMSReceiver

.push.receiver.CalendarNotifyReceiver

com.gozap.labi.android.ui.widget.desktop.LabiDesktopWidget

Services

Android Permissions

72f59e57d472600174cf93e5d6f28cb6