995c99c21ff5efff0e8d2a5fb87a0cda

General

Target

995c99c21ff5efff0e8d2a5fb87a0cda
Size

2.8MB
MD5

995c99c21ff5efff0e8d2a5fb87a0cda
SHA1

42c6f5820871cc34398c9163d491301d4fb0a572
SHA256

a99bc3100bb1dd9d5d08e14cdd6cfa76824dd522c45c95f60481d4ddda262b81
SHA512

dc8c343718424b3f33b1e3d0c9766f088be92d1f8dcbe776d1992512c8ac43b5738d4aef0b3e31bbc2ddc064779fcf13e3b2a5e6ade9f5557b1a79e848d65d28
SSDEEP

49152:1ONMH8yTTYLXBvqsJ50h973/m1nDF3dFVjd4Fa4wpqaSOou7IiV9jr4kJt:MNMH8yHYdvXJK973/m33dF9dS9OogI4H

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

995c99c21ff5efff0e8d2a5fb87a0cda
.apk android

com.ha.loveone

ir.modsoft.fakeadmob_ads.MS

Activities

ir.modsoft.fakeadmob_ads.MS

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
com.ha.loveone.permission.C2D_MESSAGE

Receivers

ir.modsoft.fakeadmob_ads.MST

android.intent.action.BOOT_COMPLETED

com.google.android.gms.gcm.GcmReceiver

com.google.android.c2dm.intent.RECEIVE

me.cheshmak.android.sdk.core.receivers.AlarmReceiver

android.intent.action.TIME_SET
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.intent.action.DELETE
me.cheshmak.intent.action.SEND_EVENT

me.cheshmak.android.sdk.core.receivers.RemoteReceiver

CHESH_REMOTE_DATA_ACTION

me.cheshmak.android.sdk.core.push.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

me.cheshmak.android.sdk.core.network.AppStartReceiver

me.cheshmak.start
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON

me.cheshmak.android.sdk.core.receivers.AppChangeListener

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

Services

me.cheshmak.android.sdk.core.push.CheshIDListenerService

com.google.android.gms.iid.InstanceID

me.cheshmak.android.sdk.core.task.WifiTask

com.google.android.gms.gcm.ACTION_TASK_READY

Android Permissions

995c99c21ff5efff0e8d2a5fb87a0cda

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

com.ha.loveone.permission.C2D_MESSAGE

Sharing

General

Malware Config

Signatures

Files

com.ha.loveone

ir.modsoft.fakeadmob_ads.MS

Activities

ir.modsoft.fakeadmob_ads.MS

Permissions

Receivers

ir.modsoft.fakeadmob_ads.MST

com.google.android.gms.gcm.GcmReceiver

me.cheshmak.android.sdk.core.receivers.AlarmReceiver

me.cheshmak.android.sdk.core.receivers.RemoteReceiver

me.cheshmak.android.sdk.core.push.GcmBroadcastReceiver

me.cheshmak.android.sdk.core.network.AppStartReceiver

me.cheshmak.android.sdk.core.receivers.AppChangeListener

Services

me.cheshmak.android.sdk.core.push.CheshIDListenerService

me.cheshmak.android.sdk.core.task.WifiTask

Android Permissions

995c99c21ff5efff0e8d2a5fb87a0cda