32b913a0cb739caa690cad9b94ab3860_NeikiAnalytics

General

Target

32b913a0cb739caa690cad9b94ab3860_NeikiAnalytics
Size

3.6MB
MD5

32b913a0cb739caa690cad9b94ab3860
SHA1

d060e059502b6bad258bb8e313581f8d1e2c7e02
SHA256

9d57c348ad0dde05a71ed060708b217b5e6393738ab6c0f8e5fe16abb0209606
SHA512

f7ad22ec6ac9d413ca919e9a07941a3903c1f90f8cbd1ddbd8ec4822f887878b22abb0cf1d9f0a5a9681379cc107d09b9576b52818dc036c4029b072918d309c
SSDEEP

49152:fOEGq5jTiFk/0kZAkoMYExXkSA/6oQAFEGT72hZ8sjquR29Zd:fhwQAF7TKZDjr2/d

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA

Files

32b913a0cb739caa690cad9b94ab3860_NeikiAnalytics
.apk android

com.android.systemui

.DessertCase

Activities

.tuner.TunerActivity

com.android.settings.action.EXTRA_SETTINGS

.recents.RecentsActivity

com.android.systemui.recents.TOGGLE_RECENTS

.DessertCase

android.intent.action.MAIN

.egg.MLandActivity

android.intent.action.MAIN

.Somnambulator

android.intent.action.MAIN

.settings.BrightnessDialog

android.intent.action.SHOW_BRIGHTNESS_DIALOG

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_MEDIA_STORAGE
android.permission.WAKE_LOCK
android.permission.INJECT_EVENTS
android.permission.DUMP
android.permission.WRITE_SETTINGS
android.permission.STATUS_BAR_SERVICE
android.permission.STATUS_BAR
android.permission.EXPAND_STATUS_BAR
android.permission.REMOTE_AUDIO_PLAYBACK
android.permission.MANAGE_USERS
android.permission.READ_PROFILE
android.permission.READ_CONTACTS
android.permission.CONFIGURE_WIFI_DISPLAY
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_APP_OPS_STATS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_PRIVILEGED
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.READ_PRECISE_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.OVERRIDE_WIFI_CONFIG
android.permission.MANAGE_NETWORK_POLICY
android.permission.CONNECTIVITY_INTERNAL
android.permission.READ_NETWORK_USAGE_HISTORY
android.permission.CONTROL_VPN
android.permission.PEERS_MAC_ADDRESS
android.permission.MANAGE_USB
android.permission.DEVICE_POWER
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MASTER_CLEAR
android.permission.VIBRATE
android.permission.REAL_GET_TASKS
android.permission.GET_DETAILED_TASKS
android.permission.REORDER_TASKS
android.permission.REMOVE_TASKS
android.permission.STOP_APP_SWITCHES
android.permission.SET_SCREEN_COMPATIBILITY
android.permission.START_ANY_ACTIVITY
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.MANAGE_ACTIVITY_STACKS
android.permission.START_TASKS_FROM_RECENTS
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_FRAME_BUFFER
android.permission.MANAGE_APP_TOKENS
android.permission.SET_ORIENTATION
android.permission.DISABLE_KEYGUARD
android.permission.READ_DREAM_STATE
android.permission.WRITE_DREAM_STATE
com.android.alarm.permission.SET_ALARM
android.permission.CONTROL_KEYGUARD
android.permission.MODIFY_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.MEDIA_CONTENT_CONTROL
android.permission.ACCESS_KEYGUARD_SECURE_STORAGE
android.permission.TRUST_LISTENER
android.permission.USE_FINGERPRINT
com.mediatek.ppl.permission.ACCESS_PPL_MANAGER
android.permission.RESET_FINGERPRINT_LOCKOUT
android.permission.SET_WALLPAPER
android.permission.BIND_APPWIDGET
android.permission.CONFIGURE_WIFI_DISPLAY
android.permission.CAMERA
android.permission.MANAGE_MEDIA_PROJECTION
android.permission.ACCESS_VOICE_INTERACTION_SERVICE
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
com.android.systemui.permission.SELF
android.permission.WRITE_APN_SETTINGS

Receivers

.BootReceiver

android.intent.action.BOOT_COMPLETED

.qs.tiles.HotspotTile$APChangedReceiver

android.net.wifi.WIFI_AP_STATE_CHANGED

.recents.RecentsUserEventProxyReceiver

com.android.systemui.recents.action.SHOW_RECENTS_FOR_USER
com.android.systemui.recents.action.HIDE_RECENTS_FOR_USER
com.android.systemui.recents.action.TOGGLE_RECENTS_FOR_USER
com.android.systemui.recents.action.PRELOAD_RECENTS_FOR_USER
com.android.systemui.recents.action.CONFIG_CHANGED_FOR_USER

com.mediatek.systemui.floatpanel.FloatModel

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
action_multiwindow_disable_pkg_updated
android.intent.action.LOCALE_CHANGED

.tuner.TunerService$ClearReceiver

com.android.systemui.action.CLEAR_TUNER

Services

.DessertCaseDream

android.service.dreams.DreamService

Android Permissions

32b913a0cb739caa690cad9b94ab3860_NeikiAnalytics

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.WAKE_LOCK

android.permission.INJECT_EVENTS

android.permission.DUMP

android.permission.WRITE_SETTINGS

android.permission.STATUS_BAR_SERVICE

android.permission.STATUS_BAR

android.permission.EXPAND_STATUS_BAR

android.permission.REMOTE_AUDIO_PLAYBACK

android.permission.MANAGE_USERS

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

android.permission.CONFIGURE_WIFI_DISPLAY

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_APP_OPS_STATS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_PRIVILEGED

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.READ_PRECISE_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.OVERRIDE_WIFI_CONFIG

android.permission.MANAGE_NETWORK_POLICY

android.permission.CONNECTIVITY_INTERNAL

android.permission.READ_NETWORK_USAGE_HISTORY

android.permission.CONTROL_VPN

android.permission.PEERS_MAC_ADDRESS

android.permission.MANAGE_USB

android.permission.DEVICE_POWER

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MASTER_CLEAR

android.permission.VIBRATE

android.permission.REAL_GET_TASKS

android.permission.GET_DETAILED_TASKS

android.permission.REORDER_TASKS

android.permission.REMOVE_TASKS

android.permission.STOP_APP_SWITCHES

android.permission.SET_SCREEN_COMPATIBILITY

android.permission.START_ANY_ACTIVITY

android.permission.INTERACT_ACROSS_USERS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.GET_TOP_ACTIVITY_INFO

android.permission.MANAGE_ACTIVITY_STACKS

Sharing

General

Malware Config

Signatures

Files

com.android.systemui

.DessertCase

Activities

.tuner.TunerActivity

.recents.RecentsActivity

.DessertCase

.egg.MLandActivity

.Somnambulator

.settings.BrightnessDialog

Permissions

Receivers

.BootReceiver

.qs.tiles.HotspotTile$APChangedReceiver

.recents.RecentsUserEventProxyReceiver

com.mediatek.systemui.floatpanel.FloatModel

.tuner.TunerService$ClearReceiver

Services

.DessertCaseDream

Android Permissions

32b913a0cb739caa690cad9b94ab3860_NeikiAnalytics