5ef7f661c30558d1a608547f19531b30_NeikiAnalytics

General

Target

5ef7f661c30558d1a608547f19531b30_NeikiAnalytics
Size

4.4MB
MD5

5ef7f661c30558d1a608547f19531b30
SHA1

2877a2b142c9dfde8981973517081334080ab65c
SHA256

9fc2ed9f7345a82aa82fb56446262be8900acb83b23adc2f338ae065a048637b
SHA512

f973e7d92a83c073d9806b06fe1a0069e3fddd9f4fd6d587d9147117a72994c6fdcc8206f5bc65548beb1b4fdb16250def5b55410a6907702dfaedc49d761fd7
SSDEEP

49152:v/JXHSWMgagxAbrNxACnhvw82BFhjvkYksZm+L+yt6zpxI37AU0nG1tiUTobhryV:pXSWRgoSvw82l7Xibbh0B6Vv0

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA

Files

5ef7f661c30558d1a608547f19531b30_NeikiAnalytics
.apk android

com.android.systemui

.DessertCase

Activities

.recent.RecentsActivity

com.android.systemui.TOGGLE_RECENTS

.recents.RecentsActivity

com.android.systemui.recents.TOGGLE_RECENTS

.DessertCase

android.intent.action.MAIN

.egg.LLandActivity

android.intent.action.MAIN

.Somnambulator

android.intent.action.MAIN

.settings.BrightnessDialog

android.intent.action.SHOW_BRIGHTNESS_DIALOG

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_ALL_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.INJECT_EVENTS
android.permission.DUMP
android.permission.WRITE_SETTINGS
android.permission.STATUS_BAR_SERVICE
android.permission.STATUS_BAR
android.permission.EXPAND_STATUS_BAR
android.permission.REMOTE_AUDIO_PLAYBACK
android.permission.MANAGE_USERS
android.permission.READ_PROFILE
android.permission.READ_CONTACTS
android.permission.CONFIGURE_WIFI_DISPLAY
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_APP_OPS_STATS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MANAGE_NETWORK_POLICY
android.permission.CONNECTIVITY_INTERNAL
android.permission.READ_NETWORK_USAGE_HISTORY
android.permission.CONTROL_VPN
android.permission.MANAGE_USB
android.permission.DEVICE_POWER
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MASTER_CLEAR
android.permission.VIBRATE
android.permission.REAL_GET_TASKS
android.permission.GET_DETAILED_TASKS
android.permission.REORDER_TASKS
android.permission.REMOVE_TASKS
android.permission.STOP_APP_SWITCHES
android.permission.SET_SCREEN_COMPATIBILITY
android.permission.START_ANY_ACTIVITY
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.MANAGE_ACTIVITY_STACKS
android.permission.START_TASKS_FROM_RECENTS
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_FRAME_BUFFER
android.permission.MANAGE_APP_TOKENS
android.permission.SET_ORIENTATION
android.permission.DISABLE_KEYGUARD
android.permission.READ_DREAM_STATE
android.permission.WRITE_DREAM_STATE
com.android.alarm.permission.SET_ALARM
android.permission.CONTROL_KEYGUARD
android.permission.MODIFY_PHONE_STATE
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.BIND_DEVICE_ADMIN
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.MEDIA_CONTENT_CONTROL
android.permission.ACCESS_KEYGUARD_SECURE_STORAGE
android.permission.TRUST_LISTENER
android.permission.BROADCAST_STICKY
android.permission.BIND_APPWIDGET
android.permission.CONFIGURE_WIFI_DISPLAY
android.permission.CAMERA
android.permission.MANAGE_MEDIA_PROJECTION
com.mediatek.ppl.permission.ACCESS_PPL_MANAGER
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.WRITE_APN_SETTINGS

Receivers

.BootReceiver

android.intent.action.BOOT_COMPLETED

.qs.tiles.HotspotTile$APChangedReceiver

android.net.wifi.WIFI_AP_STATE_CHANGED

.recent.RecentsPreloadReceiver

com.android.systemui.recent.action.PRELOAD
com.android.systemui.recent.action.CANCEL_PRELOAD

.recents.RecentsUserEventProxyReceiver

com.android.systemui.recents.action.SHOW_RECENTS_FOR_USER
com.android.systemui.recents.action.HIDE_RECENTS_FOR_USER
com.android.systemui.recents.action.TOGGLE_RECENTS_FOR_USER
com.android.systemui.recents.action.PRELOAD_RECENTS_FOR_USER
com.android.systemui.recents.action.CONFIG_CHANGED_FOR_USER

.floatpanel.FloatModel

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
action_multiwindow_disable_pkg_updated
android.intent.action.LOCALE_CHANGED

Services

.DessertCaseDream

android.service.dreams.DreamService

Android Permissions

5ef7f661c30558d1a608547f19531b30_NeikiAnalytics

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_ALL_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.INJECT_EVENTS

android.permission.DUMP

android.permission.WRITE_SETTINGS

android.permission.STATUS_BAR_SERVICE

android.permission.STATUS_BAR

android.permission.EXPAND_STATUS_BAR

android.permission.REMOTE_AUDIO_PLAYBACK

android.permission.MANAGE_USERS

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

android.permission.CONFIGURE_WIFI_DISPLAY

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_APP_OPS_STATS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_NETWORK_POLICY

android.permission.CONNECTIVITY_INTERNAL

android.permission.READ_NETWORK_USAGE_HISTORY

android.permission.CONTROL_VPN

android.permission.MANAGE_USB

android.permission.DEVICE_POWER

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MASTER_CLEAR

android.permission.VIBRATE

android.permission.REAL_GET_TASKS

android.permission.GET_DETAILED_TASKS

android.permission.REORDER_TASKS

android.permission.REMOVE_TASKS

android.permission.STOP_APP_SWITCHES

android.permission.SET_SCREEN_COMPATIBILITY

android.permission.START_ANY_ACTIVITY

android.permission.INTERACT_ACROSS_USERS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.GET_TOP_ACTIVITY_INFO

android.permission.MANAGE_ACTIVITY_STACKS

android.permission.START_TASKS_FROM_RECENTS

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_FRAME_BUFFER

android.permission.MANAGE_APP_TOKENS

Sharing

General

Malware Config

Signatures

Files

com.android.systemui

.DessertCase

Activities

.recent.RecentsActivity

.recents.RecentsActivity

.DessertCase

.egg.LLandActivity

.Somnambulator

.settings.BrightnessDialog

Permissions

Receivers

.BootReceiver

.qs.tiles.HotspotTile$APChangedReceiver

.recent.RecentsPreloadReceiver

.recents.RecentsUserEventProxyReceiver

.floatpanel.FloatModel

Services

.DessertCaseDream

Android Permissions

5ef7f661c30558d1a608547f19531b30_NeikiAnalytics