1964e622e182fa360e97cbfdd2603ea0_NeikiAnalytics[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1964e622e182fa360e97cbfdd2603ea0_NeikiAnalytics.zip
Size

142KB
MD5

1964e622e182fa360e97cbfdd2603ea0
SHA1

9d2226a46bb757bd5617cbb6ad2329d13ea2eb41
SHA256

7850ce8239d98789c93802a5092e43cdfd95f7a517a6b20b33e7a8fa703cb6ed
SHA512

d901716794db408bd11a334c3a0b9eabc5be8cbe5a353ac4d287766c4f9772bfde92380915b0af955c9c6ee018dda51cd0acd0620084464ba318a1cf944b7efe
SSDEEP

1536:P8Jcag3I7+eue5wIZ1xqxox1Eha+mmPxaRjoncIhSVUvOMaZ7HYUp:0Jcalqb0HXx1oFdECVhSevOF7p

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

1964e622e182fa360e97cbfdd2603ea0_NeikiAnalytics.zip
.apk android

Password: infected

com.mediatek.security

.ui.AppToPermissionActivity

Activities

.ui.AppToPermissionActivity

android.intent.action.MAIN
com.mediatek.security.EACH_PERMISSION_CONTROL

.ui.PermissionToAppActivity

android.intent.action.MAIN
com.mediatek.security.EACH_APP_CONTROL

.ui.PermissionControlPageActivity

android.intent.action.MAIN
com.mediatek.security.PERMISSION_CONTROL

.ui.SwitchOffAlertActivity

android.intent.action.MAIN
com.mediatek.security.SWITCH_OFF_CONTROL_FROM_SECURITY
com.mediatek.security.SWITCH_OFF_CONTROL_FROM_APP_PERM

.ui.AutoBootAppManageActivity

android.intent.action.MAIN
com.mediatek.security.AUTO_BOOT

Permissions

android.permission.SYSTEM_ALERT_WINDOW

Receivers

.service.PermControlReceiver

mom.action.USER_CHANGE
mom.action.PERM_MGR_CHANGE

.service.LocaleChangeReceiver

android.intent.action.LOCALE_CHANGED

Services

.plugin.PermControlPluginService

com.mediatek.settings.ext.IPermissionControlExt

Android Permissions

1964e622e182fa360e97cbfdd2603ea0_NeikiAnalytics.zip

Permissions

android.permission.SYSTEM_ALERT_WINDOW