com.gaia.mobikit.android.ui.LoadingActivity
android.intent.action.MAIN
com.gaia.mobikit.android.ui.TokenActivity
android.intent.action.VIEW
Static task
static1
2 signatures
General
-
Target
delete_mdm_new_version.apk
-
Size
4.3MB
-
MD5
182376bb6d300edd8e1cb289ec501973
-
SHA1
13ad1b06aba52ec56c0d81e05f8a7a5dc941c962
-
SHA256
97984dfd0f7715fc0e0effcc9d83b9459e8d66b816aac022186fca66944f67d4
-
SHA512
842d3d2aa55cc7c303e0cacb94cff103cfac82b43a198eb0074e122f76d763c24be43fc6fe38bba7b43f940797e45ea8e17b02462bc2b2fdee97e0112b15c0a0
-
SSDEEP
98304:zq3j9dxR+fAwLLvLWkHreye/YS5Zq+mfENITHzsz:KpyXzvreN5Z+wSsz
Score
6/10
Malware Config
Signatures
-
Declares broadcast receivers with permission to handle system events 1 IoCs
description ioc Required by device admin receivers to bind with the system. Allows apps to manage device administration features. android.permission.BIND_DEVICE_ADMIN -
Requests dangerous framework permissions 20 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows access to the list of accounts in the Accounts Service. android.permission.GET_ACCOUNTS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to read the user's calendar data. android.permission.READ_CALENDAR Allows an application to write the user's calendar data. android.permission.WRITE_CALENDAR Allows an application to read the user's call log. android.permission.READ_CALL_LOG Allows an application to write and read the user's call log data. android.permission.WRITE_CALL_LOG Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION Allows an app to access location in the background. android.permission.ACCESS_BACKGROUND_LOCATION Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to read SMS messages. android.permission.READ_SMS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS
Files
-
delete_mdm_new_version.apk.apk android
com.gaia.mobikit.android
com.gaia.mobikit.android.ui.LoadingActivity
Activities
Permissions
com.gaia.mobikit.android.permission.BIND_API
com.gaia.mobikit.android.permission.DEFAULT
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.REQUEST_PASSWORD_COMPLEXITY
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
com.gaia.mobikit.android.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.WRITE_SETTINGS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.BATTERY_STATS
com.samsung.android.knox.permission.KNOX_ENTERPRISE_DEVICE_ADMIN
com.samsung.android.knox.permission.KNOX_APP_MGMT
com.samsung.android.knox.permission.KNOX_HW_CONTROL
com.samsung.android.knox.permission.KNOX_RESTRICTION_MGMT
com.samsung.android.knox.permission.KNOX_WIFI
com.samsung.android.knox.permission.KNOX_LOCATION
com.samsung.android.knox.permission.KNOX_SECURITY
com.samsung.android.knox.permission.KNOX_BLUETOOTH
com.samsung.android.knox.permission.KNOX_EMAIL
com.samsung.android.knox.permission.KNOX_PHONE_RESTRICTION
com.samsung.android.knox.permission.KNOX_INVENTORY
com.samsung.android.knox.permission.KNOX_MULTI_USER_MGMT
com.samsung.android.knox.permission.KNOX_CUSTOM_SETTING
com.samsung.android.knox.permission.KNOX_CUSTOM_SYSTEM
Receivers
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION
com.google.firebase.iid.FirebaseInstanceIdInternalReceiver
com.google.firebase.INSTANCE_ID_EVENT
mobikit.android.app.DacDlpStartupReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.CONFIGURATION_CHANGED
com.gaia.mobikit.android.AllMessageReceiver
mobikit.android.push.ACTION_PUSH_RECEIVED
android.intent.action.MEDIA_MOUNTED
android.provider.Telephony.SMS_RECEIVED
android.intent.action.NEW_OUTGOING_CALL
com.gaia.mobikit.android.mdm.MdmDeviceAdminReceiver
android.app.action.DEVICE_ADMIN_ENABLED
com.gaia.mobikit.android.mdm.EnterpriseLicenseManagementReceiver
com.samsung.android.knox.intent.action.LICENSE_STATUS
org.altbeacon.beacon.startup.StartupBroadcastReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
Services
.fcm.FcmService
com.google.firebase.MESSAGING_EVENT
.fcm.FcmIdService
com.google.firebase.INSTANCE_ID_EVENT
mobikit.android.BaseService
mobikit.android.intent.action.ACTION_MOBIKIT_SERVICE
mobikit.android.intent.action.ACTION_MDM_API
Android Permissions
delete_mdm_new_version.apk
Permissions
com.gaia.mobikit.android.permission.BIND_API
com.gaia.mobikit.android.permission.DEFAULT
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.FOREGROUND_SERVICE
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.CHANGE_NETWORK_STATE
android.permission.REQUEST_PASSWORD_COMPLEXITY
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
android.permission.INTERNET
com.gaia.mobikit.android.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
android.permission.WAKE_LOCK
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.WRITE_SETTINGS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.BATTERY_STATS
com.samsung.android.knox.permission.KNOX_ENTERPRISE_DEVICE_ADMIN
com.samsung.android.knox.permission.KNOX_APP_MGMT
com.samsung.android.knox.permission.KNOX_HW_CONTROL
com.samsung.android.knox.permission.KNOX_RESTRICTION_MGMT
com.samsung.android.knox.permission.KNOX_WIFI
com.samsung.android.knox.permission.KNOX_LOCATION
com.samsung.android.knox.permission.KNOX_SECURITY
com.samsung.android.knox.permission.KNOX_BLUETOOTH
com.samsung.android.knox.permission.KNOX_EMAIL
com.samsung.android.knox.permission.KNOX_PHONE_RESTRICTION
com.samsung.android.knox.permission.KNOX_INVENTORY
com.samsung.android.knox.permission.KNOX_MULTI_USER_MGMT
com.samsung.android.knox.permission.KNOX_CUSTOM_SETTING
com.samsung.android.knox.permission.KNOX_CUSTOM_SYSTEM