General

  • Target

    KWGT_v3.74b.apk

  • Size

    31.1MB

  • MD5

    1ff8e528d5996e04bcf97d6802c8a293

  • SHA1

    8f4ff17ba085aa3a52176d6af17cf89ea21f8c3f

  • SHA256

    e75af86214947ac6c0f151173c76eb00f23f26ba71564b3a8beca28245695723

  • SHA512

    8b7fc24d16ed0f307c52abd00e4a3040743a9627fce2c0caf02432d69060c8498e05e9956a3230600a39c5d76b5a7927b16b699b96c2c4ae9b5bbe048b5b42c6

  • SSDEEP

    786432:6FtX5+prflh09k2k2kRCusUS/+P/PmdWkawUwvheJV79FaRVf:6TJ+Tak2kxs3bawfUJDFa3

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • KWGT_v3.74b.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    org.kustom.widget

    org.kustom.widget.picker.WidgetPicker


Android Permissions

KWGT_v3.74b.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

org.kustom.weather.permission.ACCESS_DATA

org.kustom.weather.permission.ACCESS_CONFIG

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.LOCATION

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.READ_CALENDAR

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

com.android.vending.BILLING

com.google.android.gms.permission.AD_ID

android.permission.QUERY_ALL_PACKAGES

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

org.kustom.widget.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION