df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271[.]bin

General

Target

df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271.bin
Size

3.2MB
MD5

c353f6893375e57920b0c3c2dbc1d432
SHA1

cb5757c59cea4c28f128f774cec6c91efafbc8e3
SHA256

df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271
SHA512

1afc58199be3c59a807134e58bb647376c0fa739e5c7558e72e3b6350be001a56a575424bbbfaaf3c06afa9284c3cb3993e8f9bcff626cb6e697d2d8200d8e17
SSDEEP

49152:SUlTrmJgnfv0yYZF4zMcDCRPsoMsonhyn+RMJ2tADv0PE1TwHY8sG4Nh1rd2ZrL5:SWf1fcZHceRonh5yUths1TvDHxd2ZrL5

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER
Required by wallpaper services to bind with the system. Allows apps to provide live wallpapers.	android.permission.BIND_WALLPAPER

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271.bin
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.android.st

com.fg.MainActivity

Activities

Permissions

android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.REORDER_TASKS
android.permission.WRITE_SYNC_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SCHEDULE_EXACT_ALARM
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW

Receivers

androidx.core.component.PackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_FULLY_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_FIRST_LAUNCH
android.intent.action.PACKAGE_NEEDS_VERIFICATION
android.intent.action.PACKAGE_RESTARTED
android.intent.action.PACKAGE_VERIFIED
android.intent.action.PACKAGES_SUSPENDED
android.intent.action.PACKAGES_UNSUSPENDED
android.intent.action.MANAGE_PACKAGE_STORAGE
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.MY_PACKAGE_SUSPENDED
android.intent.action.MY_PACKAGE_UNSUSPENDED

androidx.core.thaw.TR

android.intent.action.SCREEN_OFF

androidx.core.widget.FGWidget

android.appwidget.action.APPWIDGET_UPDATE

androidx.core.component.R0

com.fg.rec.all
com.fg.rec.0
android.appwidget.action.APPWIDGET_UPDATE
miui.appwidget.action.APPWIDGET_UPDATE

androidx.core.component.R1

com.fg.rec.all
com.fg.rec.1

androidx.core.component.R2

com.fg.rec.all
com.fg.rec.2

androidx.core.component.R3

com.fg.rec.all
com.fg.rec.3

androidx.core.component.ActionReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.ACTION_REBOOT
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
jpush_adapter_wakeup
android.intent.action.EVENT_REMINDER
android.hardware.usb.action.USB_STATE
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
com.app.startrecevice
android.intent.action.TIME_TICK
android.intent.action.TIMEZONE_CHANGED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED

com.ka.MyWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

Services

androidx.core.account.AuthenticatorService

android.accounts.AccountAuthenticator

androidx.core.account.SyncService

android.content.SyncAdapter

androidx.core.account.account2.AuthenticatorService

android.accounts.AccountAuthenticator

androidx.core.account.account2.SyncService

android.content.SyncAdapter

androidx.core.wallpaper.LiveWallpaperService

android.service.wallpaper.WallpaperService

com.blankj.utilcode.util.MessengerUtils$ServerService

com.fg.messenger

com.ka.WallpaperDxService

android.service.wallpaper.WallpaperService

Android Permissions

df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271.bin

Permissions

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.REORDER_TASKS

android.permission.WRITE_SYNC_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.INTERNET

android.permission.USE_FULL_SCREEN_INTENT

android.permission.SCHEDULE_EXACT_ALARM

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.android.st

com.fg.MainActivity

Activities

Permissions

Receivers

androidx.core.component.PackageReceiver

androidx.core.thaw.TR

androidx.core.widget.FGWidget

androidx.core.component.R0

androidx.core.component.R1

androidx.core.component.R2

androidx.core.component.R3

androidx.core.component.ActionReceiver

com.ka.MyWidgetProvider

Services

androidx.core.account.AuthenticatorService

androidx.core.account.SyncService

androidx.core.account.account2.AuthenticatorService

androidx.core.account.account2.SyncService

androidx.core.wallpaper.LiveWallpaperService

com.blankj.utilcode.util.MessengerUtils$ServerService

com.ka.WallpaperDxService

Android Permissions

df7c777cffcec213f4831f800d536be751c2327907306d88fca1bb746559b271.bin