UbuntuInstaller[.]apk

General

Target

UbuntuInstaller.apk
Size

2.2MB
MD5

51b8da0bfcaa5c212d7286bda0cbe5cc
SHA1

fcdad5aedf24ecd74f80e71df54d20291d11db8d
SHA256

e1cd790ac2f45442904f7d334e3be07b675c0d549111683dd0b129a22342d6a7
SHA512

36d8e8fa98ad346ac6a2006f9d823b9a0a4ee1d4de6d89b73d2c717a42bd9189ab786261b0495fecee7f391d3c09eead120511cb0cc6fe75265f7725d1dc9070
SSDEEP

49152:35Pz6R01/W5Zw72yKiw+u0HES0rTvafECmEpRbxDcTdMJ3C/L:4RMQeCyKlu70cGgRqTgW

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

UbuntuInstaller.apk
.apk android

com.canonical.ubuntu.installer

.InstallActivity

Activities

.InstallActivity

android.intent.action.MAIN

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_ACCOUNTS
android.permission.ACCESS_SUPERUSER
android.permission.WRITE_SETTINGS
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_CACHE_FILESYSTEM
android.permission.REBOOT
android.permission.ACCESS_SUPERUSER

Services

com.canonical.ubuntu.installer.UbuntuInstallService

com.canonical.ubuntuinstaller.UbuntuInstallService.GET_CHANNEL_LIST
com.canonical.ubuntuinstaller.UbuntuInstallService.DOWNLOAD_RELEASE
com.canonical.ubuntuinstaller.UbuntuInstallService.CANCEL_DOWNLOAD
com.canonical.ubuntuinstaller.UbuntuInstallService.PAUSE_DOWNLOAD
com.canonical.ubuntuinstaller.UbuntuInstallService.RESUME_DOWNLOAD
com.canonical.ubuntuinstaller.UbuntuInstallService.CLEAN_DOWNLOADED
com.canonical.ubuntuinstaller.UbuntuInstallService.INSTALL_UBUNTU
com.canonical.ubuntuinstaller.UbuntuInstallService.CANCEL_INSTALL
com.canonical.ubuntuinstaller.UbuntuInstallService.UINSTALL_UBUNTU
com.canonical.ubuntuinstaller.UbuntuInstallService.CHECK_FOR_UPDATE
com.canonical.ubuntuinstaller.UbuntuInstallService.DELETE_USER_DATA
com.canonical.ubuntuinstaller.UbuntuInstallService.GET_SERVICE_STATE
com.canonical.ubuntuinstaller.UbuntuInstallService.GET_PROGRESS_STATUS
com.canonical.ubuntuinstaller.UbuntuInstallService.REBOOT_UBUNTU
com.canonical.ubuntuinstaller.UbuntuInstallService.IS_UBUNTU_UPGRADABLE

Android Permissions

UbuntuInstaller.apk

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_ACCOUNTS

android.permission.ACCESS_SUPERUSER

android.permission.WRITE_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_CACHE_FILESYSTEM

android.permission.REBOOT

android.permission.ACCESS_SUPERUSER

Sharing

General

Malware Config

Signatures

Files

com.canonical.ubuntu.installer

.InstallActivity

Activities

.InstallActivity

Permissions

Services

com.canonical.ubuntu.installer.UbuntuInstallService

Android Permissions

UbuntuInstaller.apk