65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3_NeikiAnalytics[.]zip

General

Target

65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3_NeikiAnalytics.zip
Size

4.0MB
MD5

9fb264969071f2eebf7f05326f089ec0
SHA1

608ed930c683ac12352511e7a97839fdbfb69013
SHA256

65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3
SHA512

abbcca84603172f539f7bab6843ed8ed34dd22f937174cf34974dc4dc8f72f7bad60b678be0750d285f55fba0af65e1b2811a8657c0f38bb4894438b58574772
SSDEEP

98304:X/JEKH1n1XZb5Vivv9C4jN85iQsJ9v/fQF+nTxeI0U:X/JEKZFZOQwTJv/fQF+r

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Files

65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3_NeikiAnalytics.zip
.apk android

Password: infected

com.android.browser

BrowserActivity

Activities

BrowserActivity

android.speech.action.VOICE_SEARCH_RESULTS
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
android.intent.action.MAIN
android.intent.action.WEB_SEARCH
android.intent.action.MEDIA_SEARCH
android.intent.action.SEARCH

ShortcutActivity

android.intent.action.CREATE_SHORTCUT

BrowserPreferencesPage

android.intent.action.MANAGE_NETWORK_USAGE

BookmarkSearch

android.intent.action.SEARCH

AddBookmarkPage

android.intent.action.INSERT

.widget.BookmarkWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.INTERNET
android.permission.NFC
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.SET_WALLPAPER
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_PROFILE
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
com.android.launcher.permission.INSTALL_SHORTCUT
droidlogic.permission.SYSTEM_CONTROL

Receivers

.widget.BookmarkThumbnailWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.android.browser.BOOKMARK_APPWIDGET_UPDATE

.OpenDownloadReceiver

android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

.AccountsChangedReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED

.PreloadRequestReceiver

android.intent.action.PRELOAD

com.android.browser.receiver.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

Services

Android Permissions

65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3_NeikiAnalytics.zip

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.NFC

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.SET_WALLPAPER

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PROFILE

android.permission.READ_CONTACTS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

com.android.launcher.permission.INSTALL_SHORTCUT

droidlogic.permission.SYSTEM_CONTROL

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.android.browser

BrowserActivity

Activities

BrowserActivity

ShortcutActivity

BrowserPreferencesPage

BookmarkSearch

AddBookmarkPage

.widget.BookmarkWidgetConfigure

Permissions

Receivers

.widget.BookmarkThumbnailWidgetProvider

.OpenDownloadReceiver

.AccountsChangedReceiver

.PreloadRequestReceiver

com.android.browser.receiver.DownloadCompleteReceiver

Services

Android Permissions

65019b892d7b87f32e535981586d0db375ba994013358bd911a0b2511154ada3_NeikiAnalytics.zip