adlock[.]apk | Triage

General

Target

adlock.apk
Size

20.4MB
MD5

680640b2db917e189c16fba996847191
SHA1

e63e35f4f925788c4f42b6058654e0cf950699a6
SHA256

5146e911843e49b61c6f2edbc36a96d07c197f5114249fb5002a5e8cbc67f338
SHA512

87b187aade6c861c488917f24ce93d5c721753253ecd31635b75dbd492f9ff43f9aad294706a78169f3f055b09633a316397888258e17df72c55b08943689ca4
SSDEEP

393216:jDqQPyiqRN0moobNF3VuoeSbjC4BHhgHkeYz8qJCyv0no8bH47istrEk0Lj5s:jDnyPRNDTunGjC4VhLeYRgyvSzH4nWkN

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

adlock.apk
.apk android arch:arm64 arch:arm

com.adlock

com.adlock.MainActivity

Activities

com.adlock.MainActivity

android.intent.action.MAIN

com.adlock.ActivityRouter

android.intent.action.VIEW

com.hankuper.player.gui.activity.MainPlayerActivity

android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT

com.hankuper.player.gui.activity.RoutActivity

android.intent.action.VIEW
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.nfc.action.NDEF_DISCOVERED
android.intent.action.VIEW
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.nfc.action.NDEF_DISCOVERED
android.intent.action.SEND

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.FOREGROUND_SERVICE_DATA_SYNC
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.android.vending.BILLING
android.permission.CAMERA
android.permission.QUERY_ALL_PACKAGES
android.permission.POST_NOTIFICATIONS
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.adlock.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.adlock.BootUpReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
android.intent.action.REBOOT
android.intent.action.LOCALE_CHANGED
com.htc.intent.action.QUICKBOOT_POWERON

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.adlock.NFVpnService

android.net.VpnService

com.adlock.AdlockTile

android.service.quicksettings.action.QS_TILE

com.hankuper.player.videoplayer.service.MediaPlayerService

android.intent.action.MEDIA_BUTTON

Android Permissions

adlock.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.android.vending.BILLING

android.permission.CAMERA

android.permission.QUERY_ALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

com.adlock.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Sharing

General

Malware Config

Signatures

Files

com.adlock

com.adlock.MainActivity

Activities

com.adlock.MainActivity

com.adlock.ActivityRouter

com.hankuper.player.gui.activity.MainPlayerActivity

com.hankuper.player.gui.activity.RoutActivity

Permissions

Receivers

com.adlock.BootUpReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.adlock.NFVpnService

com.adlock.AdlockTile

com.hankuper.player.videoplayer.service.MediaPlayerService

Android Permissions

adlock.apk