litesign[.]apk

General

Target

litesign.apk
Size

3.9MB
MD5

60bc23d3d453f258e2c4ca421cd086a9
SHA1

7c8364823b0a2e96ab1fc7d1f36500a160880c97
SHA256

70baca89bb6b76f26076c01c35cf531018064fe5ab3d6332312500e7c1def9e1
SHA512

130f5623064b701999a70c64769daa66aaefc1db830ffe3d877f838d62851f09afedf3f0e482bcd5e58894644644b2a269af9f2669d0050089a298ead1d51699
SSDEEP

98304:DCOLefYQnuW4Ui7NoKWu7N8VtpHTVuUuqHTp:DCOLKYQnF4UP7u7+5uC1

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG

Files

litesign.apk
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.android.system.lite

com.gogo.bb.sdk.cmp.DefaultLActivity

Activities

com.gogo.bb.sdk.cmp.DefaultLActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_MTK_MMHW
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.NFC
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_PROFILE
android.permission.HOTKNOT
android.permission.UPDATE_DEVICE_STATS
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.READ_INTERNAL_STORAGE
android.permission.WRITE_INTERNAL_STORAGE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.NFC
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.WRITE_SETTINGS
android.permission.WAKE_LOCK
android.permission.REAL_GET_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.WRITE_MEDIA_STORAGE
android.permission.CALL_PHONE
android.permission.DISABLE_KEYGUARD
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.SET_PREFERRED_APPLICATIONS
android.permission.INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.EXPAND_STATUS_BAR
android.permission.WRITE_SECURE_SETTINGS
android.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_MISS_INFO
android.permission.GET_INTENT_SENDER_INTENT
android.permission.MEDIA_CONTENT_CONTROL
android.permission.PACKAGE_USAGE_STATS
android.permission.START_ANY_ACTIVITY
android.permission.CHANGE_NETWORK_STATE
android.permission.SEND_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.READ_SMS
android.permission.READ_SETTINGS
org.simalliance.openmobileapi.SMARTCARD
android.permission.BLUETOOTH
android.permission.FORCE_STOP_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.UPDATE_APP_OPS_STATS
android.permission.REMOVE_TASKS
android.permission.SET_ACTIVITY_WATCHER
android.permission.GRANT_RUNTIME_PERMISSIONS
android.permission.REVOKE_RUNTIME_PERMISSIONS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.STATUS_BAR_SERVICE
com.android.launcher.permission.INSTALL_WIDGET
android.permission.BIND_APPWIDGET
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.MANAGE_ACTIVITY_STACKS
android.permission.REBOOT
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_PACKAGE_SIZE
android.permission.READ_LOGS
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.REORDER_TASKS
android.permission.DELETE_PACKAGES
android.permission.CLEAR_APP_CACHE
android.permission.CLEAR_APP_USER_DATA
android.permission.SET_ALARM
android.permission.GRANT_REVOKE_PERMISSIONS
android.permission.RESTART_PACKAGES
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.ACCESS_ALL_DOWNLOADS
android.permission.BIND_SHOW_REMOTE_PUSH_SERVICE
android.permission.RECEIVE_USER_PRESENT
android.permission.ACCESS_COARSE_UPDATES
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.STOP_APP_SWITCHES
android.permission.DELETE_CACHE_FILES
android.permission.INTERACT_ACROSS_USERS
android.permission.USE_FULL_SCREEN_INTENT
android.permission.FOREGROUND_SERVICE
android.permission.QUERY_ALL_PACKAGES
android.permission.POST_NOTIFICATIONS
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.BATTERY_STATS
android.permission.AUTHENTICATE_ACCOUNTS
com.android.system.lite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Receivers

com.gogo.bb.sdk.cmp.DReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.intent.action.ACTION_REBOOT
android.intent.action.SCREEN_OFF
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT
android.intent.action.LOCKED_BOOT_COMPLETED
android.intent.action.MEDIA_MOUNTED
jpush_adapter_wakeup
android.intent.action.EVENT_REMINDER
android.hardware.usb.action.USB_STATE
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
com.app.startrecevice
android.intent.action.TIME_TICK
android.intent.action.TIMEZONE_CHANGED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.MY_PACKAGE_REPLACED
android.intent.action.DATE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.gogo.bb.sdk.cmp.LiveService

android.intent.action.XEM_VIEW

com.gogo.bb.sdk.cmp.MonitorAccessibilityService

android.accessibilityservice.AccessibilityService

com.gogo.bb.sdk.cmp.MonitorNotificationListenerService

android.service.notification.NotificationListenerService

Android Permissions

litesign.apk

Permissions

android.permission.ACCESS_MTK_MMHW

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.NFC

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_PROFILE

android.permission.HOTKNOT

android.permission.UPDATE_DEVICE_STATS

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.READ_INTERNAL_STORAGE

android.permission.WRITE_INTERNAL_STORAGE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.NFC

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.REAL_GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.WRITE_MEDIA_STORAGE

android.permission.CALL_PHONE

android.permission.DISABLE_KEYGUARD

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SET_PREFERRED_APPLICATIONS

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.EXPAND_STATUS_BAR

android.permission.WRITE_SECURE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.android.system.lite

com.gogo.bb.sdk.cmp.DefaultLActivity

Activities

com.gogo.bb.sdk.cmp.DefaultLActivity

Permissions

Receivers

com.gogo.bb.sdk.cmp.DReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.gogo.bb.sdk.cmp.LiveService

com.gogo.bb.sdk.cmp.MonitorAccessibilityService

com.gogo.bb.sdk.cmp.MonitorNotificationListenerService

Android Permissions

litesign.apk