mod[.]market2[.]apk

General

Target

mod.market2.apk
Size

1.8MB
MD5

c23539dec20dc408c6047cab70726a97
SHA1

e9f1b6e7758ec361d136f5e0104267ca9ea8847d
SHA256

02491a61c98de1997b4f848e6734598ef33c6daab704b7996d33d0199b242bc4
SHA512

40cbd9663b895a0837f0555bfc52ce4ec2425dc9b3817d1e5321585a670641b602d5acce0d4b035bb232936a5761cfebe9499e70c7d414329ce56b42db8497b1
SSDEEP

49152:QQ4Ss9EEJDuPYaFBS8tnOt8VsTed+hY6Ya4TbKMpkcIkHDGcYVyCz4wNab1:QQgEepKppkcZqt0CzHaZ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

mod.market2.apk
.apk android

com.android.vending

.AssetBrowserActivity

Activities

.AssetBrowserActivity

android.intent.action.MAIN

.FilteredAppListActivity

android.intent.action.VIEW

.QsbSearchActivity

android.intent.action.SEARCH

.SearchAssetListActivity

android.intent.action.SEARCH
android.intent.action.VIEW

.AssetInfoActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.android.vending.billing.IN_APP_NOTIFY.permission.C2D_MESSAGE
com.google.android.c2dm.permission.RECEIVE
com.android.vending.BILLING
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED
android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CLEAR_APP_CACHE
android.permission.INTERNET
android.permission.GET_PACKAGE_SIZE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_CHECKIN_PROPERTIES
android.permission.READ_SYNC_SETTINGS
android.permission.WAKE_LOCK
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
android.permission.SEND
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
com.android.vending.INTENT_VENDING_ONLY
com.google.android.googleapps.permission.GOOGLE_AUTH
com.google.android.googleapps.permission.GOOGLE_AUTH.android
com.google.android.googleapps.permission.GOOGLE_AUTH.androidsecure
com.google.android.googleapps.permission.GOOGLE_AUTH.sierra
com.google.android.googleapps.permission.GOOGLE_AUTH.sierraqa
com.google.android.googleapps.permission.GOOGLE_AUTH.sierrasandbox
com.google.android.gtalkservice.permission.GTALK_SERVICE
com.google.android.gtalkservice.permission.SEND_HEARTBEAT
com.android.vending.permission.UPDATE_MARKET
com.google.android.providers.gsf.permission.READ_GSERVICES
com.google.android.providers.settings.permission.WRITE_GSETTINGS

Receivers

.PackageMonitorReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE

.InstallAssetReceiver

com.google.android.c2dm.intent.RECEIVE
android.intent.action.REMOTE_INTENT
android.intent.action.GTALK_DATA_MESSAGE_RECEIVED

.RemoveAssetReceiver

com.google.android.c2dm.intent.RECEIVE
android.intent.action.REMOTE_INTENT
android.intent.action.GTALK_DATA_MESSAGE_RECEIVED

.ServerNotificationReceiver

com.google.android.c2dm.intent.RECEIVE
android.intent.action.REMOTE_INTENT
android.intent.action.GTALK_DATA_MESSAGE_RECEIVED

.UpdatesAvailableReceiver

com.google.android.c2dm.intent.RECEIVE
com.android.vending.UPDATES_AVAILABLE
com.android.vending.UPDATES_AVAILABLE

.DeclineAssetReceiver

com.google.android.c2dm.intent.RECEIVE
android.intent.action.REMOTE_INTENT
android.intent.action.GTALK_DATA_MESSAGE_RECEIVED

.InvalidateAuthTokenReceiver

com.android.vending.INVALIDATE_AUTH_TOKEN

.DeviceConfigurationReceiver

android.intent.action.LOCALE_CHANGED
android.intent.action.SIM_STATE_CHANGED

.VendingDoctorReceiver

com.android.vending.DOCTOR_FIX_DOWNLOAD_COMPLETES

.MarketWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.android.vending.WIDGET_UPDATE
android.accounts.LOGIN_ACCOUNTS_CHANGED

.billing.BillingTickleReceiver

com.google.android.c2dm.intent.RECEIVE

.billing.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

Services

.licensing.LicensingService

com.android.vending.licensing.ILicensingService

.billing.MarketBillingService

com.android.vending.billing.MarketBillingService.BIND

Android Permissions

mod.market2.apk

Permissions

com.android.vending.billing.IN_APP_NOTIFY.permission.C2D_MESSAGE

com.google.android.c2dm.permission.RECEIVE

com.android.vending.BILLING

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_DOWNLOAD_MANAGER_ADVANCED

android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CLEAR_APP_CACHE

android.permission.INTERNET

android.permission.GET_PACKAGE_SIZE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_CHECKIN_PROPERTIES

android.permission.READ_SYNC_SETTINGS

android.permission.WAKE_LOCK

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

android.permission.SEND

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

com.android.vending.INTENT_VENDING_ONLY

com.google.android.googleapps.permission.GOOGLE_AUTH

com.google.android.googleapps.permission.GOOGLE_AUTH.android

com.google.android.googleapps.permission.GOOGLE_AUTH.androidsecure

com.google.android.googleapps.permission.GOOGLE_AUTH.sierra

com.google.android.googleapps.permission.GOOGLE_AUTH.sierraqa

com.google.android.googleapps.permission.GOOGLE_AUTH.sierrasandbox

com.google.android.gtalkservice.permission.GTALK_SERVICE

com.google.android.gtalkservice.permission.SEND_HEARTBEAT

com.android.vending.permission.UPDATE_MARKET

com.google.android.providers.gsf.permission.READ_GSERVICES

com.google.android.providers.settings.permission.WRITE_GSETTINGS

Sharing

General

Malware Config

Signatures

Files

com.android.vending

.AssetBrowserActivity

Activities

.AssetBrowserActivity

.FilteredAppListActivity

.QsbSearchActivity

.SearchAssetListActivity

.AssetInfoActivity

Permissions

Receivers

.PackageMonitorReceiver

.InstallAssetReceiver

.RemoveAssetReceiver

.ServerNotificationReceiver

.UpdatesAvailableReceiver

.DeclineAssetReceiver

.InvalidateAuthTokenReceiver

.DeviceConfigurationReceiver

.VendingDoctorReceiver

.MarketWidgetProvider

.billing.BillingTickleReceiver

.billing.BootCompletedReceiver

Services

.licensing.LicensingService

.billing.MarketBillingService

Android Permissions

mod.market2.apk