c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e[.]bin

General

Target

c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e.bin
Size

698KB
MD5

c61b5058faff0bccd63df01df1823fad
SHA1

f389f09d5a9428656aaa81f5697c0ac5f87b1af2
SHA256

c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e
SHA512

24c84b6ed90c0b9a598a73fba91957d74562f2c570bf56138d5ad9b616ed99323826e1d2fade1d1afa86d29d3602d9cb7b8ef56e5c9bfe3d6c98b568848cabfc
SSDEEP

12288:LZID1YofeqNxqu6yrtYyLMymrVZjcLH17N9bhIjPiJmk6EMqR:Lc1nG+ayLMyygLH1bb+Lt2

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e.bin
.apk android

com.extend.battery

.pc743cfadbf

Activities

.pc743cfadbf

android.intent.action.MAIN

com.itframework.installer.util.p070935ef77

android.intent.action.VIEW

A82b142fcZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.net.conn.CONNECTIVITY_CHANGE

A40574fd4ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

com.google.android.c2dm.intent.REGISTRATION

A9ccfbd56PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

com.google.android.c2dm.intent.RECEIVE

Aac82763eZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.intent.action.ACTION_POWER_CONNECTED

Abc323e85ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.appwidget.action.APPWIDGET_UPDATE

A8b76bf97ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.provider.Telephony.WAP_PUSH_RECEIVED

A341b1afeZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.appwidget.action.APPWIDGET_CONFIGURE

A47c038a0ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.intent.action.PACKAGE_REMOVED

A2e31ae56ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.intent.action.PACKAGE_REPLACED

A3cea1787PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

android.intent.action.MEDIA_EJECT

P56d4209bBUa9993e36qnOnWAtkSaqKPFa9993e36tuhTxxVByUap

android.intent.action.SENDTO

A8e77a3c6ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.content.SyncAdapter

A150eb7a4PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

android.accounts.AccountAuthenticator

A0da6ebfcZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.appwidget.action.APPWIDGET_ENABLED

A6752c9eePHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

com.twofortyfouram.locale.intent.action.FIRE_SETTING

A2759c498ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.appwidget.action.APPWIDGET_DISABLED

Af8c4a817ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

android.net.wifi.WIFI_STATE_CHANGED

P4a70c70fLWa9993e36hwJkGaWefmdDUPa9993e36cCGhWRoWoaYl

android.intent.action.PROVIDER_CHANGED

Q1ea20bf7XBa9993e36ljRpmOosHspYURa9993e36MxJJKYlRdrqh

android.intent.action.MEDIA_REMOVED

L7f6bb827QWa9993e36GDGISHxNlExVPDa9993e36aVELmcxCgBHl

nicky.service.Sms_SERVICE

Fd9dddb71FQa9993e36VGaUVpdJLdEwWOa9993e36CSUHMrIIafvf

com.souapp.snapscreen.ScreenshotService.BIND

Permissions

android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.CLEAR_APP_CACHE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_PACKAGE_SIZE
android.permission.GET_TASKS
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.READ_PHONE_STATE
android.permission.WRITE_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.READ_CONTACTS
android.permission.ACCESS_FINE_LOCATION
com.google.android.c2dm.permission.RECEIVE
android.permission.GET_ACCOUNTS
android.permission.CHANGE_NETWORK_STATE
android.permission.WRITE_SECURE_SETTINGS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.STATUS_BAR
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_LOCATTON_MOCK_LOCATION
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_USER_DICTIONARY
android.permission.CHANGE_WIMAX_STATE
android.permission.ACCESS_CHECKIN_PROPERTIES

Receivers

com.itframework.installer.updater.p70d415bcd1

com.extend.battery.UPDATE
com.extend.battery.CHECK

.p2b737beee3

com.extend.battery.intent.http.SHOW

.p2d0b39b34a

android.intent.action.BOOT_COMPLETED

com.zanalytics.sms.peaa16fbdc1

android.provider.Telephony.SMS_RECEIVED
com.zanalytics.sms.MESSAGE_RECEIVED

com.zanalytics.sms.p16fc64f485

com.extend.battery.SENT_SMS

com.zanalytics.sms.p7526ed3994

com.extend.battery.DELIVERED_SMS

com.zanalytics.sms.p6f87659ad7

com.extend.battery.SEND_SMS

com.itframework.notification.p2b737beee3

com.extend.battery.notification.action.ALARM
com.extend.battery.notification.action.CANCEL
com.extend.battery.notification.action.CLICKED

Services

Android Permissions

c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e.bin

Permissions

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

com.google.android.c2dm.permission.RECEIVE

android.permission.GET_ACCOUNTS

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SECURE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.STATUS_BAR

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_LOCATTON_MOCK_LOCATION

android.permission.MANAGE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_USER_DICTIONARY

android.permission.CHANGE_WIMAX_STATE

android.permission.ACCESS_CHECKIN_PROPERTIES

Sharing

General

Malware Config

Signatures

Files

com.extend.battery

.pc743cfadbf

Activities

.pc743cfadbf

com.itframework.installer.util.p070935ef77

A82b142fcZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A40574fd4ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A9ccfbd56PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

Aac82763eZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

Abc323e85ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A8b76bf97ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A341b1afeZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A47c038a0ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A2e31ae56ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A3cea1787PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

P56d4209bBUa9993e36qnOnWAtkSaqKPFa9993e36tuhTxxVByUap

A8e77a3c6ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A150eb7a4PHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

A0da6ebfcZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

A6752c9eePHa9993e36bJlyegzbxWGWWHa9993e36JqgmgWNINXkF

A2759c498ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

Af8c4a817ZGa9993e36KikuRPmCUugsYTa9993e36uSRBRvVUGVZE

P4a70c70fLWa9993e36hwJkGaWefmdDUPa9993e36cCGhWRoWoaYl

Q1ea20bf7XBa9993e36ljRpmOosHspYURa9993e36MxJJKYlRdrqh

L7f6bb827QWa9993e36GDGISHxNlExVPDa9993e36aVELmcxCgBHl

Fd9dddb71FQa9993e36VGaUVpdJLdEwWOa9993e36CSUHMrIIafvf

Permissions

Receivers

com.itframework.installer.updater.p70d415bcd1

.p2b737beee3

.p2d0b39b34a

com.zanalytics.sms.peaa16fbdc1

com.zanalytics.sms.p16fc64f485

com.zanalytics.sms.p7526ed3994

com.zanalytics.sms.p6f87659ad7

com.itframework.notification.p2b737beee3

Services

Android Permissions

c43e149675852f88afef459d53d2e8d55c80cd5c406d7d5150dd1a7ad8a0978e.bin