Code Analysis for two Android virus applications

In contrast to Android, the outlook is good, but it seems to me that the market is a bit messy. Applications that are good, almost, or even self-interested are all mixed in the Android app market, recently, I saw on the Internet Lenovo app security detection and research team expose the virus code analysis for the two Android apps, which is also presented here.

Virus application 1: Crazy four-wheel drive DreamRace4x4 Free

Test results: dangerous-PUSH advertisement/Silent Installation

Behavior description: The app is a free racing app with exquisite pictures and smooth processes. According to the Application Security Detection of happy store and the preliminary inspection by the research team, the APP has the permission to silently install and remove the installation package, as well as the action of installing an unknown application. At the same time, there are also PUSH ads, which may cause a certain loss to the user's traffic, and will also occupy the location of the notification bar to disturb the user's use.

Application:

Virus Application 2: Super-accurate horoscope

Detection Result: dangerous-transmission of data and sending of Customized Business Information

Action Description:

This application is a constellation fortune-telling application with a wide user base and extremely simple and easy to use. After preliminary checks by the Application Security Detection and Research Group of happy store, it is found that the application permissions are inconsistent with the functions of the application, such as sending information, modifying network settings, and writing data to external storage. After in-depth analysis, it is found that it has serious privacy leaks, such as file downloading and transmitting internal data, which breaks through the ring device.

Figure: Data Transmission

Figure: Send custom business information application: