Androlyzer

Know more about your apps

App description

Lost Android

com.androidlost
Rating:
(4.2)
Downloads: 5,000,000 - 10,000,000
Version: 2.73 (130)
by Theis Borg

Remotely control your Android phone from the http://www.androidlost.com or by SMS.Features:* read sent and received SMS messages* wipe phone* lock phone* erase SD card* locate by GPS or network* start alarm with flashing screen* send SMS from web page* message popup* forward calls* phone status: battery, imei, etc.* remote SMS alarm* remote SMS lock and unlock* remote SMS erase SD card* remote SMS wipe phone* remote SMS APN control* start/stop GPS* start/stop WIFI* hide from launcher* email when SIM card is changed* get call list* take picture with front camera* take picture with rear camera* make your phone speak with text-to-speech* SMS message command* SMS speak command* lock timeout* restore settings on boot* record sound from microphone* start and stop data connection from SMS* start and stop WIFI connection from SMS* content browser prototypeThe app does no polling to a server, so there is no extra battery usage.This app uses the Device Administrator permission.More details on the control web site: http://www.androidlost.com.Have a question? Please use the forum: http://groups.google.com/group/androidlostIf you have trouble uninstalling, please read the FAQ - there are several one-click solutions!

Analysis results

Malicious code

  • Add custom device admin
  • Gain superuser privileges

Privacy leaks

  • Call number
  • Location to Outgoing SMS
  • SIM ID to HTTP upload
  • SIM ID to Network
  • SIM ID to Outgoing SMS
  • SMS to HTTP upload
  • SMS to Network
  • SMS to Outgoing SMS

Confidential sources

  • Bluetooth MAC address
  • Browser bookmarks
  • Call logs
  • Camera hardware
  • Contacts
  • Current Wifi info
  • IMEI
  • IMSI
  • Location
  • SIM ID
  • SMS
  • Telephone number
  • User Input

Suspicious functions

  • Make Call
  • Start Media Recorder

Permissions

  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.BLUETOOTH
  • android.permission.BLUETOOTH_ADMIN
  • android.permission.CALL_PHONE
  • android.permission.CAMERA
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.CHANGE_WIFI_STATE
  • android.permission.FLASHLIGHT
  • android.permission.GET_ACCOUNTS
  • android.permission.INTERNET
  • android.permission.MODIFY_AUDIO_SETTINGS
  • android.permission.MODIFY_PHONE_STATE
  • android.permission.READ_CALL_LOG
  • android.permission.READ_CONTACTS
  • android.permission.READ_EXTERNAL_STORAGE
  • android.permission.READ_LOGS
  • android.permission.READ_PHONE_STATE
  • android.permission.READ_SMS
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.RECEIVE_SMS
  • android.permission.RECORD_AUDIO
  • android.permission.SEND_SMS
  • android.permission.SYSTEM_ALERT_WINDOW
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_APN_SETTINGS
  • android.permission.WRITE_EXTERNAL_STORAGE
  • android.permission.WRITE_SECURE_SETTINGS
  • android.permission.WRITE_SETTINGS
  • android.permission.WRITE_SMS
  • com.android.browser.permission.READ_HISTORY_BOOKMARKS
  • com.android.vending.BILLING
  • com.androidlost.permission.C2D_MESSAGE
  • com.google.android.c2dm.permission.RECEIVE

Features used

  • android.hardware.camera
  • android.hardware.camera.autofocus
  • android.hardware.camera.flash
  • android.hardware.location.gps
  • android.hardware.telephony

URLs

Other URLs

  • https://androidlost.appspot.com
  • https://maps.googleapis.com
  • https://new.androidlost.com

Version info

APK hash: 716b98e2b6fa7037b5104b4b6e611c1808a00097
Other versions:
129/2e69a72de2896d5bf5002c146e18939ff62d7835

Source structure


Used libraries

APIs used

  • android.database.sqlite
  • java.security
  • android.view
  • java.net
  • java.sql
  • android.content.pm
  • java.lang.reflect
  • android.net.wifi
  • org.apache.http.impl.client
  • android.os
  • android.webkit
  • android.database
  • org.apache.http.client.entity
  • android.app.admin
  • javax.net.ssl
  • android.net
  • android.location
  • android.widget
  • android.bluetooth
  • android.util
  • android.speech.tts
  • android.hardware
  • java.text
  • org.json
  • android.accounts
  • org.apache.http.util
  • java.io
  • java.util.zip
  • java.util.regex
  • java.lang
  • android.app
  • android.telephony.gsm
  • android.telephony
  • java.security.spec
  • org.apache.http
  • android.text
  • android.provider
  • java.util.concurrent
  • org.apache.http.message
  • org.apache.http.client
  • android.media
  • java.util
  • org.apache.http.client.methods
  • android.content

Other packages

  • a.a.a
  • a.a.a.a
  • a.a.a.b
  • a.a.a.c
  • com.a.a.a
  • com.a.b.a
  • com.google.android.gcm