拼多多_6[.]50[.]3[.]apk

General

Target

拼多多_6.50.3.apk
Size

3.2MB
MD5

a4d576b2217f5bdcc4efca32e703e0a2
SHA1

5703dc18b0092465cc69af76897a0555b593f9ab
SHA256

693dccf58f7e5515ad34b753002711b505bc97d9c7005dd5f5ef7088955c5aed
SHA512

74a4165f6a0cd3ab8c1803dd4f8f39efa6db4ace187975b0fb6f55e778eba65904a40928ccaf623a0a0f687fa88d2ed8203c6dc9667c5f957feffe27b6cea485
SSDEEP

98304:oYnmriYPJ5Tlfo9hWsHADQrawqxaZdXjmN:ZuiYxsRg+a3cZVw

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

拼多多_6.50.3.apk
.apk android arch:arm64 arch:arm

com.xunmeng.pinduoduo

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

Activities

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

android.intent.action.MAIN
com.aimi.android.ACTION_NEW_PAGE_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW

com.xunmeng.pinduoduo.ui.activity.GeneralFloatingViewActivity

com.xunmeng.pinduoduo.ACTION_FLOATING_VIEW_ACTIVITY

com.xunmeng.pinduoduo.ui.activity.GeneralWebActivity

com.xunmeng.pinduoduo.ACTION_GENERAL_WEB_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.auth.pay.qqpay.QQCallbackActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_LOGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_PACKAGE_SIZE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BLUETOOTH
com.xunmeng.pinduoduo.permission.lifecycle
android.permission.WRITE_CALENDAR
android.permission.VIBRATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
com.meizu.flyme.push.permission.RECEIVE
com.xunmeng.pinduoduo.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
com.xunmeng.pinduoduo.permission.C2D_MESSAGE
android.permission.GET_TASKS
com.xunmeng.pinduoduo.permission.MIPUSH_RECEIVE
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
com.xunmeng.pinduoduo.permission.NOTIFICATION_RECORD
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WIRTE_SETTINGS
com.android.launcher.permission.ID
com.samsung.android.launcher.permission.READ_SETTINGS
net.oneplus.launcher.permission.READ_SETTINGS
net.oneplus.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.WRITE_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
com.xunmeng.pinduoduo.permission.JPUSH_MESSAGE
com.xunmeng.pinduoduo.remote_config
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.CHANGE_NETWORK_STATE
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.USE_FULL_SCREEN_INTENT
com.xunmeng.pinduoduo.permission.permission.PROCESS_PUSH_MSG
android.permission.SCHEDULE_EXACT_ALARM
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE

Receivers

com.aimi.android.common.push.xiaomi.MiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.aimi.android.common.push.vivo.VivoPushReceiver

com.vivo.pushclient.action.RECEIVE

com.aimi.android.common.push.meizu.MeizuPushReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.xunmeng.pinduoduo.plugin.utils.TitanAppLifecycleReceiver

com.xunmeng.pinduoduo.action.titan_on_foreground
com.xunmeng.pinduoduo.action.titan_on_background

com.xunmeng.pinduoduo.plugin.utils.AppLifecycleReceiver

com.xunmeng.pinduoduo.action.on_foreground
com.xunmeng.pinduoduo.action.on_background

com.xunmeng.pinduoduo.plugin.PluginDownloadReceiver

com.xunmeng.pinduoduo.start_plugin_download

com.xunmeng.pinduoduo.plugin.SetPreloadedReceiver

com.xunmeng.pinduoduo.set_preload_plugin_action

com.aimi.android.common.tiny_stat.MsgTransferReceiver

com.aimi.android.common.tiny_stat.ACTION_MSG_RECEIVER

com.xunmeng.pinduoduo.tiny.common.device.LogicResetReceiver

com.xunmeng.pinduoduo.basekit.task.ACTION_LOGIC_RECEIVER

Services

com.aimi.android.common.push.oppo.OppoPushService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

Android Permissions

拼多多_6.50.3.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH

com.xunmeng.pinduoduo.permission.lifecycle

android.permission.WRITE_CALENDAR

android.permission.VIBRATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

com.meizu.flyme.push.permission.RECEIVE

com.xunmeng.pinduoduo.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.xunmeng.pinduoduo.permission.C2D_MESSAGE

android.permission.GET_TASKS

com.xunmeng.pinduoduo.permission.MIPUSH_RECEIVE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

com.xunmeng.pinduoduo.permission.NOTIFICATION_RECORD

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WIRTE_SETTINGS

com.android.launcher.permission.ID

com.samsung.android.launcher.permission.READ_SETTINGS

net.oneplus.launcher.permission.READ_SETTINGS

net.oneplus.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.WRITE_SYNC_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

com.xunmeng.pinduoduo.permission.JPUSH_MESSAGE

com.xunmeng.pinduoduo.remote_config

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.CHANGE_NETWORK_STATE

Sharing

General

Malware Config

Signatures

Files

com.xunmeng.pinduoduo

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

Activities

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

com.xunmeng.pinduoduo.ui.activity.GeneralFloatingViewActivity

com.xunmeng.pinduoduo.ui.activity.GeneralWebActivity

com.tencent.tauth.AuthActivity

com.xunmeng.pinduoduo.auth.pay.qqpay.QQCallbackActivity

Permissions

Receivers

com.aimi.android.common.push.xiaomi.MiPushReceiver

com.aimi.android.common.push.vivo.VivoPushReceiver

com.aimi.android.common.push.meizu.MeizuPushReceiver

com.xunmeng.pinduoduo.plugin.utils.TitanAppLifecycleReceiver

com.xunmeng.pinduoduo.plugin.utils.AppLifecycleReceiver

com.xunmeng.pinduoduo.plugin.PluginDownloadReceiver

com.xunmeng.pinduoduo.plugin.SetPreloadedReceiver

com.aimi.android.common.tiny_stat.MsgTransferReceiver

com.xunmeng.pinduoduo.tiny.common.device.LogicResetReceiver

Services

com.aimi.android.common.push.oppo.OppoPushService

Android Permissions

拼多多_6.50.3.apk