com.xunmeng.pinduoduo.pe68837fe
android.intent.action.MAIN
com.xunmeng.pinduoduo.pdd4f2ff0
android.intent.action.MAIN
com.xunmeng.pinduoduo.p2e25ec69
android.intent.action.SEND
android.intent.action.SENDTO
Static task
static1
1 signatures
General
-
Target
Malware.unknown.apk.malz.7z
-
Size
2.8MB
-
MD5
d9522603a51236d1ee55c874ded118ff
-
SHA1
e3e20bd8c48a8ba9141d44d0356e3a51e3400014
-
SHA256
7b79338e8a5f73eb4f6b1727992c3e6d0616053f29620cce7024b25eb9c69ecc
-
SHA512
f53264157ebeaddfc83f99c86c9b4d4361c9c2cc54fa3e780537c20d00014fe1a6989f9c85b3ab1a125d9c5ce57f9b4365b04ca4fbcc77ea56459130dcfcb596
-
SSDEEP
49152:gq8Z0Lu+pbYMC1TrDvPnbYfksPzwD/ti6L9v902Dg8EkwGvxnUfnUDJVFF:gqfuWInvfsMsPMNLV53wGv1UfnUz
Score
7/10
Malware Config
Signatures
-
Requests dangerous framework permissions 6 IoCs
description ioc Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to read SMS messages. android.permission.READ_SMS Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE
Files
-
Malware.unknown.apk.malz.7z.7z
Password: infected
-
Malware.unknown.apk.malz/Malware.unknown.apk.malz.apk android
com.xunmeng.pinduoduo
com.xunmeng.pinduoduo.pdd4f2ff0
Activities
Permissions
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.READ_CONTACTS
android.permission.FOREGROUND_SERVICE
android.permission.WRITE_SMS
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_NETWORK_STATE
Receivers
com.xunmeng.pinduoduo.pec08273e
android.provider.Telephony.SMS_DELIVER
com.xunmeng.pinduoduo.pb601e383
android.provider.Telephony.WAP_PUSH_DELIVER
Services
com.xunmeng.pinduoduo.p5ac58bb5
android.intent.action.RESPOND_VIA_MESSAGE
com.xunmeng.pinduoduo.p2bc32733
android.service.notification.NotificationListenerService
com.xunmeng.pinduoduo.pa5234fd9
android.accessibilityservice.AccessibilityService
-
66666692.appinfo.json
-
SE.bin
-
actions.properties
-
address.json
-
ae-clientSetting-abtest.json
-
ae2016.cer
-
ae_rcmd_item.wlasm.zip.zip
-
__MACOSX/._ae_rcmd_item.wlasm
-
ae_rcmd_item.wlasm
-
ae_search_item.wlasm.zip.zip
-
__MACOSX/._ae_search_item.wlasm
-
ae_search_item.wlasm
-
ae_search_item_new.mus.wlasm.zip.zip
-
__MACOSX/._ae_search_item_new.mus.wlasm
-
ae_search_item_new.mus.wlasm
-
aliexpress.cer
-
asyncResultfail2.json
-
async_credit_card.json
-
audio_windmillapi.json
-
collageDetailMock.json
-
cosmos_api.properties
-
country_zone_map
-
feis_iconfont.ttf
-
floorcontainerorangesetting.json
-
format_time
-
hmsrootcas.bks
-
image_windmillapi.json
-
license-ru.html.html .js
-
license.html.html .js
-
msu.aliexpress.cer
-
pattern_index
-
python27.zip.zip
-
UserDict.pyc
-
__MACOSX/._site.pyc
-
_abcoll.pyc
-
_sysconfigdata.pyc
-
_weakrefset.pyc
-
abc.pyc
-
copy_reg.pyc
-
genericpath.pyc
-
linecache.pyc
-
os.pyc
-
posixpath.pyc
-
re.pyc
-
site-packages/README
-
site.pyc
-
sre_compile.pyc
-
sre_constants.pyc
-
sre_parse.pyc
-
stat.pyc
-
sysconfig.pyc
-
traceback.pyc
-
types.pyc
-
warnings.pyc
-
render.json
-
render1.json
-
render_h5_bridge.js.js
-
render_selected.json
-
render_with_id_auth.json
-
route_api.properties
-
route_page.properties
-
search_album_template.properties
-
security.json
-
shop_snapshot_template.html.html
-
test.json
-
tr_china_cities.json
-
tr_china_cities_v2.db
-
triver.mock.appinfo.json
-
updatesdkcas.bks
-
verisign3.cer
-
video-swipe.json
-
video_windmillapi.json
-
vision_config.dtd
-
vision_config.xml.xml
-
waiting_skeleton.json
-
weex_config_bindingx.json
-
weex_config_fashionai.json
-
weex_config_interactive.json
-
weex_config_mytaobao.json
-
weex_config_shopref.json
-
weex_config_tblive.json
-
weex_config_tbplay.json
-
wlmock.json
-
workerjs_multiworker.js.js
-
workerjs_v8.js.js
-
xCSswjlO.king
-
yuv2rgb.frag
-
yuv2rgb.vert