PandaHelper-1[.]2[.]1-(38)-panda_1an[.]apk

Sharing

Copy URL Twitter E-mail

General

Target

PandaHelper-1.2.1-(38)-panda_1an.apk
Size

20.2MB
MD5

6734f4ac726e552373a22700aff2a89e
SHA1

06b0660072ce012875220389fbd54ebb92e383e4
SHA256

b3c970d7ac628eb49505abc91001ed17115d5ae265fcbdd8e9748e458b029278
SHA512

0fc6e15c405585a2904350fe82c2ff76648e11fd293ccfbb987d5ac3819b591c1ea1909ce5145669cb6706bf646edae7ac3383a941a0cd81e6bc4168f4f3241a
SSDEEP

393216:UNK3i10H79V6y2kvSRhyuaUFr90nbIuvMemRXS8Ct7Erb8OxBOD34Ob:UNn1g7GxkvSRhyuaM9mbIqmRXSLt0IOK

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

PandaHelper-1.2.1-(38)-panda_1an.apk
.apk android arch:arm64 arch:arm

com.pd.pdhelper

com.tb.pandahelper.ui.splash.SplashActivity

Activities

com.tb.pandahelper.ui.topic.TopicDetailActivity

android.intent.action.VIEW

com.tb.pandahelper.ui.splash.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.tb.pandahelper.ui.appdetail.AppDetailActivity

android.intent.action.VIEW

com.tb.pandahelper.ui.WebViewActivity

android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.FOREGROUND_SERVICE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE
com.google.android.gms.permission.AD_ID
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.tb.pandahelper.receiver.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

com.tb.pandahelper.downloads.DownloadReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.tb.pandahelper.receiver.AppPackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tb.pandahelper.download.DownloadReceiver

com.pd.pdhelper.downloads.action.DOWNLOAD_NOTIFICATION_CLICKED
com.pd.pdhelper.downloads.action.DOWNLOAD_COMPLETE
com.pd.pdhelper.downloads.action.DOWNLOAD_URL
android.intent.action.DOWNLOAD_COMPLETE

com.mbridge.msdk.click.AppReceiver

android.intent.action.PACKAGE_ADDED

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.tradplus.china.common.NotificationBroadcaseReceiver

action_notification_click
action_notification_cancel

Services

com.mbridge.msdk.shell.MBService

com.mbridge.msdk.download.action
.jgapp
audience_network.dex
.dex
data.json
libjiagu.so
.elf linux arm
libjiagu_a64.so
.elf linux aarch64
libjiagu_x64.so
.elf linux x64
libjiagu_x86.so
.elf linux x86
mbridge_download_dialog_view.xml
.xml
privacy_policy_setting.html
.html

Android Permissions

PandaHelper-1.2.1-(38)-panda_1an.apk

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ

me.everything.badger.permission.BADGE_COUNT_WRITE

com.google.android.gms.permission.AD_ID

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.pd.pdhelper

com.tb.pandahelper.ui.splash.SplashActivity

Activities

com.tb.pandahelper.ui.topic.TopicDetailActivity

com.tb.pandahelper.ui.splash.SplashActivity

com.tb.pandahelper.ui.appdetail.AppDetailActivity

com.tb.pandahelper.ui.WebViewActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.tb.pandahelper.receiver.ConnectionChangeReceiver

com.tb.pandahelper.downloads.DownloadReceiver

com.tb.pandahelper.receiver.AppPackageReceiver

com.tb.pandahelper.download.DownloadReceiver

com.mbridge.msdk.click.AppReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.tradplus.china.common.NotificationBroadcaseReceiver

Services

com.mbridge.msdk.shell.MBService

Android Permissions

PandaHelper-1.2.1-(38)-panda_1an.apk