General

  • Target

    拼多多官方_ALL.apk

  • Size

    30.6MB

  • MD5

    7de60c6e0308833eaf3989cbbc834feb

  • SHA1

    71c8204e098076a1421421695c2850ea23eb1528

  • SHA256

    52e953e485be924539c98a510f4ed09deeea6cc8cc243bcdfbd1ef6cfe1792f0

  • SHA512

    80648818add8ebb58c498e3de4b83ee50aa6fd52b2cc5a7c124e35a96c923daaf79318aaa24e14fffe03bccc93b570936327b454310550f6f49f5b82caf01aad

  • SSDEEP

    786432:x77dmFsXOndgXH43X/hv21h1wNdvp2WWY7z1z/fdyDf/N+BysLFD9:xHdmFsQCXYQ1h2NdvpvWY7zpfcL/CyaX

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 12 IoCs

Files

  • 拼多多官方_ALL.apk
    .apk android arch:arm64 arch:arm

    com.xunmeng.pinduoduo

    com.xunmeng.pinduoduo.ui.activity.MainFrameActivity


  • A25
  • CDA
  • Filter.js
    .js
  • Service.js
    .js
  • animation.fontani
  • app_comment.ttf
  • app_dynamic_view_placeholder_round.png
    .png
  • app_personal.ttf
  • audio_comment_data.json
  • audio_comment_img_0.png
    .png
  • badge_tabs_config.json
  • badge_white_list_config.json
  • banks.json
  • camera_fps_configs.json
  • camera_model_configs.json
  • car.png
    .png
  • chat.ttf
  • chat_gif.json
  • ci.properties
  • com.tencent.open.config.json
  • com.xunmeng.pinduoduo.web.zip
    .zip
  • com.xunmeng.pinduoduo.web.manifest
  • com.xunmeng.pinduoduo.web.md5checker
  • dot_white_list_config.json
  • easygo.json
  • effect.tar.lzma
  • effect.tar.lzma.version
  • elder_badge_tabs_config.json
  • event_token.json
  • favorite_guidance
  • homeicon.json
  • icon_count_compute_keys_white_list.json
  • iconfont.ttf
  • index.html
    .html
  • index_catch.html
    .html .js
  • international_country_tel_codes.json
  • lego_bottom_bar
  • lego_live_random_guide
  • lego_live_scene_audio
  • lego_prompt
  • lego_slide_guide
  • lianmai.json
  • libGlProcessor.7z
  • libtitan.7z
  • like_img_0_new.png
    .png
  • like_img_1_new.png
    .png
  • live_chat_rich_msg_white_list.json
  • live_chat_template_config.json
  • live_downgrade_config.json
  • live_fans_entrance
  • live_float_window_config.json
  • live_model_configs.json
  • live_pk_connect.json
  • live_retry_config.json
  • live_rich_notice_format_config.json
  • load_error.html
    .html
  • motor.png
    .png
  • pdd_lego_gift_enter.png
    .png
  • pdd_lego_red_box_icon.png
    .png
  • pdd_live_mic_audio_anima.json
  • pdd_live_mic_invite_anima.json
  • pk_lifebar_indicator.png
    .png
  • plane.png
    .png
  • replay_float_window_config.json
  • safety_number_font.otf
  • scene_buy_vegetable_navi_merge.yaml
    .js
  • scene_chat_detail_merge.yaml
    .js
  • scene_express_merge.yaml
    .js
  • setting_service.json
  • so_uuid
  • v
  • video_edit_default_filter.json
  • video_edit_default_sticker.json
  • video_like_new.json
  • video_stall_loading.json
  • wallet_comm_check.png
    .png
  • wallet_comm_loading.png
    .png
  • wealth_god_img_0.png
    .png
  • wealth_god_img_1.png
    .png
  • wealth_god_img_10.png
    .png
  • wealth_god_img_11.png
    .png
  • wealth_god_img_12.png
    .png
  • wealth_god_img_13.png
    .png
  • wealth_god_img_14.png
    .png
  • wealth_god_img_2.png
    .png
  • wealth_god_img_3.png
    .png
  • wealth_god_img_4.png
    .png
  • wealth_god_img_5.png
    .png
  • wealth_god_img_6.png
    .png
  • wealth_god_img_7.png
    .png
  • wealth_god_img_8.png
    .png
  • wealth_god_img_9.png
    .png

Android Permissions

拼多多官方_ALL.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

com.xunmeng.pinduoduo.permission.MIPUSH_RECEIVE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.CHANGE_NETWORK_STATE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.CHANGE_WIFI_STATE

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.POST_NOTIFICATIONS

android.permission.HIGH_SAMPLING_RATE_SENSORS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WIRTE_SETTINGS

com.samsung.android.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

net.oneplus.launcher.permission.READ_SETTINGS

net.oneplus.launcher.permission.WRITE_SETTINGS

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

android.permission.ACTIVITY_RECOGNITION