a[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a.apk
Size

93.9MB
MD5

89b990f56edc66d34aa31add6adf2948
SHA1

cf717ce626c6389e9d94518492f104b0e6571bcf
SHA256

05ab6b97e0e03b3659cf64d28cfe94ec1595136583478afaf0786d4859b47751
SHA512

18e40a0f902581d3aae0c0f112c98ded6e020910775cd951221098a8cfc265a0585390c08ea3ae0958d8dbd21c60d20b7ca5f4db205dfb7cf8fd9fe605cc069a
SSDEEP

1572864:lMZGARVHmT1iBbP31vlOfHkG1rylBljECkJbiYFJ0egkyKf5q2CR8UWqijlnBI:lYG2VHiWvQ2lBJECSbFaBkyKfo23UWqj

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

a.apk
.apk android arch:arm64

com.sdu.didi.psnger

com.didi.sdk.app.launch.splash.SplashActivity

Activities

com.didi.sdk.app.MainActivity

com.didi.home

com.didi.bike.components.auth.view.AuthResultInterceptActivity

android.intent.action.VIEW

com.didi.ride.ui.envswitch.RideEnvSwitchActivity

android.intent.action.VIEW

com.didi.onecar.component.payment.activity.UnipayEntranceActivity

com.didi.unifiedPay.entrance

com.didi.bus.app.scheme.DGASchemeDispatcher

android.intent.action.VIEW

com.didi.bus.app.debug.debugmode.DGADebugCenterActivity

com.didi.bus.gongjiao.debug

com.didi.dynamicbus.payment.UnipayEntranceActivity

com.didi.unifiedPay.entrance.shuttlebus

com.didi.sdk.app.launch.splash.SplashActivity

android.intent.action.VIEW
com.didi.sdk.splash.SplashActivity
android.intent.action.MAIN
android.nfc.action.NDEF_DISCOVERED

com.didi.sdk.app.scheme.SchemeDispatcherActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
com.didi.push
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.didi.sdk.sidebar.setup.mutilocale.MultiLocaleActivityImpl

com.didi.sdk.localeactivity

com.didi.sdk.webview.WebActivity

didi.passenger.intent.action.WebActivity

com.didi.sdk.webview.PassengerProxyWebActivity

didi.passenger.intent.action.PlatformProxyWebActivity

com.didi.sdk.fusionbridge.FusionWebActivity

didi.passenger.intent.action.FusionWebActivity

com.didi.sdk.business.emergencycontacter.EmergencyContacterActivity

didi.passenger.intent.action.EmergencyContacterActivity

com.alipay.sdk.app.AlipayResultActivity

android.intent.action.VIEW

com.didi.carmate.common.dispatcher.BtsLaunchActivity

android.intent.action.VIEW

com.didi.unifiedPay.component.activity.SchemeActivity

android.intent.action.VIEW

com.didi.sdk.payment.view.PaymentActivity

com.didi.sdk.payment.pay

com.didi.sdk.payment.view.select.CouponListActivity

com.didi.sdk.payment.select.coupon

com.didi.sdk.payment.nopassword.view.NoPasswordActivity

com.didi.sdk.payment.nopassword

com.didi.sdk.payment.prepay.view.PrepayActivity

com.didi.sdk.payment.prepay

com.didi.sdk.payment.creditcard.view.CreditCardActivity

com.didi.sdk.payment.creditcard

com.didi.payment.wallet.china.web.WalletWebProxyActivity

com.didi.payment.wallet.china.web.WalletWebProxyActivity

com.didi.payment.wallet.china.signlist.view.activity.SignActivity

com.didi.sdk.payment.sign

com.didi.payment.wallet.china.wallet_old.view.WalletActivity

com.didi.sdk.payment.wallet

com.didi.payment.wallet.china.wallet.view.activity.WalletMainListActivity

com.didi.sdk.payment.newwallet

com.didi.payment.wallet.china.signlist.view.activity.SignListActivity

com.didi.sdk.payment.signlist

com.didi.universal.pay.onecar.view.act.UniversalPaymentActivity

com.didi.universal.general

com.didi.universal.pay.onecar.view.act.UniversalPrePayActivity

com.didi.universal.prepay

com.didi.pay.base.SchemeActivity

android.intent.action.VIEW

com.didi.pay.web.WebProxyActivity

com.didi.pay.web.WebProxyActivity

com.didi.pay.activity.UniversalDispatchActivity

com.didi.universal.pay

com.didi.map.setting.sdk.MapSettingStart

android.intent.action.VIEW

com.didi.universal.pay.sdk.method.bankPay.SchemeActivity

android.intent.action.VIEW

com.didi.universal.pay.sdk.web.WebProxyActivity

com.didi.universal.pay.sdk.web.WebProxyActivity

com.didi.payment.paymethod.creditpay.activity.CreditPayActivity

com.didi.sdk.payment.creditcard

com.didi.payment.creditcard.china.view.activity.CreditCardAddActivity

com.didi.sdk.payment.creditcard

com.didi.beatles.im.access.notify.IMDispatcherActivity

com.didi.im.action.PUSH_DISPATCHER

com.didichuxing.diface.appeal.internal.TakePhotoAct

android.intent.action.VIEW

com.didichuxing.dfbasesdk.webview.DFWebviewAct

android.intent.action.VIEW
android.intent.action.VIEW

com.didi.unifylogin.entrance.AuthorizeActivity

android.intent.action.VIEW

com.didi.sdk.push.vivo.VivoPushClickHandleActivity

android.intent.action.VIEW

com.didi.sdk.push.HuaweiPushIntentReceiver

android.intent.action.VIEW

com.didi.sdk.push.oppo.OppoPushIntentReceiver

android.intent.action.VIEW

com.didi.one.netdiagnosis.DiagnosisActivity

com.sdu.didi.psnger.network.self.diagnosis

com.didi.sdk.push.ui.CheckStateActivity

com.sdu.didi.psnger.com.didi.sdk.push.ui.check

com.didi.sdk.onehotpatch.DebugActivity

com.didi.sdk.onehotpatch.debug

Permissions

android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_CONNECT
android.permission.ACCESS_NETWORK_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.VIBRATE
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
com.didi.passenger.sdk.login.permission.broadcast.com.sdu.didi.psnger
android.permission.RECORD_AUDIO
android.permission.FOREGROUND_SERVICE
android.permission.READ_LOGS
android.permission.FLASHLIGHT
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
com.sdu.didi.psnger.permission.MIPUSH_RECEIVE
com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
com.sdu.didi.psnger.permission.PROCESS_PUSH_MSG
com.sdu.didi.psnger.permission.PUSH_PROVIDER
android.permission.BROADCAST_STICKY
android.permission.NFC
com.vivo.aiengine.permission.BIND_INTENTION_PLUS_SERVICE
android.permission.POST_NOTIFICATIONS
com.asus.msa.SupplementaryDID.ACCESS
freemme.permission.msa

Receivers

com.didi.onecar.business.car.alarm.CommonAlarmReceiver

car_book_half_hour_action

com.didi.onecar.business.appwidget.DiDiAppWidgetProvider41

android.appwidget.action.APPWIDGET_UPDATE

com.didi.onecar.business.appwidget.DiDiAppWidgetProvider43

android.net.conn.CONNECTIVITY_CHANGE
android.appwidget.action.APPWIDGET_UPDATE
com.didi.onecar.business.appwidget.action.APPWIDGET_UPDATE

com.didi.nav.driving.entrance.scheme.CancellationBroadcast

com.xiaojukeji.action.DELETE_ACCOUNT

com.didi.carhailing.onservice.component.service.alarm.CommonAlarmReceiver

car_book_half_hour_action

com.didi.bus.info.appwidget.DGIAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.didi.sdk.apm.CommandReceiver

com.didi.sdk.apm.cmd

com.didi.sdk.push.vivo.VivoPushReceiver

com.vivo.pushclient.action.RECEIVE

com.didi.sdk.push.mi.MiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.didi.sdk.connectivity.NetworkChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.didi.sdk.push.PushNetReceiver

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.intent.action.PUSH_DELAY_NOTIFY
com.huawei.intent.action.PUSH

com.huawei.hms.support.api.push.PushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE

Services

com.didi.onecar.business.wear.services.DiDiWearableListenerService

com.google.android.gms.wearable.DATA_CHANGED
com.google.android.gms.wearable.MESSAGE_RECEIVED
com.google.android.gms.wearable.CAPABILITY_CHANGED
com.google.android.gms.wearable.CHANNEL_EVENT

com.didi.quattro.debug.DebugBridgeService

com.didi.bird.debug

com.didi.sdk.push.tencent.TPushService

action_start_push_service

com.didi.bike.htw.bluetooth.HTWOrderService

android.intent.action.KEEP_ALIVE
android.intent.action.UPLOAD_POSITION
android.intent.action.KEEP_ALIVE_JOB_SERVICE

com.didi.beatles.im.common.IMPollingService

im.service.PollingService

com.didi.sdk.push.HuaweiPushService

com.huawei.push.action.MESSAGING_EVENT

com.didi.sdk.push.oppo.OppoDataMessageCallbackService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE
com.heytap.msp.push.RECEIVE_MCS_MESSAGE

com.didi.sdk.push.oppo.OppoCompatibleDataMessageCallbackService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.huawei.hms.support.api.push.service.HmsMsgService

com.huawei.push.msg.NOTIFY_MSG
com.huawei.push.msg.PASSBY_MSG

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding
hack.apk
.apk android

Android Permissions

a.apk

Permissions

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_NETWORK_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

com.didi.passenger.sdk.login.permission.broadcast.com.sdu.didi.psnger

android.permission.RECORD_AUDIO

android.permission.FOREGROUND_SERVICE

android.permission.READ_LOGS

android.permission.FLASHLIGHT

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.sdu.didi.psnger.permission.MIPUSH_RECEIVE

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.sdu.didi.psnger.permission.PROCESS_PUSH_MSG

com.sdu.didi.psnger.permission.PUSH_PROVIDER

android.permission.BROADCAST_STICKY

android.permission.NFC

com.vivo.aiengine.permission.BIND_INTENTION_PLUS_SERVICE

android.permission.POST_NOTIFICATIONS

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

Sharing

General

Malware Config

Signatures

Files

com.sdu.didi.psnger

com.didi.sdk.app.launch.splash.SplashActivity

Activities

com.didi.sdk.app.MainActivity

com.didi.bike.components.auth.view.AuthResultInterceptActivity

com.didi.ride.ui.envswitch.RideEnvSwitchActivity

com.didi.onecar.component.payment.activity.UnipayEntranceActivity

com.didi.bus.app.scheme.DGASchemeDispatcher

com.didi.bus.app.debug.debugmode.DGADebugCenterActivity

com.didi.dynamicbus.payment.UnipayEntranceActivity

com.didi.sdk.app.launch.splash.SplashActivity

com.didi.sdk.app.scheme.SchemeDispatcherActivity

com.didi.sdk.sidebar.setup.mutilocale.MultiLocaleActivityImpl

com.didi.sdk.webview.WebActivity

com.didi.sdk.webview.PassengerProxyWebActivity

com.didi.sdk.fusionbridge.FusionWebActivity

com.didi.sdk.business.emergencycontacter.EmergencyContacterActivity

com.alipay.sdk.app.AlipayResultActivity

com.didi.carmate.common.dispatcher.BtsLaunchActivity

com.didi.unifiedPay.component.activity.SchemeActivity

com.didi.sdk.payment.view.PaymentActivity

com.didi.sdk.payment.view.select.CouponListActivity

com.didi.sdk.payment.nopassword.view.NoPasswordActivity

com.didi.sdk.payment.prepay.view.PrepayActivity

com.didi.sdk.payment.creditcard.view.CreditCardActivity

com.didi.payment.wallet.china.web.WalletWebProxyActivity

com.didi.payment.wallet.china.signlist.view.activity.SignActivity

com.didi.payment.wallet.china.wallet_old.view.WalletActivity

com.didi.payment.wallet.china.wallet.view.activity.WalletMainListActivity

com.didi.payment.wallet.china.signlist.view.activity.SignListActivity

com.didi.universal.pay.onecar.view.act.UniversalPaymentActivity

com.didi.universal.pay.onecar.view.act.UniversalPrePayActivity

com.didi.pay.base.SchemeActivity

com.didi.pay.web.WebProxyActivity

com.didi.pay.activity.UniversalDispatchActivity

com.didi.map.setting.sdk.MapSettingStart

com.didi.universal.pay.sdk.method.bankPay.SchemeActivity

com.didi.universal.pay.sdk.web.WebProxyActivity

com.didi.payment.paymethod.creditpay.activity.CreditPayActivity

com.didi.payment.creditcard.china.view.activity.CreditCardAddActivity

com.didi.beatles.im.access.notify.IMDispatcherActivity

com.didichuxing.diface.appeal.internal.TakePhotoAct

com.didichuxing.dfbasesdk.webview.DFWebviewAct

com.didi.unifylogin.entrance.AuthorizeActivity

com.didi.sdk.push.vivo.VivoPushClickHandleActivity

com.didi.sdk.push.HuaweiPushIntentReceiver

com.didi.sdk.push.oppo.OppoPushIntentReceiver

com.didi.one.netdiagnosis.DiagnosisActivity

com.didi.sdk.push.ui.CheckStateActivity

com.didi.sdk.onehotpatch.DebugActivity

Permissions

Receivers

com.didi.onecar.business.car.alarm.CommonAlarmReceiver

com.didi.onecar.business.appwidget.DiDiAppWidgetProvider41

com.didi.onecar.business.appwidget.DiDiAppWidgetProvider43

com.didi.nav.driving.entrance.scheme.CancellationBroadcast

com.didi.carhailing.onservice.component.service.alarm.CommonAlarmReceiver

com.didi.bus.info.appwidget.DGIAppWidgetProvider

com.didi.sdk.apm.CommandReceiver

com.didi.sdk.push.vivo.VivoPushReceiver

com.didi.sdk.push.mi.MiPushReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.didi.sdk.connectivity.NetworkChangedReceiver

com.didi.sdk.push.PushNetReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.huawei.hms.support.api.push.PushMsgReceiver

com.huawei.hms.support.api.push.PushReceiver

Services

com.didi.onecar.business.wear.services.DiDiWearableListenerService