Resubmissions

19/04/2024, 16:13

240419-tpjbaagg55 8

19/04/2024, 16:13

240419-tn3zasgg48 6

08/04/2024, 14:08

240408-rf2p6aba22 7

08/04/2024, 13:41

240408-qza6waad69 6

08/04/2024, 13:40

240408-qylk8adg41 6

General

  • Target

    baidugw-pc.apk

  • Size

    21.4MB

  • MD5

    f7a2efc1f92bb7ab7e195f9a74e90c2e

  • SHA1

    6df914fbdfb96648c7c611d8764516a8bbd59ee6

  • SHA256

    833012011697d12cc42873d68ae0eb3fa2bb1f7d87dc625acd1221cd4f91522c

  • SHA512

    9952705b702cd7833b63a273f977e7e6e67ce7ba8052c6218f8a56ca8c86c7d87f798bef97139513b4825592f1bcd8aadfe85e34a661a63e76e34f6f646e2ed0

  • SSDEEP

    393216:tTEg3MMdv8W3E8w4dNEjY4DJnYhe9uy7u9IcL6/lOfAOI4wVwk1udV241SPwAFuH:njdBbb2jYoBYheJwVG/lJVdudTSval/P

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 16 IoCs

Files

  • baidugw-pc.apk
    .apk android arch:arm64 arch:arm

    cn.opda.a.phonoalbumshoushou

    cn.com.opda.android.mainui.MainActivity


  • 100074
    .apk android

    com.baidu.sofire.x42


  • 100088
    .apk android

    com.baidu.sofire.x49


  • bdxadsdk.jar
    .apk android

Android Permissions

baidugw-pc.apk

Permissions

cn.opda.a.phonoalbumshoushou.permission.INTERNAL_COMMON

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.KILL_BACKGROUND_PROCESSES

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.EXPAND_STATUS_BAR

android.permission.READ_CALL_LOG

android.permission.PACKAGE_USAGE_STATS

android.permission.WRITE_CALL_LOG

android.permission.DELETE_CACHE_FILES

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_APN_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CLEAR_APP_CACHE

android.permission.FLASHLIGHT

android.permission.CAMERA

android.permission.BROADCAST_STICKY

cn.opda.a.phonoalbumshoushou.permission.UPDATE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.Settings.widget.permission.SettingsAppWidgetProvider

android.permission.ACCESS_SUPERUSER

android.permission.BROADCAST_SMS

android.permission.BROADCAST_WAP_PUSH

android.permission.SEND_RESPOND_VIA_MESSAGE