pinduoduo_7[.]5[.]0_apkcombo[.]com[.]apk

Resubmissions

04/05/2024, 15:14

240504-smslhahd4x 6

04/05/2024, 14:50

240504-r7zd4sbh34 6

Sharing

Copy URL Twitter E-mail

General

Target

pinduoduo_7.5.0_apkcombo.com.apk
Size

26.0MB
MD5

42d1ec4e938c05ddb44450e5f71c71fc
SHA1

c3766d4da0d6cbd308f0edff7da0fecb78b9d3fb
SHA256

903707407f3cae7da0624acfce4ee1199278e4559152ffcc17eaa6e7f5e3affc
SHA512

912b32fc221d241ce7917558680a484c7ea9b7e1ef5bf5eba746b3b49cedf01ae4c10f8f497b3bf31143efcac0d708ab41a73d0e484b46b8b8a305cf4875c97d
SSDEEP

786432:H5rt/uEWPExXOzzp0lSFw92+GRnJAgM20:H5rtmLfzC6S2z1eg+

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Files

pinduoduo_7.5.0_apkcombo.com.apk
.apk android arch:arm64

Password: ChinaSpyware

com.xunmeng.pinduoduo

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

Activities

com.xunmeng.pinduoduo.activity.NewPageActivity

com.xunmeng.pinduoduo.ACTION_NEW_PAGE_ACTIVITY

com.xunmeng.pinduoduo.activity.NewPageMaskActivity

com.aimi.android.ACTION_NEW_PAGE_MASK_ACTIVITY

com.xunmeng.pinduoduo.app_activity.lego.LegoContainerTitanActivity

com.xunmeng.pinduoduo.ACTION_LEGO_TITAN_ACTIVITY

com.xunmeng.pinduoduo.ui.activity.HomeActivity

com.aimi.android.ACTION_MAIN_FRAME_ACTIVITY

com.xunmeng.pinduoduo.share.web.subscribe.activity.SubscribeForwardActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

android.intent.action.MAIN
com.aimi.android.ACTION_NEW_PAGE_ACTIVITY
com.xunmeng.pinduoduo.push.pull_alive
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.xunmeng.pinduoduo.ui.activity.TransparentEntryActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.auth_pay.alipay.AlipayCallbackActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.auth_pay.qqpay.QQCallbackActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.auth_pay.ddpay.DDWalletCallbackActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.auth_pay.dcepay.DcepayCallbackActivity

android.intent.action.VIEW

com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity

android.intent.action.MAIN

com.xunmeng.pinduoduo.ui.activity.MainFrameActivityAssist

android.intent.action.MAIN
com.aimi.android.ACTION_NEW_PAGE_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW

com.xunmeng.pinduoduo.ui.activity.MainFrameActivityLauncherAssist

android.intent.action.MAIN
com.aimi.android.ACTION_NEW_PAGE_ACTIVITY
android.intent.action.VIEW
android.intent.action.VIEW

com.xunmeng.pinduoduo.ui.activity.PandaHmActivity

android.intent.action.MAIN

com.xunmeng.pinduoduo.market_ad_forward.TransferActivity

com.xunmeng.pinduoduo.market.ad.FORWARD_COMMON

com.xunmeng.pinduoduo.market_ad_forward.TransferDeskActivity

com.xunmeng.pinduoduo.market.ad.FORWARD_DESK_COMMON

com.xunmeng.pinduoduo.market_ad_forward.CSDispatchActivity

com.xunmeng.pinduoduo.ACTION_CS_DISPATCH_ACTIVITY

com.xunmeng.pinduoduo.market_ad_forward.CSDispatchTitanActivity

com.xunmeng.pinduoduo.ACTION_CS_DISPATCH_TITAN_ACTIVITY

com.xunmeng.pinduoduo.msg_floating.ui.MsgJumpActivity

com.xunmeng.pinduoduo.ACTION_MSG_JUMP_ACTIVITY

com.xunmeng.pinduoduo.wallet.common.externaljump.ExternalJumpActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WAKE_LOCK
android.permission.GET_PACKAGE_SIZE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.VIBRATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.FOREGROUND_SERVICE
com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
com.xunmeng.pinduoduo.permission.MIPUSH_RECEIVE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.CHANGE_BADGE
com.vivo.notification.permission.BADGE_ICON
android.permission.CHANGE_NETWORK_STATE
com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY
android.permission.CHANGE_WIFI_STATE
com.bbk.launcher2.permission.READ_SETTINGS
com.bbk.launcher2.permission.WRITE_SETTINGS
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_VIDEO
android.permission.POST_NOTIFICATIONS
android.permission.HIGH_SAMPLING_RATE_SENSORS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WIRTE_SETTINGS
com.samsung.android.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
net.oneplus.launcher.permission.READ_SETTINGS
net.oneplus.launcher.permission.WRITE_SETTINGS
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT

Receivers

meco.core.dex.MecoBroadcastManager

com.android.meco.MECO_DEX_PATH_ERROR

com.xunmeng.pinduoduo.receiver.NotificationBroadcastReceiver

com.aimi.android.NOTIFICATION_CANCEL
com.aimi.android.NOTIFICATION_CLICK

com.aimi.android.common.push.huawei.HwPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.xunmeng.pinduoduo.vipush_component.VivoPushReceiver

com.vivo.pushclient.action.RECEIVE

com.aimi.android.common.push.xiaomi.MiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.aimi.android.common.push.xiaomi.proxy.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.aimi.android.common.push.xiaomi.proxy.PingReceiver

com.xiaomi.push.PING_TIMER

com.xunmeng.pinduoduo.patch.SampleResultReceiver

ACTION_PDD_PATCH_RESULT
ACTION_SET_PATCH_CLEAN
ACTION_ON_PATCH_RECEIVED

com.xunmeng.pinduoduo.web.resourceprefetch.ResourcePrefetchBroadcastReceiver

com.xunmeng.pinduoduo.uno.TRY_INIT_WEBVIEW_KERNEL

com.xunmeng.pinduoduo.xlog_wrapper.XlogUploadBroadcastReceiver

com.xunmeng.hutaojie.XlogUpload

com.xunmeng.pinduoduo.fastjs.main.FastJSBroadcastReceiver

com.xunmeng.pinduoduo.uno.TRY_INIT_WEBVIEW_KERNEL

com.xunmeng.pinduoduo.app_widget.LowSdkCycleRefreshReceiver

android.intent.action.USER_PRESENT
android.intent.action.SCREEN_ON
android.intent.action.SCREEN_OFF

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne3

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne2

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne1

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne1

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne2

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne3

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne4

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne5

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOneSpecial

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXOne1

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.market_widget.express.ExpressNewsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.market_widget.universal.UniversalMiniScrollProvider

android.appwidget.action.APPWIDGET_UPDATE

com.xunmeng.pinduoduo.market_ad_common.alarm.MarketAdAlarmReceiver

com.xunmeng.pinduoduo.MarketAdAlarmReceiver

com.xunmeng.basiccomponent.memorymonitorwrapper.receiver.MemoryReceiver

com.xunmeng.hutaojie.MEMORY_MONITOR

com.xunmeng.pinduoduo.process_stats.SandboxReceiver0

action.power.com.xunmeng.pinduoduo:sandboxed_process0

com.xunmeng.pinduoduo.process_stats.ExpReceiver

action.power.com.xunmeng.pinduoduo:exp

Services

com.aimi.android.common.push.honor.HonorMsgService

com.hihonor.push.action.MESSAGING_EVENT

com.aimi.android.common.push.oppo.OppoPushCompatibleService

com.coloros.mcs.action.RECEIVE_MCS_MESSAGE

com.aimi.android.common.push.oppo.OppoPushService

com.heytap.mcs.action.RECEIVE_MCS_MESSAGE
com.heytap.msp.push.RECEIVE_MCS_MESSAGE

com.xunmeng.pinduoduo.market_ad_common.scheduler.channel.MarketCommonService

com.xunmeng.pinduoduo.MARKET_AD_COMMON_SERVICE

Android Permissions

pinduoduo_7.5.0_apkcombo.com.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_CONTACTS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.GET_PACKAGE_SIZE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.FOREGROUND_SERVICE

com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE

com.xunmeng.pinduoduo.permission.MIPUSH_RECEIVE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.vivo.notification.permission.BADGE_ICON

android.permission.CHANGE_NETWORK_STATE

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.CHANGE_WIFI_STATE

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_VIDEO

android.permission.POST_NOTIFICATIONS

android.permission.HIGH_SAMPLING_RATE_SENSORS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WIRTE_SETTINGS

com.samsung.android.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

net.oneplus.launcher.permission.READ_SETTINGS

net.oneplus.launcher.permission.WRITE_SETTINGS

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: ChinaSpyware

com.xunmeng.pinduoduo

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

Activities

com.xunmeng.pinduoduo.activity.NewPageActivity

com.xunmeng.pinduoduo.activity.NewPageMaskActivity

com.xunmeng.pinduoduo.app_activity.lego.LegoContainerTitanActivity

com.xunmeng.pinduoduo.ui.activity.HomeActivity

com.xunmeng.pinduoduo.share.web.subscribe.activity.SubscribeForwardActivity

com.xunmeng.pinduoduo.ui.activity.MainFrameActivity

com.xunmeng.pinduoduo.ui.activity.TransparentEntryActivity

com.tencent.tauth.AuthActivity

com.xunmeng.pinduoduo.auth_pay.alipay.AlipayCallbackActivity

com.xunmeng.pinduoduo.auth_pay.qqpay.QQCallbackActivity

com.xunmeng.pinduoduo.auth_pay.ddpay.DDWalletCallbackActivity

com.xunmeng.pinduoduo.auth_pay.dcepay.DcepayCallbackActivity

com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity

com.xunmeng.pinduoduo.ui.activity.MainFrameActivityAssist

com.xunmeng.pinduoduo.ui.activity.MainFrameActivityLauncherAssist

com.xunmeng.pinduoduo.ui.activity.PandaHmActivity

com.xunmeng.pinduoduo.market_ad_forward.TransferActivity

com.xunmeng.pinduoduo.market_ad_forward.TransferDeskActivity

com.xunmeng.pinduoduo.market_ad_forward.CSDispatchActivity

com.xunmeng.pinduoduo.market_ad_forward.CSDispatchTitanActivity

com.xunmeng.pinduoduo.msg_floating.ui.MsgJumpActivity

com.xunmeng.pinduoduo.wallet.common.externaljump.ExternalJumpActivity

Permissions

Receivers

meco.core.dex.MecoBroadcastManager

com.xunmeng.pinduoduo.receiver.NotificationBroadcastReceiver

com.aimi.android.common.push.huawei.HwPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

com.xunmeng.pinduoduo.vipush_component.VivoPushReceiver

com.aimi.android.common.push.xiaomi.MiPushReceiver

com.aimi.android.common.push.xiaomi.proxy.NetworkStatusReceiver

com.aimi.android.common.push.xiaomi.proxy.PingReceiver

com.xunmeng.pinduoduo.patch.SampleResultReceiver

com.xunmeng.pinduoduo.web.resourceprefetch.ResourcePrefetchBroadcastReceiver

com.xunmeng.pinduoduo.xlog_wrapper.XlogUploadBroadcastReceiver

com.xunmeng.pinduoduo.fastjs.main.FastJSBroadcastReceiver

com.xunmeng.pinduoduo.app_widget.LowSdkCycleRefreshReceiver

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne3

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne2

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne1

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne1

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne2

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne3

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne4

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne5

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOneSpecial

com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXOne1

com.xunmeng.pinduoduo.market_widget.express.ExpressNewsWidgetProvider

com.xunmeng.pinduoduo.market_widget.universal.UniversalMiniScrollProvider

com.xunmeng.pinduoduo.market_ad_common.alarm.MarketAdAlarmReceiver

com.xunmeng.basiccomponent.memorymonitorwrapper.receiver.MemoryReceiver

com.xunmeng.pinduoduo.process_stats.SandboxReceiver0

com.xunmeng.pinduoduo.process_stats.ExpReceiver

Services

com.aimi.android.common.push.honor.HonorMsgService

com.aimi.android.common.push.oppo.OppoPushCompatibleService

com.aimi.android.common.push.oppo.OppoPushService

com.xunmeng.pinduoduo.market_ad_common.scheduler.channel.MarketCommonService

Android Permissions

pinduoduo_7.5.0_apkcombo.com.apk