Overview

overview

7

Static

static

6

yswork.apk

android-9-x86

7

BaiduNaviS..._0.apk

android-9-x86

BaiduNaviS..._0.apk

android-10-x64

BaiduNaviS..._0.apk

android-11-x64

plugin-deploy.apk

android-9-x86

plugin-deploy.apk

android-10-x64

plugin-deploy.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    yswork.apk

  • Size

    8.6MB

  • Sample

    240523-nx8y1sfa3s

  • MD5

    2388bc69968ce751416ab508be34d6b3

  • SHA1

    0dd6f470df5f7ed1d405f8f47c8bfa5d60033008

  • SHA256

    83d768c51890e45f0b98f06a23ff6691f3142bbc58d330dcf536e61efd0a3fa5

  • SHA512

    557f17bd800ea7c9cf8f2a5d2b1ecea1ad678856ab0a77fc393373197e3611307d4201c31e7a3861cce549c593e163a256bc456fa54846e299eb55a22000b066

  • SSDEEP

    196608:XWLALb9OLXxU1M4wlEjG8ANjbD4aH6gvkKI+YBhq6xHvdk6BG/54Ze4p/:XW81qNL67KIPTq+HvdcOs4p/

Score
7/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      yswork.apk

    • Size

      8.6MB

    • MD5

      2388bc69968ce751416ab508be34d6b3

    • SHA1

      0dd6f470df5f7ed1d405f8f47c8bfa5d60033008

    • SHA256

      83d768c51890e45f0b98f06a23ff6691f3142bbc58d330dcf536e61efd0a3fa5

    • SHA512

      557f17bd800ea7c9cf8f2a5d2b1ecea1ad678856ab0a77fc393373197e3611307d4201c31e7a3861cce549c593e163a256bc456fa54846e299eb55a22000b066

    • SSDEEP

      196608:XWLALb9OLXxU1M4wlEjG8ANjbD4aH6gvkKI+YBhq6xHvdk6BG/54Ze4p/:XW81qNL67KIPTq+HvdcOs4p/

    Score
    7/10
    discoveryevasionimpactpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery
    behavioral1

    • Target

      BaiduNaviSDK_Resource_v1_0_0.png

    • Size

      1.4MB

    • MD5

      038c785558c6743e09a31631b9f04d1d

    • SHA1

      42ae6b74d418c4d839600471718b62dfd7d812a9

    • SHA256

      e9fc11fa95dc1e95a2cd4ef86905acdd79cfb71ba4ff9912c8e46b59ed685e45

    • SHA512

      573bfcc3effcece86e5ef8f0e9a84e9dd523936ef9224861a0ff834d35fb7d662e965e13ed5265306549c61d4458c7687471f680d7bf217004590c118de15794

    • SSDEEP

      24576:w9o5l0aiDLYxvm6iugA1Ft3unH1jR49OLt1xJqkqFn/wS2mM4:6ql07DL4e6Fpj36Hz49OLt1xorh/1M4

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      plugin-deploy.jar

    • Size

      206KB

    • MD5

      02fe22caeb17a9d7c7f5c3914e3cda29

    • SHA1

      7e3293216263ab967ca6e9a3c55ba589444e3de7

    • SHA256

      0fba8eedb44faf95448ed7e25bcba48b49aa981e1e1e154fcbd90e48447813a4

    • SHA512

      020324dd3b38d6d75fbb54f18caf0bfdff38e27b0c18aa83989b53e9da96a6d6c780f281b21da8f1b41e3de1206306954dc9d1e42aa2dd12f500b66e04f4c647

    • SSDEEP

      6144:QVMQdIey/0Jl8L9umLtnWy6C0mNiEfWBm63:QVMbL/q2nL4g0mNXf7o

    Score
    1/10
    behavioral5behavioral6behavioral7

MITRE ATT&CK Matrix

Tasks