General

  • Target

    yswork.apk

  • Size

    8.6MB

  • MD5

    2388bc69968ce751416ab508be34d6b3

  • SHA1

    0dd6f470df5f7ed1d405f8f47c8bfa5d60033008

  • SHA256

    83d768c51890e45f0b98f06a23ff6691f3142bbc58d330dcf536e61efd0a3fa5

  • SHA512

    557f17bd800ea7c9cf8f2a5d2b1ecea1ad678856ab0a77fc393373197e3611307d4201c31e7a3861cce549c593e163a256bc456fa54846e299eb55a22000b066

  • SSDEEP

    196608:XWLALb9OLXxU1M4wlEjG8ANjbD4aH6gvkKI+YBhq6xHvdk6BG/54Ze4p/:XW81qNL67KIPTq+HvdcOs4p/

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • yswork.apk
    .apk android arch:arm

    com.ysdj.worker

    .qhpcocprj


  • BaiduNaviSDK_Resource_v1_0_0.png
    .apk android

    com.baidu.navisdk

    com.baidu.navi.api.MainActivity


  • plugin-deploy.jar
    .apk android

Android Permissions

yswork.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_GPS

android.permission.GET_TASKS

android.permission.BROADCAST_STICKY

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO