General

  • Target

    YSWorker_1.0.7.apk

  • Size

    8.6MB

  • MD5

    8b9d5c085658c8749cca4bd9b2a0d57b

  • SHA1

    95945fcc133b3368ba231761a1437c7ec010128a

  • SHA256

    a4329384259fe80b76ca102837e71cf0adceac9e0961ab5734d24b0206a7d4da

  • SHA512

    928fe1cfb450f4d29823fc7c531e3d120fd1336c42d12c095cfbaf6f0ed89029729eee0150803c76d9d8907af1e47f13cc6a6010ea0050a87611a66fae4bd7ad

  • SSDEEP

    196608:0RhLALb9OLXxU1MbwlEyBVlNjbD4aH6YvkKI9/TbM4jdEML:0Rh81FNL6jKI9/jb

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • YSWorker_1.0.7.apk
    .apk android arch:arm

    com.ysdj.worker

    .qhpcocprj


  • BaiduNaviSDK_Resource_v1_0_0.png
    .apk android

    com.baidu.navisdk

    com.baidu.navi.api.MainActivity


  • plugin-deploy.jar
    .apk android

Android Permissions

YSWorker_1.0.7.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_GPS

android.permission.GET_TASKS

android.permission.BROADCAST_STICKY

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO