Overview

overview

7

Static

static

6

YS_Worker_0318_03.apk

android-9-x86

7

BaiduNaviS..._0.apk

android-9-x86

BaiduNaviS..._0.apk

android-10-x64

BaiduNaviS..._0.apk

android-11-x64

plugin-deploy.apk

android-9-x86

plugin-deploy.apk

android-10-x64

plugin-deploy.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    YS_Worker_0318_03.apk

  • Size

    8.6MB

  • Sample

    240523-pjn75aha9w

  • MD5

    2312d606b646a42d8676797a1fe89206

  • SHA1

    c7e1a36c0f5bb7887be8e1ffcabdc3acf9445296

  • SHA256

    be16fafbed3b28c54f4a80c5f20342c14ce7cb16d362b899deeffd963e685158

  • SHA512

    d72da83bce1ad4b86a27dda124f8c2350c664a0f8ac651931e10cba603a93865530961db11c7ff82074edfeb181bd8177149531c343452d53174d2130b4178f2

  • SSDEEP

    196608:IILALb9OLXxU1MThVkH9TnJNjbD4aH66vkKIZISeDVL4PUt0Dg+fi:II81shVMNL6RKIZSDVkPI0Dgf

Score
7/10
androiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      YS_Worker_0318_03.apk

    • Size

      8.6MB

    • MD5

      2312d606b646a42d8676797a1fe89206

    • SHA1

      c7e1a36c0f5bb7887be8e1ffcabdc3acf9445296

    • SHA256

      be16fafbed3b28c54f4a80c5f20342c14ce7cb16d362b899deeffd963e685158

    • SHA512

      d72da83bce1ad4b86a27dda124f8c2350c664a0f8ac651931e10cba603a93865530961db11c7ff82074edfeb181bd8177149531c343452d53174d2130b4178f2

    • SSDEEP

      196608:IILALb9OLXxU1MThVkH9TnJNjbD4aH66vkKIZISeDVL4PUt0Dg+fi:II81shVMNL6RKIZSDVkPI0Dgf

    Score
    7/10
    discoveryevasionimpactpersistence

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Registers a broadcast receiver at runtime (usually for listening for system events)

      persistence

    • Checks if the internet connection is available

      discovery
    behavioral1

    • Target

      BaiduNaviSDK_Resource_v1_0_0.png

    • Size

      1.4MB

    • MD5

      038c785558c6743e09a31631b9f04d1d

    • SHA1

      42ae6b74d418c4d839600471718b62dfd7d812a9

    • SHA256

      e9fc11fa95dc1e95a2cd4ef86905acdd79cfb71ba4ff9912c8e46b59ed685e45

    • SHA512

      573bfcc3effcece86e5ef8f0e9a84e9dd523936ef9224861a0ff834d35fb7d662e965e13ed5265306549c61d4458c7687471f680d7bf217004590c118de15794

    • SSDEEP

      24576:w9o5l0aiDLYxvm6iugA1Ft3unH1jR49OLt1xJqkqFn/wS2mM4:6ql07DL4e6Fpj36Hz49OLt1xorh/1M4

    Score
    1/10
    behavioral2behavioral3behavioral4

    • Target

      plugin-deploy.jar

    • Size

      206KB

    • MD5

      02fe22caeb17a9d7c7f5c3914e3cda29

    • SHA1

      7e3293216263ab967ca6e9a3c55ba589444e3de7

    • SHA256

      0fba8eedb44faf95448ed7e25bcba48b49aa981e1e1e154fcbd90e48447813a4

    • SHA512

      020324dd3b38d6d75fbb54f18caf0bfdff38e27b0c18aa83989b53e9da96a6d6c780f281b21da8f1b41e3de1206306954dc9d1e42aa2dd12f500b66e04f4c647

    • SSDEEP

      6144:QVMQdIey/0Jl8L9umLtnWy6C0mNiEfWBm63:QVMbL/q2nL4g0mNXf7o

    Score
    1/10
    behavioral5behavioral6behavioral7

MITRE ATT&CK Matrix

Tasks