General

  • Target

    YS_Worker_0318_03.apk

  • Size

    8.6MB

  • MD5

    2312d606b646a42d8676797a1fe89206

  • SHA1

    c7e1a36c0f5bb7887be8e1ffcabdc3acf9445296

  • SHA256

    be16fafbed3b28c54f4a80c5f20342c14ce7cb16d362b899deeffd963e685158

  • SHA512

    d72da83bce1ad4b86a27dda124f8c2350c664a0f8ac651931e10cba603a93865530961db11c7ff82074edfeb181bd8177149531c343452d53174d2130b4178f2

  • SSDEEP

    196608:IILALb9OLXxU1MThVkH9TnJNjbD4aH66vkKIZISeDVL4PUt0Dg+fi:II81shVMNL6RKIZSDVkPI0Dgf

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • YS_Worker_0318_03.apk
    .apk android arch:arm

    com.ysdj.worker

    .qhpcocprj


  • BaiduNaviSDK_Resource_v1_0_0.png
    .apk android

    com.baidu.navisdk

    com.baidu.navi.api.MainActivity


  • plugin-deploy.jar
    .apk android

Android Permissions

YS_Worker_0318_03.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_GPS

android.permission.GET_TASKS

android.permission.BROADCAST_STICKY

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO