General

  • Target

    YSWorker_1.0.6.apk

  • Size

    8.6MB

  • MD5

    0a0f2eaab55ba8d552045b8d13a5730a

  • SHA1

    f3a4ad04703cb8ae10dbbb02245b4bcc5aac7fbe

  • SHA256

    2527a6e2d8c6dad9fe2cb9ba1d363c9ffceeb7fae89848239523eb1655e71319

  • SHA512

    0fa64a15c9159e7ea923d2d005e87f691c8219f9ee5d1b06ed4b6465cf6c8f21bb46117059b80720d57fe637a762dce9799d4ec961fa1db9c543e57ddeb01472

  • SSDEEP

    196608:q2pLALb9OLXxU1MxwlEj//gNjbD4aH6LvkKIvTpnzDjlzvTlg4f/u1s:q2p81dNL6QKILdXjl7d/F

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • YSWorker_1.0.6.apk
    .apk android arch:arm

    com.ysdj.worker

    .qhpcocprj


  • BaiduNaviSDK_Resource_v1_0_0.png
    .apk android

    com.baidu.navisdk

    com.baidu.navi.api.MainActivity


  • plugin-deploy.jar
    .apk android

Android Permissions

YSWorker_1.0.6.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_GPS

android.permission.GET_TASKS

android.permission.BROADCAST_STICKY

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO