base[.]apk | Triage

General

Target

base.apk
Size

17.7MB
MD5

e941e2ba872c3358d25e6dffb9b1a3b5
SHA1

067a2a8be2f989492c3e9b69da3d15e3daedac95
SHA256

9255e313ab22cd9a3ec2664bab570f0e37e922f70a79a5992cc5ec7ad5521e15
SHA512

7bf668e994fa22b2c632204d7740b8b4282628312701f7d7db6543d0f6cd000ac75a6d6289d27f099f9131b6977fe6e385b0e7dd8fd4315aae89c35b11a6c2e9
SSDEEP

393216:1s6UWhOLdZKvFVtxR3gRTHCxnA3xucOEVcJsqWPDX6G5cuCUmgM:14WhAdIhxdYHCbcOEVxd58

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

base.apk
.apk android arch:arm

uni.UNI329146O

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INSTALL_PACKAGES
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.FLASHLIGHT
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.ANSWER_PHONE_CALLS
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
com.asus.msa.SupplementaryDID.ACCESS
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.FOREGROUND_SERVICE
android.permission.BLUETOOTH
android.permission.SYSTEM_ALERT_WINDOW

Receivers

Services

com.hyyplugin.click.AutoClickAccessibilityService

android.accessibilityservice.AccessibilityService

Android Permissions

base.apk

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.ANSWER_PHONE_CALLS

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

com.asus.msa.SupplementaryDID.ACCESS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

uni.UNI329146O

io.dcloud.PandoraEntry

Activities

io.dcloud.PandoraEntry

Permissions

Receivers

Services

com.hyyplugin.click.AutoClickAccessibilityService

Android Permissions

base.apk