Resubmissions

06-07-2024 11:56

240706-n36qva1anh 10

06-07-2024 11:43

240706-nvn6tsxhpk 10

General

  • Target

    HWF.apk

  • Size

    111.3MB

  • MD5

    6fff1a315bfae614ca60382f009b43e0

  • SHA1

    22c5002cc80a5cdf57a5ff263c86a9f0dc076125

  • SHA256

    9916a032b206aee7efb050687e9cdf44db68c0701909d5f464737abfece9a395

  • SHA512

    850d09f5a926d3abed78719f5f65d615adec8674766cbfc02b3cdfac2acdd1b4834fed9a735839010ef9089f17558cae126c9fd650f23e75fec31001cc141cf2

  • SSDEEP

    3145728:o+TzrDgr5fVsUMV6fXlZkBRILxKD/TxicnoF:bg1+UMV6fXcBRILkbYF

Score
10/10

Malware Config

Signatures

  • Antidot family
  • Antidot payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 24 IoCs

Files

  • HWF.apk
    .apk android arch:arm64 arch:arm

    com.huawei.health

    .MainActivity


  • PluginHealthModel.zip
    .apk android

    com.huawei.health

    com.huawei.healthmodel.ui.activity.HealthModelActivity


  • PluginHiAiEngine.zip
    .apk android arch:arm64 arch:arm

    com.huawei.health


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • base-all.lpk
    .apk android

    com.huawei.health


  • cn.wwl.xposed.hook.apk
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    cn.wwl.xposed.hook


  • origin.apk
    .apk android arch:arm64 arch:arm

    com.huawei.health

    .MainActivity


  • PluginHealthModel.zip
    .apk android

    com.huawei.health

    com.huawei.healthmodel.ui.activity.HealthModelActivity


  • PluginHiAiEngine.zip
    .apk android arch:arm64 arch:arm

    com.huawei.health


  • amap_resource1_0_0.png
    .apk android

    com.amap.api.map3d


  • base-all.lpk
    .apk android

    com.huawei.health


Android Permissions

HWF.apk

Permissions

android.permission.GET_INTENT_SENDER_INTENT

android.permission.ACCESS_BACKGROUND_LOCATION

com.huawei.permission.sec.MDM.v2

com.huawei.android.thememanager.permission.THEME_PROVIDER_ACCESS

com.huawei.dmsdp.permission.CameraRemoteCtrlProvider.read

com.huawei.dmsdp.permission.CameraRemoteCtrlProvider.write

com.huawei.pengine.READ_PERMISSION

com.huawei.contentsensor.BIND_CONTENTSENSOR_PERMISSION

com.huawei.health.permission.LOCAL_BROADCAST

android.permission.READ_PRIVILEGED_PHONE_STATE

android.permission.FOREGROUND_SERVICE

android.permission.START_ACTIVITIES_FROM_BACKGROUND

com.huawei.health.permission.CONNECTSTATUS

com.huawei.camera.permission.PRIVATE

com.huawei.camera.permission.REMOTECONTROLLER

com.huawei.health.INTERNAL_PERMISSION

com.huawei.health.ui.imperial.imperial_permission

com.huawei.intelligent.permission.HWINTELLIGENT_START_COMPONENT

com.huawei.permission.INTELLIGENT_NOTIFICATION_MSG_BRACELET

com.huawei.permission.DISTRIBUTED_DATASYNC

android.permission.DISABLE_KEYGUARD

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

com.coloros.permission.READ_COLOROS_CALENDAR

com.coloros.permission.WRITE_COLOROS_CALENDAR

android.permission.READ_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

com.android.alarm.permission.SET_ALARM

com.huawei.permission.HANDOFF

com.huawei.pcassistant.permisssion.HANDOFF_SDK_SERVICE

com.huawei.permission.ONEHOP

com.android.keyguard.permission.SEND_STEP_INFO_COUNTER

com.android.keyguard.permission.RECEIVE_COVERSCREEN_STATE

com.android.keyguard.permission.SEND_STEP_INFO

com.android.keyguard.permission.RECEIVE_COVER_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.ANSWER_PHONE_CALLS

android.permission.CHANGE_NETWORK_STATE

com.huawei.motion.permission.START_MOTION_SETTINGS

com.huawei.motion.permission.START_MOTION_SERVICE

com.huawei.motion.permission.READ_DATA

com.huawei.motion.permission.WRITE_DATA

com.huawei.motion.permission.MOTION_ACTION_OPERATE

com.huawei.motion.permission.MOTION_ACTION_RECOGNITION

com.huawei.health.permission.START_SERVICE