085f3ff4385d4c57c6ec34d013e669d9_JaffaCakes118

General

Target

085f3ff4385d4c57c6ec34d013e669d9_JaffaCakes118
Size

3.6MB
MD5

085f3ff4385d4c57c6ec34d013e669d9
SHA1

c13c0cc5faed93ab312fe49d09b01ca207d57bc6
SHA256

3e98e0f7ffe43fd18ff8f86f8b7a2b1dc5da7bc926a217d80823b4742c267461
SHA512

4ef381bcf4ba69ed054dc6dddea5da7e40b11c2222c059aa7796633f285c3ca1deba0ada9de1b5bb1e17ffe53b4cd75fcf28936a7362b720bd7bdc1e8c82fd3e
SSDEEP

49152:bDwowxV/0l+8FUecXQer7CNL2ecnwPj5aP22HpESJ20VWXHN6lHyIp6knUYHT:bEowz0S5rYBc0CfHpESJ2bdoOknLz

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

085f3ff4385d4c57c6ec34d013e669d9_JaffaCakes118
.apk android arch:arm

tv.wc366c.qeaae

com.arist.activity.WelcomeActivity

Activities

com.arist.activity.WelcomeActivity

android.intent.action.MAIN

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNAL_SYSTEM_WINDOW
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WAKE_LOCK
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

uj.atk.Ivh

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.arist.widget.Widget4x1White

android.appwidget.action.APPWIDGET_UPDATE
media.audioplayer.musicplayer.action.music_changed
media.audioplayer.musicplayer.action.STATUS_CHANGED

com.arist.widget.Widget4x1Transparent

android.appwidget.action.APPWIDGET_UPDATE
media.audioplayer.musicplayer.action.music_changed
media.audioplayer.musicplayer.action.STATUS_CHANGED

com.arist.widget.Widget2x2Transparent

android.appwidget.action.APPWIDGET_UPDATE
media.audioplayer.musicplayer.action.music_changed
media.audioplayer.musicplayer.action.STATUS_CHANGED

com.arist.service.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.arist.service.RestartPlayerServiceReceiver

media.audioplayer.musicplayer.action.play
media.audioplayer.musicplayer.action.net_play
media.audioplayer.musicplayer.action.previous
media.audioplayer.musicplayer.action.next
media.audioplayer.musicplayer.action.clear_notify
media.audioplayer.musicplayer.action.CHECK_DESK_LRC

Services

com.arist.service.MusicPlayService

com.arist.service.MusicPlayService

com.arist.service.MusicDownloadService

com.arist.service.MusicDownloadService
awq703.s233
.apk android
ny747.k514
.apk android

Android Permissions

085f3ff4385d4c57c6ec34d013e669d9_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNAL_SYSTEM_WINDOW

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

tv.wc366c.qeaae

com.arist.activity.WelcomeActivity

Activities

com.arist.activity.WelcomeActivity

Permissions

Receivers

uj.atk.Ivh

com.arist.widget.Widget4x1White

com.arist.widget.Widget4x1Transparent

com.arist.widget.Widget2x2Transparent

com.arist.service.MediaButtonReceiver

com.arist.service.RestartPlayerServiceReceiver

Services

com.arist.service.MusicPlayService

com.arist.service.MusicDownloadService

Android Permissions

085f3ff4385d4c57c6ec34d013e669d9_JaffaCakes118