e2abf340f2174b0d0941deac4956b502_JaffaCakes118

General

Target
e2abf340f2174b0d0941deac4956b502_JaffaCakes118
Size 7.2MB
Sample240406-q2dd1sbf5t
SHA256 b1d1b800e6c03955074675311e3346d6743b82f8c9397a0cf7f3349c2ead5cf5
MD5 e2abf340f2174b0d0941deac4956b502
SHA1 0212884277bcef61c11ca107b9df4eda61ce48ba
SHA512 8365ce6ebee7c6bef81d8ddb2a10d387c42994495677384907053ab63f7d3a384b4de04299d926654c67ba8d6ba7a78a6785bb37f78f1e8cbbe5eb99291bfb28
SSDEEP 196608:4fFDVMUvqF31I5Dzx1IwXUmgrBzgtWccSr5uLPJly/:iF6UCF3K5DzvIwXVgrGISrQ7y/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

e2abf340f2174b0d0941deac4956b502_JaffaCakes118

.apk 7.2MB

e2abf340f2174b0d0941deac4956b502_JaffaCakes118

SHA256 b1d1b800e6c03955074675311e3346d6743b82f8c9397a0cf7f3349c2ead5cf5
MD5 e2abf340f2174b0d0941deac4956b502
SHA1 0212884277bcef61c11ca107b9df4eda61ce48ba
SHA512 8365ce6ebee7c6bef81d8ddb2a10d387c42994495677384907053ab63f7d3a384b4de04299d926654c67ba8d6ba7a78a6785bb37f78f1e8cbbe5eb99291bfb28
SSDEEP 196608:4fFDVMUvqF31I5Dzx1IwXUmgrBzgtWccSr5uLPJly/:iF6UCF3K5DzvIwXVgrGISrQ7y/
MD5 SHA1 SHA512 SSDEEP

com.miqingshucheng

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.plus.ImageActivity

com.tencent.connect.common.AssistActivity

com.yanqingkong.m.wxapi.WXEntryActivity

com.yanqingkong.m.wxapi.WXPayEntryActivity

com.hongshu.wxapi.WXEntryActivity

com.hongshu.wxapi.WXPayEntryActivity

com.miqingshucheng.wxapi.WXEntryActivity

com.miqingshucheng.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.ipaynow.plugin.presenter.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechatwp.activity.WeChatNotifyActivity

com.hongshu.Splash

android.intent.action.MAIN android.intent.action.VIEW

com.stub.plugin.Stub01

android.intent.action.MAIN

com.hongshu.Guide

com.hongshu.LoginDummy

com.hongshu.ProversionDummy

com.hongshu.indicator.Wizard

com.hongshu.Login

com.hongshu.WebDialogActivity

com.hongshu.BookOrderActivity

com.hongshu.UserActivity

com.hongshu.ShowContent

com.hongshu.DownloadList

com.hongshu.BookContentMark

com.hongshu.ShowBookActivity

com.hongshu.Shelf

com.hongshu.OnlineActivity

com.hongshu.OnlineSecond

android.intent.action.VIEW

com.hongshu.FileList

com.hongshu.Advice

com.hongshu.AdviceList

com.hongshu.About

com.hongshu.Aebug

com.hongshu.Setting

com.hongshu.Setting_FontType

com.hongshu.Setting_Text

com.hongshu.Wifi

Android Permissions

e2abf340f2174b0d0941deac4956b502_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.BATTERY_STATS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

e2abf340f2174b0d0941deac4956b502_JaffaCakes118

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.plus.ImageActivity

com.tencent.connect.common.AssistActivity

com.yanqingkong.m.wxapi.WXEntryActivity

com.yanqingkong.m.wxapi.WXPayEntryActivity

com.hongshu.wxapi.WXEntryActivity

com.hongshu.wxapi.WXPayEntryActivity

com.miqingshucheng.wxapi.WXEntryActivity

com.miqingshucheng.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.ipaynow.plugin.presenter.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechatwp.activity.WeChatNotifyActivity

com.hongshu.Splash

com.stub.plugin.Stub01

com.hongshu.Guide

com.hongshu.LoginDummy

com.hongshu.ProversionDummy

com.hongshu.indicator.Wizard

com.hongshu.Login

com.hongshu.WebDialogActivity

com.hongshu.BookOrderActivity

com.hongshu.UserActivity

com.hongshu.ShowContent

com.hongshu.DownloadList

com.hongshu.BookContentMark

com.hongshu.ShowBookActivity

com.hongshu.Shelf

com.hongshu.OnlineActivity

com.hongshu.OnlineSecond

com.hongshu.FileList

com.hongshu.Advice

com.hongshu.AdviceList

com.hongshu.About

com.hongshu.Aebug

com.hongshu.Setting

com.hongshu.Setting_FontType

com.hongshu.Setting_Text

com.hongshu.Wifi

com.stub.plugin.Stub02

org.swiftp.FTPServerService

com.stub.plugin.Stub03

com.tencent.mid.api.MidProvider

com.stub.plugin.Stub04

Android Permissions

e2abf340f2174b0d0941deac4956b502_JaffaCakes118