General

Malware Config

Signatures

Files

• f9283d2660faceb4cbd935bd9d60e1f8_JaffaCakes118

  .apk android arch:arm

  com.wstl.administrator.wstlcalendar

  com.wstl.administrator.wstlcalendar.activity.FirstScreenActivity

  
  

  Activities

  com.wstl.administrator.wstlcalendar.activity.FirstScreenActivity

  android.intent.action.MAIN

  
  

  com.tencent.tauth.AuthActivity

  android.intent.action.VIEW

  
  

  cn.jpush.android.ui.PushActivity

  cn.jpush.android.ui.PushActivity

  
  

  Permissions

  com.wstl.administrator.wstlcalendar.permission.JPUSH_MESSAGE

  android.permission.READ_CONTACTS

  android.permission.ACCESS_NETWORK_STATE

  android.permission.RECEIVE_BOOT_COMPLETED

  android.permission.INTERNET

  android.permission.WRITE_EXTERNAL_STORAGE

  android.permission.SYSTEM_ALERT_WINDOW

  android.permission.REQUEST_INSTALL_PACKAGES

  android.permission.VIBRATE

  android.permission.ACCESS_WIFI_STATE

  android.permission.READ_PHONE_STATE

  android.permission.MOUNT_UNMOUNT_FILESYSTEMS

  android.permission.ACCESS_COARSE_LOCATION

  android.permission.ACCESS_FINE_LOCATION

  android.permission.READ_EXTERNAL_STORAGE

  android.permission.CHANGE_WIFI_STATE

  android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

  android.permission.BLUETOOTH

  android.permission.BLUETOOTH_ADMIN

  android.permission.WRITE_SETTINGS

  android.permission.CAMERA

  android.permission.WAKE_LOCK

  android.permission.RECEIVE_USER_PRESENT

  android.permission.CHANGE_NETWORK_STATE

  Receivers

  com.wstl.administrator.wstlcalendar.broadcast.BootCompleteReceiver

  android.intent.action.BOOT_COMPLETED

  
  

  cn.jpush.android.service.PushReceiver

  cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY

  android.intent.action.USER_PRESENT

  android.net.conn.CONNECTIVITY_CHANGE

  android.intent.action.PACKAGE_ADDED

  android.intent.action.PACKAGE_REMOVED

  
  

  com.wstl.administrator.wstlcalendar.broadcast.JPushReceiver

  cn.jpush.android.intent.REGISTRATION

  cn.jpush.android.intent.MESSAGE_RECEIVED

  cn.jpush.android.intent.NOTIFICATION_RECEIVED

  cn.jpush.android.intent.NOTIFICATION_OPENED

  cn.jpush.android.intent.CONNECTION

  
  

  androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

  android.intent.action.ACTION_POWER_CONNECTED

  android.intent.action.ACTION_POWER_DISCONNECTED

  
  

  androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

  android.intent.action.BATTERY_OKAY

  android.intent.action.BATTERY_LOW

  
  

  androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

  android.intent.action.DEVICE_STORAGE_LOW

  android.intent.action.DEVICE_STORAGE_OK

  
  

  androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

  android.net.conn.CONNECTIVITY_CHANGE

  
  

  androidx.work.impl.background.systemalarm.RescheduleReceiver

  android.intent.action.BOOT_COMPLETED

  android.intent.action.TIME_SET

  android.intent.action.TIMEZONE_CHANGED

  
  

  androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

  androidx.work.impl.background.systemalarm.UpdateProxies

  
  

  Services

  cn.jpush.android.service.PushService

  cn.jpush.android.intent.REGISTER

  cn.jpush.android.intent.REPORT

  cn.jpush.android.intent.PushService

  cn.jpush.android.intent.PUSH_TIME

  
  

  androidx.work.impl.background.firebase.FirebaseJobService

  com.firebase.jobdispatcher.ACTION_EXECUTE

  
  

  com.taobao.sophix.aidl.DownloadService

  com.taobao.hotfix.action

  
  

  cn.jpush.android.service.DaemonService

  cn.jpush.android.intent.DaemonService

  
  

  com.firebase.jobdispatcher.GooglePlayReceiver

  com.google.android.gms.gcm.ACTION_TASK_READY

  
  
• gdtadv2.jar

  .apk android arch:arm arch:arm64

Android Permissions