com.recover.wechat.app.view.StartPageActivity
android.intent.action.MAIN
com.recover.wechat.app.view.PayActivity
android.intent.action.VIEW
com.alipay.sdk.app.AlipayResultActivity
android.intent.action.VIEW
Static task
static1
Behavioral task
behavioral1
Sample
fad554998cdd7cef4cd3a569cf76f656_JaffaCakes118.apk
Resource
android-x86-arm-20240221-en
Target
fad554998cdd7cef4cd3a569cf76f656_JaffaCakes118
Size
9.6MB
MD5
fad554998cdd7cef4cd3a569cf76f656
SHA1
95185c7a2d2dbfd400fddbf1348efe2403e0b9ae
SHA256
c7e30c1a3934d7e0d414fd4bd5ca08e07cf06fee0f0c6368d0adf7dde3ced5b5
SHA512
60ad935e1e9b7aeab9ec9552043272bb1b57f867da21ca78c9ba9af168231014b7d6db501a1752394c0292f26eec6563e232b815ebecaa4320ae60f93a586d7c
SSDEEP
196608:cKmVSyHE8CiKqXJ43I55jRSdy5RBNf+uiAq3gARxxD2cQX310SrGit:crH4qX63I5l3BpbtxARb6cQX310nk
description | ioc |
---|---|
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. | android.permission.READ_PHONE_STATE |
Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES
com.taobao.hotfix.action
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.REQUEST_DELETE_PACKAGES