ff65cc6a226bf76b943ab44585216a8b_JaffaCakes118

General

Target

ff65cc6a226bf76b943ab44585216a8b_JaffaCakes118
Size

11.0MB
MD5

ff65cc6a226bf76b943ab44585216a8b
SHA1

b713e3e87f6fddd5492f3c4085fed50531cd30cd
SHA256

d465506889c166390178422fe2268ef42e35248738c35992cff2f8260295f40e
SHA512

e78d3d0fa5491105102856194f60b383f28bf17e2aab8d8a956a61875ab05c8ab59fd44b4ec09586b055a7ab99a76a8fcb0a0f152fb3b052639834ecec5f36fa
SSDEEP

196608:faWoR3SSlmE07bC2AxlYR+vHoL9WCabZYc+UszS2qDvvEghBUIEjB6HncS:fPm3SSlt2AxSpuUEDv4IEjIHn9

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

ff65cc6a226bf76b943ab44585216a8b_JaffaCakes118
.apk android

com.ansangha.drdriving

com.vicky.gameplugin.LewanPluginActivity

Activities

com.vicky.gameplugin.LewanPluginActivity

android.intent.action.MAIN
android.intent.action.VIEW

ldga.xrza.rl.qded.eu

android.intent.action.CREATE_SHORTCUT

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
com.android.vending.BILLING
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW

Receivers

ldga.xrza.rl.qded.wm

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

hsej.nnw.nunl.xn.hgxw

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

Services
7723box_pjz.apk
.apk android arch:arm

com.upgadata.up7723

com.upgadata.up7723.home.MainActivity

Activities

com.upgadata.up7723.home.MainActivity

android.intent.action.MAIN

Permissions

android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS

Receivers

com.upgadata.up7723.apps.BootReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.upgadata.up7723.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.upgadata.up7723.http.download.DownloadService

download.service.action

com.umeng.message.UmengService

com.upgadata.up7723.intent.action.START
com.upgadata.up7723.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

Android Permissions

ff65cc6a226bf76b943ab44585216a8b_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

com.android.vending.BILLING

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.ansangha.drdriving

com.vicky.gameplugin.LewanPluginActivity

Activities

com.vicky.gameplugin.LewanPluginActivity

ldga.xrza.rl.qded.eu

Permissions

Receivers

ldga.xrza.rl.qded.wm

hsej.nnw.nunl.xn.hgxw

Services

com.upgadata.up7723

com.upgadata.up7723.home.MainActivity

Activities

com.upgadata.up7723.home.MainActivity

Permissions

Receivers

com.upgadata.up7723.apps.BootReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.upgadata.up7723.http.download.DownloadService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

Android Permissions

ff65cc6a226bf76b943ab44585216a8b_JaffaCakes118