071cca82af7fca84b65015e42fea132a_JaffaCakes118

General

Target

071cca82af7fca84b65015e42fea132a_JaffaCakes118
Size

3.9MB
MD5

071cca82af7fca84b65015e42fea132a
SHA1

500e5a1672ce487d5799b1de2db8ab7afa389b54
SHA256

dcdf22d7820cf0243bf6be8758a7547094aba3407f2c9b05ad2c91c8a4c3a3a0
SHA512

75f8a0d52157a43dc5dc0e10f7c9d6e099833f62343244ce2bac58959c20bec18a01e6ddf782075ba71db256ec088ea38a6da2e9ccb5d1bfee853634cbe2941e
SSDEEP

98304:PFdCgnnvILBHtSiGjgmPzlQnZBoizPeM9ylUlU61Z:PFdCgnpiGnLlCZ3zf4SC61Z

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

071cca82af7fca84b65015e42fea132a_JaffaCakes118
.apk android arch:arm

com.netqin.mm

.NqcmSplash

Activities

com.netqin.debug.ExportTelNum

android.netqin.action.IMPORTTELVIEW

com.netqin.debug.TelNumSelect

android.netqin.action.TELVIEW

com.netqin.debug.ChangeIM

android.netqin.action.ChangeIM

.NqcmSplash

android.intent.action.MAIN

com.zong.android.engine.ui.ZongUI

com.netqin.zongpay.PAYMENT

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.PROCESS_OUTGOING_CALLS
com.android.launcher.permission.READ_SETTINGS
android.permission.BROADCAST_SMS
android.permission.MODIFY_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.RESTART_PACKAGES
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.WRITE_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.GET_ACCOUNTS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

com.netqin.cm.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED
com.netqin.cm.sms_delivered_action
com.netqin.cm.VIEW_PRIVATESMS_NOTIFY
android.intent.action.NEW_OUTGOING_CALL
com.netqin.cm.VIEW_PRIVATECALL_NOTIFY

com.netqin.cm.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.netqin.telnumowner.PhoneStateReceiver

android.intent.action.PHONE_STATE
android.intent.action.PHONE_STATE_2
android.intent.action.NEW_OUTGOING_CALL

com.netqin.cm.receiver.PackageAddOrRemoveReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.netqin.cm.receiver.AlarmReceiver

android.intent.action.SPAM_NOTIFICATION_ALARM
android.intent.action.REGULAR
android.intent.action.POLICY
android.intent.action.UPD
android.intent.action.YPAGE
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED

com.admob.android.ads.analytics.InstallReceiver

com.android.vending.INSTALL_REFERRER

com.netqin.cm.receiver.MdotmReceiver

com.android.vending.INSTALL_REFERRER

Services

Android Permissions

071cca82af7fca84b65015e42fea132a_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.PROCESS_OUTGOING_CALLS

com.android.launcher.permission.READ_SETTINGS

android.permission.BROADCAST_SMS

android.permission.MODIFY_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.RESTART_PACKAGES

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.GET_ACCOUNTS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

com.netqin.mm

.NqcmSplash

Activities

com.netqin.debug.ExportTelNum

com.netqin.debug.TelNumSelect

com.netqin.debug.ChangeIM

.NqcmSplash

com.zong.android.engine.ui.ZongUI

Permissions

Receivers

com.netqin.cm.receiver.SmsReceiver

com.netqin.cm.receiver.BootReceiver

com.netqin.telnumowner.PhoneStateReceiver

com.netqin.cm.receiver.PackageAddOrRemoveReceiver

com.netqin.cm.receiver.AlarmReceiver

com.admob.android.ads.analytics.InstallReceiver

com.netqin.cm.receiver.MdotmReceiver

Services

Android Permissions

071cca82af7fca84b65015e42fea132a_JaffaCakes118