0b1b9b0a5219c9ff0edf9178d9390591_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b1b9b0a5219c9ff0edf9178d9390591_JaffaCakes118
Size

16.2MB
MD5

0b1b9b0a5219c9ff0edf9178d9390591
SHA1

f13d6a7a9442e197003a06ec487d034d863620ea
SHA256

322bd9259ea047c0d9e1aab707a9e45ac31e7168a851c36112f307cf1ee6ac35
SHA512

bd2883a70e034e54508b8331aa98fc4702470953d60444684cc5d67b4fac0d52d6a4e2a60e31bc214d578e8f084dbd450e159555e138be133ff6f4fe9bcc8db6
SSDEEP

393216:ZSavm/zd0egrp87f/MRfWIlH4YIkwvI4n2F/IgLyQxGDJEd+Cg:ZSav2zd0egrAf/MR9lHNIkKnE/94BCg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

0b1b9b0a5219c9ff0edf9178d9390591_JaffaCakes118
.apk android arch:arm

sina.mobile.qftianqitong

com.sina.tianqitong.ui.main.Splash

Activities

com.sina.tianqitong.ui.main.Splash

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.sina.tianqitong.ui.main.MainTabActivity

android.intent.action.MAIN
sina.mobile.tianqitong.ALARM_POPUP
sina.mobile.tianqitong.SHOW_CITY

sina.mobile.tianqitong.appwidget.WidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

com.sina.tianqitong.ui.cityselector.CityViewSpotSelectorActivity

android.intent.action.MAIN
android.intent.action.MAIN

sina.mobile.tianqitong.main.Splash

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.baidu.techain.TechainActivity

com.baidu.action.Techain.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

sina.mobile.qftianqitong.vz.jliActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CHANGE_CONFIGURATION
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
com.sina.tianqitong.PERMISSION
com.sina.permission.SINA_PUSH
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher3.permission.INSTALL_SHORTCUT
com.android.launcher3.permission.UNINSTALL_SHORTCUT

Receivers

com.sina.tianqitong.service.receiver.AlarmReceiver

sina.mobile.tianqitong.action.use_weather_notification
sina.mobile.tianqitong.action.auto_update
sina.mobile.tianqitong.action.update_before_tts
sina.mobile.tianqitong.action.use_tts
sina.mobile.tianqitong.action.use_jieqi_notification
sina.mobile.tianqitong.action.use_festival_notification
sina.mobile.tianqitong.action.recommend_time_updatetime
sina.mobile.tianqitong.action.tts_operation_updatetime
sina.mobile.tianqitong.action.check_version_updatetime
sina.mobile.tianqitong.action.weibo_operation_updatetime
sina.mobile.tianqitong.action.pop_up_before_tts
sina.mobile.tianqitong.action.user_introduction_for_weibo
sina.mobile.tianqitong.action.hangeng_alarm_notifitime
sina.mobile.tianqitong.action.user_auto_share_weibo
sina.mobile.tianqitong.action.cancel_push_notification

sina.mobile.tianqitong.appwidget.TQTReciever

sina.mobile.tianqitong.action.delete_notification
sina.mobile.tianqitong.action.update_widget_clock
com.miui.home.intent.action.UNLOCKED
sina.mobile.tianqitong.INTENT_BC_TTS_PLAYING_FINISHED
sina.mobile.tianqitong.INTENT_BC_TTS_PLAYING
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.USER_PRESENT
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.TIMEZONE_CHANGED
android.intent.action.BOOT_COMPLETED
action_broadcast_cover_app_unlock
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

sina.mobile.tianqitong.appwidget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget5x2Provider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget4x1Provider

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.tianqitong.appwidget.Widget5x1Provider

android.appwidget.action.APPWIDGET_UPDATE

com.sina.tianqitong.service.receiver.CallWeatherReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.sina.tianqitong.service.receiver.AppInstalledReceiver

android.intent.action.PACKAGE_ADDED

com.sina.push.receiver.PushSDKReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED

com.sina.tianqitong.service.receiver.PushReceiver

com.sina.push.msg.broadcast.1003

com.sina.tianqitong.ui.alarm.TtsAlarmReceiver

com.sina.tianqitong.VOICE_ALARM_ALERT

com.baidu.techain.TechainReceiver

com.baidu.action.Techain.VIEW
android.intent.action.BOOT_COMPLETED

com.weibo.tianqitong.aqiappwidget.AqiAW_4x1

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_4x2

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_5x1

android.appwidget.action.APPWIDGET_UPDATE

com.weibo.tianqitong.aqiappwidget.AqiAW_5x2

android.appwidget.action.APPWIDGET_UPDATE

sina.mobile.qftianqitong.vz.XlmiReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

Services

com.sina.tianqitong.service.TQTService

sina.mobile.tianqitong.action.startservice.update_weatherinfo
sina.mobile.tianqitong.action.startservice.get_weatherinfo_notification
sina.mobile.tianqitong.action.startservice.get_new_weibo_topic
sina.mobile.tianqitong.action.startservice.get_new_version
sina.mobile.tianqitong.action.startservice.get_new_week_recommend
sina.mobile.tianqitong.action.startservice.get_new_tts_operation
sina.mobile.tianqitong.action.startservice.do_tts
sina.mobile.tianqitong.action.startservice.update_before_tts
sina.mobile.tianqitong.action.startservice.pop_up_before_tts
sina.mobile.tianqitong.action.startservice.update_4x2appwidget
sina.mobile.tianqitong.action.startservice.update_4x1appwidget
sina.mobile.tianqitong.action.startservice.update_5x2appwidget
sina.mobile.tianqitong.action.startservice.update_5x1appwidget
sina.mobile.tianqitong.action.startservice.update_widget_clock
sina.mobile.tianqitong.action.startservice.switch_appwidget_city
sina.mobile.tianqitong.action.startservice.do_tts_widget
sina.mobile.tianqitong.action.startservice.user_introduction_for_weibo
sina.mobile.tianqitong.action.startservice.run_weibo
sina.mobile.tianqitong.action.startservice.do_tts_alarm
sina.mobile.tianqitong.action.startservice.do_jieqi_alarm
sina.mobile.tianqitong.action.startservice.do_festival_alarm
sina.mobile.tianqitong.action.startservice.applay_latest_alarm
sina.mobile.tianqitong.action.startservice.share_weibo
sina.mobile.tianqitong.action.startservice.wake_up_and_update_one_city
sina.mobile.tianqitong.action.startservice.hangeng_alarm_register
sina.mobile.tianqitong.action.startservice.auto_share_weibo
sina.mobile.tianqitong.action.startservice.update_all_citys
sina.mobile.tianqitong.action.startservice.addupdate_locate_city
sina.mobile.tianqitong.action.startservice.get_pid
sina.mobile.tianqitong.ACTION_DAILY_SCHEDULE_REFRESH_TIMELINE
sina.mobile.tianqitong.ACTION_CHECK_SOME_DAY
sina.mobile.tianqitong.ACTION_CHECK_SECOND_DAY
sina.mobile.tianqitong.ACTION_CHECK_3RD_DAY
android.intent.action.VIEW

com.sina.tianqitong.service.CallWeatherService

com.sina.callweather.action.outgoing.call
com.sina.callweather.action.outgoing.call.end
com.sina.callweather.action.incoming.call
com.sina.callweather.action.incoming.call.end
com.sina.callweather.action.call.end.byself

com.sina.tianqitong.service.PushService

com.sina.push.tqt.ACTION_GET_GDID
com.sina.push.tqt.ACTION_GET_PUSH_DATA
com.sina.push.tqt.ACTION_SWITCH_CHANNEL
com.sina.push.tqt.ACTION_REGISTER_PUSH_SERVICE

com.sina.push.service.SinaPushService

sina.push.action.service.1003

com.baidu.techain.TechainService

com.baidu.action.Techain.VIEW

Android Permissions

0b1b9b0a5219c9ff0edf9178d9390591_JaffaCakes118

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_CONFIGURATION

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

com.sina.tianqitong.PERMISSION

com.sina.permission.SINA_PUSH

android.permission.READ_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher3.permission.INSTALL_SHORTCUT

com.android.launcher3.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

sina.mobile.qftianqitong

com.sina.tianqitong.ui.main.Splash

Activities

com.sina.tianqitong.ui.main.Splash

com.sina.tianqitong.ui.main.MainTabActivity

sina.mobile.tianqitong.appwidget.WidgetConfigure

com.sina.tianqitong.ui.cityselector.CityViewSpotSelectorActivity

sina.mobile.tianqitong.main.Splash

com.tencent.tauth.AuthActivity

com.baidu.techain.TechainActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

sina.mobile.qftianqitong.vz.jliActivity

Permissions

Receivers

com.sina.tianqitong.service.receiver.AlarmReceiver

sina.mobile.tianqitong.appwidget.TQTReciever

sina.mobile.tianqitong.appwidget.WidgetProvider

sina.mobile.tianqitong.appwidget.Widget5x2Provider

sina.mobile.tianqitong.appwidget.Widget4x1Provider

sina.mobile.tianqitong.appwidget.Widget5x1Provider

com.sina.tianqitong.service.receiver.CallWeatherReceiver

com.sina.tianqitong.service.receiver.AppInstalledReceiver

com.sina.push.receiver.PushSDKReceiver

com.sina.tianqitong.service.receiver.PushReceiver

com.sina.tianqitong.ui.alarm.TtsAlarmReceiver

com.baidu.techain.TechainReceiver

com.weibo.tianqitong.aqiappwidget.AqiAW_4x1

com.weibo.tianqitong.aqiappwidget.AqiAW_4x2

com.weibo.tianqitong.aqiappwidget.AqiAW_5x1

com.weibo.tianqitong.aqiappwidget.AqiAW_5x2

sina.mobile.qftianqitong.vz.XlmiReceiver

Services

com.sina.tianqitong.service.TQTService

com.sina.tianqitong.service.CallWeatherService

com.sina.tianqitong.service.PushService

com.sina.push.service.SinaPushService

com.baidu.techain.TechainService

Android Permissions

0b1b9b0a5219c9ff0edf9178d9390591_JaffaCakes118