Overview

overview

8

Static

static

6

0c9ffb89a2...18.apk

android-9-x86

8

0c9ffb89a2...18.apk

android-13-x64

8

bdxadsdk.apk

android-9-x86

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

gdtadv2.apk

android-9-x86

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c9ffb89a27482cd9fa5fc7f2452bed1_JaffaCakes118

  • Size

    11.7MB

  • MD5

    0c9ffb89a27482cd9fa5fc7f2452bed1

  • SHA1

    1845c83d11793d7fb2de4065ddde341e9bedd871

  • SHA256

    db181e2bb14fd8aefbe6b78766d085f4bb47169770681efd485f9186346b143a

  • SHA512

    bb2dc065b2d2e7db8a29bdb4459fbddb0124cb80870d4da51fed9ab7dc7c7c0bc570641f6673a9c8cddf35e18d3aa709a98359efb59ac15339f9bd299d945391

  • SSDEEP

    196608:6KhAMGPXZa/VPdfxywWwnip3faLkdgkG8EbU6AlWu+0aEtMtSLnCbQQuhzABolcu:dXGPpCV1wgnitCLkdTRK3wMtb0Qt1vPu

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 0c9ffb89a27482cd9fa5fc7f2452bed1_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.tieniu.lezhuan

    com.tieniu.lezhuan.start.ui.SplashActivity


  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

0c9ffb89a27482cd9fa5fc7f2452bed1_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

getui.permission.GetuiService.com.tieniu.lezhuan