Overview

overview

8

Static

static

6

14ea6d3244...18.apk

android-9-x86

14ea6d3244...18.apk

android-13-x64

8

bdxadsdk.apk

android-9-x86

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

gdtadv2.apk

android-9-x86

Sharing

Copy URL Twitter E-mail

General

  • Target

    14ea6d3244953622540f5b841020da64_JaffaCakes118

  • Size

    11.0MB

  • MD5

    14ea6d3244953622540f5b841020da64

  • SHA1

    8b91369402a53cf38e474ef99590af7f38befdb8

  • SHA256

    447b6571569b0fe65f0624c9d9595edcefbdd8a36231106e8ea08e3089889aa4

  • SHA512

    d938ff471e39d72dc493a2f7ecdaaa6a5a973ea43d5df13d80d76b5e0819a1d440a199c1bb6009c40950ad8f5023406e689507d3603505ce4d889b9b5bd0bf1c

  • SSDEEP

    196608:3TKhAMGdd/c2wD14ZnxZcPEtMtSLnC0FYhzABolc+kQeZ4W2Zid7feJPXIEjv10w:3mXGPs4ZnkPwMtbiD1vP2CWdXIEx0w

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 14ea6d3244953622540f5b841020da64_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.tieniu.lezhuan

    com.tieniu.lezhuan.start.ui.SplashActivity


  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

14ea6d3244953622540f5b841020da64_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

getui.permission.GetuiService.com.tieniu.lezhuan