Overview

overview

8

Static

static

6

13ddc27724...18.apk

android-9-x86

13ddc27724...18.apk

android-13-x64

8

bdxadsdk.apk

android-9-x86

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

gdtadv2.apk

android-9-x86

Sharing

Copy URL Twitter E-mail

General

  • Target

    13ddc27724c4db409569cdc25be0dcad_JaffaCakes118

  • Size

    11.0MB

  • MD5

    13ddc27724c4db409569cdc25be0dcad

  • SHA1

    faf99b269a2349db9c55a444f7f40e749abf3dac

  • SHA256

    436f24e9750b89d13a39f323975241ea2dae478f2bcbd0bc80486d781170fff3

  • SHA512

    cd76c1a2701511fecadbae2505fb5c02f13a1e17475260eaaab3cbdd6902e16a70aaf982a5bdbe50c33637da6190b27d4817a631d0bb2456c0e70ccd3dc46902

  • SSDEEP

    196608:dKhAMGdd/c2wD14ZnxZcPEtMtSLnC0FYhzABolc+kQeZ4W2Zid7feJPZIEjv10W:gXGPs4ZnkPwMtbiD1vP2CWdZIEx0W

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 8 IoCs

Files

  • 13ddc27724c4db409569cdc25be0dcad_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.tieniu.lezhuan

    com.tieniu.lezhuan.start.ui.SplashActivity


  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

13ddc27724c4db409569cdc25be0dcad_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_PACKAGE_SIZE

android.permission.PACKAGE_USAGE_STATS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

getui.permission.GetuiService.com.tieniu.lezhuan