21c0224dd9055c782fdf2b2155a319b3_JaffaCakes118

General

Target

21c0224dd9055c782fdf2b2155a319b3_JaffaCakes118
Size

8.3MB
MD5

21c0224dd9055c782fdf2b2155a319b3
SHA1

9cfb11d11346f65bdeb5e29d027a794296fe4182
SHA256

0f15fe80b6747fb809d19e94c9d6ae3696974d19f99986be6ba2a9c0e5454010
SHA512

0fb2ce207dd93e94fcdceb0fef82527bfe3640060405e7e0f9e8c2a1f5fdc403edbc85e32d545ec48c29b5387672c26a949880783bf4198802f6d4c5a01e7335
SSDEEP

196608:dzw8bZ/3ckrBmls/MGtnVg82X82QitgtwrkcM0G1G:O8bZrrBOs/MGtVg8K8Wg2NMC

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

Files

21c0224dd9055c782fdf2b2155a319b3_JaffaCakes118
.apk android arch:arm arch:x86

com.yimi330.huosuapp

com.etsdk.app.huov7.ui.StartActivity

Activities

com.mob.tools.MobUIShell

android.intent.action.VIEW
com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.etsdk.app.huov7.ui.StartActivity

android.intent.action.MAIN

com.yimi330.huosuapp.wxapi.WxPayPluginActivity

huosdk.intent.action.WXPAY

Permissions

android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
ANDROID.PERMISSION.WRITE_APN_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.GET_TASKS
android.permission.MANAGE_ACCOUNTS
android.permission.CAMERA
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.CALL_PHONE

Receivers

com.etsdk.app.huov7.receiver.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE

Services

com.baidu.location.f

com.baidu.location.service_v2.2

Android Permissions

21c0224dd9055c782fdf2b2155a319b3_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

ANDROID.PERMISSION.WRITE_APN_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.CAMERA

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CALL_PHONE

Sharing

General

Malware Config

Signatures

Files

com.yimi330.huosuapp

com.etsdk.app.huov7.ui.StartActivity

Activities

com.mob.tools.MobUIShell

com.etsdk.app.huov7.ui.StartActivity

com.yimi330.huosuapp.wxapi.WxPayPluginActivity

Permissions

Receivers

com.etsdk.app.huov7.receiver.ConnectionChangeReceiver

Services

com.baidu.location.f

Android Permissions

21c0224dd9055c782fdf2b2155a319b3_JaffaCakes118