269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118
Size 4.2MB
Sample240508-zbapwagf59
SHA256 c6ddd4eddfdef059731165e603c48678466941cdc50abc0e69047f739acf56f6
MD5 269ad7ccb25d08ca0eca031e45fa6136
SHA1 3c4c759f9c2638beaf02e1989143cae6b0e10883
SHA512 35e290bdacc37925ab4739b7ff10357a040a48af8025d38946e809865f0837b6b9b902b1e0645eef0345fbc352e7eccf30726bfe1aa2179c0aa258024f2b6d71
SSDEEP 98304:97olAl3CPrI4cSoJMq9dYP+Du++h/IK6X66ZZl:9qq3CJ/oxdYP+DWml
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 14 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118

.apk 4.2MB
__pasys_remote_banner.jar

.apk 108KB
gdtadv2.jar

.apk 80KB
spdex.jar

.apk 760B

269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118

SHA256 c6ddd4eddfdef059731165e603c48678466941cdc50abc0e69047f739acf56f6
MD5 269ad7ccb25d08ca0eca031e45fa6136
SHA1 3c4c759f9c2638beaf02e1989143cae6b0e10883
SHA512 35e290bdacc37925ab4739b7ff10357a040a48af8025d38946e809865f0837b6b9b902b1e0645eef0345fbc352e7eccf30726bfe1aa2179c0aa258024f2b6d71
SSDEEP 98304:97olAl3CPrI4cSoJMq9dYP+Du++h/IK6X66ZZl:9qq3CJ/oxdYP+DWml
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.quyugongzuoshi.jinangwengongjutwo

android.app.action.DEVICE_ADMIN_ENABLED android.permission.CAMERA android.permission.FLASHLIGHT android.permission.GET_PACKAGE_SIZE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WAKE_LOCK android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.ACCESS_WIFI_STATE android.permission.BATTERY_STATS android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_ADDED android.permission.ACCES_MOCK_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.KILL_BACKGROUND_PROCESSES android.permission.SYSTEM_ALERT_WINDOW android.permission.CLEAR_APP_CACHE com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS android.permission.WRITE_SETTINGS android.permission.READ_LOGS android.permission.PROCESS_OUTGOING_CALLS android.permission.ACCESS_MTK_MMHW android.permission.GET_TASKS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_BOOT_COMPLETED android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_SETTINGS android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECORD_AUDIO android.permission.CAMERA android.permission.ACCESS_COARSE_UPDATES

com.quyu.uninstaller.Introductory_page

android.intent.action.MAIN

com.quyu.uninstaller.MainActivity

com.quyu.uninstaller.Personal_application

com.quyu.uninstaller.Dustbin_Activity

com.quyu.uninstaller.Pop_wenti

com.quyu.uninstaller.UninstallActivity

com.quyu.uninstaller.APKClear

com.quyu.uninstaller.TempActivity

com.quyu.uninstaller.DustbinClearActivity

com.quyu.uninstaller.AdvertActivity

com.quyu.uninstaller.JIasu_whitepkg

com.quyu.uninstaller.Jiasu

com.quyu.uninstaller.SetActivity

com.quyu.uninstaller.JiasuShortcut

android.intent.action.VIEW

com.quyu.uninstaller.OurActivity

com.quyu.uninstaller.YanjiActivity

com.quyu.uninstaller.DustbinClearSetActivity

com.quyu.uninstaller.DustClearDetailActivity

com.quyu.uninstaller.JiasuRocketActivity

com.umeng.update.UpdateDialogActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.quyu.uninstaller.RootActivity

com.baidu.mobads.AppActivity

com.qq.e.ads.ADActivity

com.tencent.assistant.oem.superapp.activity.pictureprocessor.ShowPictureActivity

com.tencent.assistant.oem.superapp.activity.HomeActivity

com.quyugongzuoshi.jinangwengongju.MainActivity

com.quyugongzuoshi.jinangwengongju.view.JiangWenDonHuaiAct

com.xgcore.activity.ActivityFirst

android.intent.action.VIEW

com.xgcore.activity.ActivitySecond

android.intent.action.VIEW

com.xgcore.activity.ActivityThird

android.intent.action.VIEW

com.quyu.uninstaller.service.DownService

com.quyu.uninstaller.service.Residual_Activity

com.quyu.uninstaller.FTPServerService

com.umeng.message.UmengService

com.quyugongzuoshi.jinangwengongjutwo.intent.action.START com.quyugongzuoshi.jinangwengongjutwo.intent.action.COCKROACH org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengIntentService

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action com.umeng.message.unregistercallback.action com.umeng.message.message.handler.action com.umeng.message.autoupdate.handler.action

com.quyugongzuoshi.jinangwengongjutwo.NotificationService

com.xgcore.animal.api.MyPushIntentService

com.umeng.message.UmengDownloadResourceService

com.umeng.message.local.UmengLocalNotificationService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.MessageHandleService

com.umeng.update.net.DownloadingService

com.qq.e.comm.DownloadService

com.tencent.assistant.oem.superapp.monitor.AppMonitorService

com.quyugongzuoshi.jinangwengongju.service.TemperatureService

com.xgcore.service.PService

com.xgcore.service.DService

Android Permissions

269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118

Permissions

android.app.action.DEVICE_ADMIN_ENABLED

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.GET_PACKAGE_SIZE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.intent.action.PACKAGE_REMOVED

android.intent.action.PACKAGE_ADDED

android.permission.ACCES_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CLEAR_APP_CACHE

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.READ_LOGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_MTK_MMHW

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.ACCESS_COARSE_UPDATES

Sharing

General

Malware Config

Signatures

File Explorer

269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118

com.quyu.uninstaller.Introductory_page

com.quyu.uninstaller.MainActivity

com.quyu.uninstaller.Personal_application

com.quyu.uninstaller.Dustbin_Activity

com.quyu.uninstaller.Pop_wenti

com.quyu.uninstaller.UninstallActivity

com.quyu.uninstaller.APKClear

com.quyu.uninstaller.TempActivity

com.quyu.uninstaller.DustbinClearActivity

com.quyu.uninstaller.AdvertActivity

com.quyu.uninstaller.JIasu_whitepkg

com.quyu.uninstaller.Jiasu

com.quyu.uninstaller.SetActivity

com.quyu.uninstaller.JiasuShortcut

com.quyu.uninstaller.OurActivity

com.quyu.uninstaller.YanjiActivity

com.quyu.uninstaller.DustbinClearSetActivity

com.quyu.uninstaller.DustClearDetailActivity

com.quyu.uninstaller.JiasuRocketActivity

com.umeng.update.UpdateDialogActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.quyu.uninstaller.RootActivity

com.baidu.mobads.AppActivity

com.qq.e.ads.ADActivity

com.tencent.assistant.oem.superapp.activity.pictureprocessor.ShowPictureActivity

com.tencent.assistant.oem.superapp.activity.HomeActivity

com.quyugongzuoshi.jinangwengongju.MainActivity

com.quyugongzuoshi.jinangwengongju.view.JiangWenDonHuaiAct

com.xgcore.activity.ActivityFirst

com.xgcore.activity.ActivitySecond

com.xgcore.activity.ActivityThird

com.quyu.uninstaller.service.DownService

com.quyu.uninstaller.service.Residual_Activity

com.quyu.uninstaller.FTPServerService

com.umeng.message.UmengService

com.umeng.message.UmengIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.quyugongzuoshi.jinangwengongjutwo.NotificationService

com.xgcore.animal.api.MyPushIntentService

com.umeng.message.UmengDownloadResourceService

com.umeng.message.local.UmengLocalNotificationService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.MessageHandleService

com.umeng.update.net.DownloadingService

com.qq.e.comm.DownloadService

com.tencent.assistant.oem.superapp.monitor.AppMonitorService

com.quyugongzuoshi.jinangwengongju.service.TemperatureService

com.xgcore.service.PService

com.xgcore.service.DService

com.quyu.uninstaller.broad.DeviceScreenReceiver

com.quyu.uninstaller.broad.NotificationBroad

com.umeng.message.NotificationProxyBroadcastReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

com.umeng.message.MiPushBroadcastReceiver

com.quyugongzuoshi.jinangwengongju.service.StaticBroadcastReceiver

__pasys_remote_banner.jar

gdtadv2.jar

spdex.jar

Android Permissions

269ad7ccb25d08ca0eca031e45fa6136_JaffaCakes118