2bca0be5eb80ea2fa73d2048cad63543_JaffaCakes118

General

Target

2bca0be5eb80ea2fa73d2048cad63543_JaffaCakes118
Size

7.7MB
MD5

2bca0be5eb80ea2fa73d2048cad63543
SHA1

ae26b540117815729b0ed3586f81fac563f252ca
SHA256

c6bcca19d7d627812cf1e1d50af39d3cc9d9e728c90bdd2c63a95b9bdd846ae5
SHA512

ba7d9ac278b10cfeb3b281233d53a4bffd562bede1a265c187546ceb78b78ebe54dd59000dfbfcd4dcc4f44986efcfe09f3cd5bbb80e02a5c749bb6969c45386
SSDEEP

196608:6Z6SxMxKMJ+bBGrDq9V5YKAIM+yPeIrmyZ3VjLYNb4eK24SkY:4TxMAMJq2lKAIMj60jibkjS

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

Files

2bca0be5eb80ea2fa73d2048cad63543_JaffaCakes118
.apk android arch:arm

com.qihoo.safe.remotecontrol

com.qihoo.util.StartActivity

Activities

com.qihoo.safe.remotecontrol.RemoteControlActivity

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.qihoo.safe.remotecontrol.widget.CreateShortcutActivity

android.intent.action.CREATE_SHORTCUT

Permissions

com.qihoo.safe.remotecontrol.update.BROAD
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.PROCESS_OUTGOING_CALLS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.qihoo.safe.remotecontrol.permission.INJECT_EVENTS
android.permission.DISABLE_KEYGUARD

Receivers

com.qihoo.safe.remotecontrol.receiver.BootupReceiver

android.intent.action.BOOT_COMPLETED

com.qihoo.safe.remotecontrol.receiver.UpdateReceiver

com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_BEGIN_E
com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_END_E
com.qihoo.antivirus.update.action.UPDATED_FILE_NOTIFY_E
com.qihoo.antivirus.update.action.PATCH_FILE_NOTIFY_E
com.qihoo.antivirus.update.action.DATA_FILE_DOWNLOAD_INI_E
com.qihoo.antivirus.update.action.ERROR_E
com.qihoo.antivirus.update.action.CONNECT_RETRY_E
com.qihoo.antivirus.update.action.UPDATE_CHECK_OVER_E
com.qihoo.antivirus.update.action.DATA_FILE_PROGRESS_E
com.qihoo.antivirus.update.action.APP_PROGRESS_E
com.qihoo.antivirus.update.action.UPDATE_OVER_E
com.qihoo.antivirus.update.action.APK_PATCH_ERROR_E
com.qihoo.antivirus.update.action.CANCEL_E

com.qihoo.safe.test.InstrumentReceiver

com.qihoo.safe.test.ACTION_MAKE_CALL
com.qihoo.safe.test.ACTION_DROP_CALL
com.qihoo.safe.test.ACTION_DUMP_DIAGNOSTIC
com.qihoo.safe.test.ACTION_ANSWER_CALL

com.qihoo.safe.remotecontrol.widget.ScreenSharingWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

Services

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.common.account.QihooAuthenticatorService

android.accounts.AccountAuthenticator

Android Permissions

2bca0be5eb80ea2fa73d2048cad63543_JaffaCakes118

Permissions

com.qihoo.safe.remotecontrol.update.BROAD

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WAKE_LOCK

com.qihoo.safe.remotecontrol.permission.INJECT_EVENTS

android.permission.DISABLE_KEYGUARD

Sharing

General

Malware Config

Signatures

Files

com.qihoo.safe.remotecontrol

com.qihoo.util.StartActivity

Activities

com.qihoo.safe.remotecontrol.RemoteControlActivity

com.qihoo.util.StartActivity

com.qihoo.safe.remotecontrol.widget.CreateShortcutActivity

Permissions

Receivers

com.qihoo.safe.remotecontrol.receiver.BootupReceiver

com.qihoo.safe.remotecontrol.receiver.UpdateReceiver

com.qihoo.safe.test.InstrumentReceiver

com.qihoo.safe.remotecontrol.widget.ScreenSharingWidgetProvider

Services

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.remotecontrol.diagnostic.DiagnosticService

com.qihoo.safe.common.account.QihooAuthenticatorService

Android Permissions

2bca0be5eb80ea2fa73d2048cad63543_JaffaCakes118