General

  • Target

    28852e7bd60426b09cd5e67139f83b38_JaffaCakes118

  • Size

    23.8MB

  • MD5

    28852e7bd60426b09cd5e67139f83b38

  • SHA1

    7a73bd96ecd9dc4d813ff8e549db49d9c4b1c034

  • SHA256

    f1646c1de530517f9208fa5253354c8fac8b6f3b5acb34b74ea3a1a609928c0e

  • SHA512

    788fa486a7fd46ecc948dc8de5b050f4ba556af6d4b63c013a4b0302b5b874868feac48c66477dab5c628aac822f56bd21a167827c0a6941709a634a6dfb4598

  • SSDEEP

    393216:dyXl43nEbgntOpjJSkzV/g1DDSEYbA1h9m5Ts+KkyIuKbssHHArSwoEKpzU5F+Vn:dq43nEPNwKgjXh9m5oNkduKAR+woEK0c

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • 28852e7bd60426b09cd5e67139f83b38_JaffaCakes118
    .apk android arch:arm arch:x86

    com.nd.android.pandahome2

    com.nd.hilauncherdev.launcher.Launcher


  • SohuFixHack.jar
    .apk android
  • bdxadsdk.jar
    .apk android
  • com.felink.videopaper.plugin_V_21_M_0e0c944ddc587cb09fb66e410e8b805a.jar
    .apk android

    com.felink.videopaper.plugin

    com.video.felink.videopaper.plugin.MainActivity


  • com.nd.hilauncherdev.plugin.navigation_V_80_M_46176de7b1b3309e51084b4239d70676.jar
    .apk android

    com.nd.hilauncherdev.plugin.navigation

    com.nd.hilauncherdev.plugin.navigation.activity.MainActivity


  • gdtadv2.jar
    .apk android arch:arm arch:arm64
  • nd.jar
    .apk android

Android Permissions

28852e7bd60426b09cd5e67139f83b38_JaffaCakes118

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.BIND_APPWIDGET

com.nd.android.pandahome2.permission.READ_SETTINGS

com.nd.android.pandahome2.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

com.android.ContactWidget.permission.READ_SETTINGS

com.android.ContactWidget.permission.WRITE_SETTINGS

android.permission.ACCESS_WEATHERCLOCK_PROVIDER

android.permission.PACKAGE_USAGE_STATS

android.permission.WAKE_LOCK

android.permission.RESTART_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

com.dianxinos.dxhome.permission.READ_SETTINGS

android.permission.PERSISTENT_ACTIVITY

com.huawei.android.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS