General

  • Target

    2eec64d4b87f56b8d091acd16de9e831_JaffaCakes118

  • Size

    7.8MB

  • MD5

    2eec64d4b87f56b8d091acd16de9e831

  • SHA1

    0d4397f1af4a9534b5b8bced1e6def27c0a71b8d

  • SHA256

    edd41ebab7a5fdef20c8448b364ba5fcce0eed2d26e56ee0feba739f74f7d13c

  • SHA512

    4a8eedadde5e2dcabec8012a28eead2c9bf170b2abc23c7402d4a3120a95cf4ae75faea2f70453af43c2d2757153307cf2463c3971b39b2891f3f2d0eb3c9210

  • SSDEEP

    196608:ZN5Vys8P9IGLHNryuLRLvzkfYiyRgWqiTY05H87DtpeYkY14pg:5Vys8P9Lt3RLvzkfYiXwY05H87DtpeY5

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 19 IoCs

Files

  • 2eec64d4b87f56b8d091acd16de9e831_JaffaCakes118
    .apk android arch:arm

    com.v0002.g0185

    com.hijoygames.firetd.LogoActivity


  • Orz_v6.zip
    .apk android

    com.oc.system

    com.oc.system.promotion.activity.PromCommonShortcutActivity


  • ad
    .apk android

    com.joyreach.joyadsdk

    com.joyreach.joyadsdk.MainActivity


  • com.skymobi.pay.opplugin_V2006.apk
    .apk android

    com.skymobi.pay.plugin

    com.skymobi.pay.third.activity.impl.EnterChargeCenter


  • lyhtgh.mn.ltplugin_v1004.pl
    .apk android

    com.lyhtgh.pay.ltplugin


Android Permissions

2eec64d4b87f56b8d091acd16de9e831_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_MMS

android.permission.RECEIVE_MMS

android.permission.BROADCAST_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.RUN_INSTRUMENTATION

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.INSTALL_PACKAGES

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_SECURE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_CONFIGURATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.READ_SETTINGS