376b500fb9cfd484a14681d20be45190_JaffaCakes118

General

Target

376b500fb9cfd484a14681d20be45190_JaffaCakes118
Size

27.6MB
MD5

376b500fb9cfd484a14681d20be45190
SHA1

b5b85a4807cf706d34f6bad7e8ee53bb8f9f59d4
SHA256

9476d7f3b5c5027368d734123633a7633c1188c93733c62f89b1b9258eac8200
SHA512

7c852fc05c7405435ce4fe7b3252c9e5b94fbcb3f39b045d4f0ed9e6b68cf27abc7f90436f1c3bb44cff22b2e9f594b172a5513eaf07b772468d4a860e3f7eb0
SSDEEP

786432:qyWuCM3ohuMW55556jeUJdikVABowKWe+tp28GCC0KtGq2AJm:nkuMW555563dBOfKWe+tlbC0KUDV

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Files

376b500fb9cfd484a14681d20be45190_JaffaCakes118
.apk android arch:arm

dopool.player

com.dopool.module_splash.view.splash.activity.SplashActivity

Activities

com.dopool.module_splash.view.splash.activity.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.dopool.module_play.play.view.PlayActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

dopool.player.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.alipay.sdk.app.AlipayResultActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.WRITE_CONTACTS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.FOREGROUND_SERVICE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.GET_TASKS
android.permission.MODIFY_AUDIO_SETTINGS
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.CHANGE_NETWORK_STATE
android.permission.DISABLE_KEYGUARD
android.permission.SYSTEM_ALERT_WINDOW
android.permission.INSTALL_SHORTCUT
android.permission.UNINSTALL_SHORTCUT
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CHANGE_CONFIGURATION
android.permission.WRITE_SETTINGS
android.permission.PACKAGE_USAGE_STATS
android.permission.BATTERY_STATS
android.permission.MANAGE_USERS
android.permission.READ_LOGS
getui.permission.GetuiService.dopool.player
dopool.player.permission.MIPUSH_RECEIVE
com.android.launcher.permission.WRITE_SETTINGS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Receivers

com.dopool.module_base_component.broadcast.PushBroadCastReceiver

intent.action.PUSH_DATA
dopool.player.push.project

com.dopool.module_base_component.play.ReserveReceiver

dopool.player.reserve_4.0
dopool.player.reserve_received

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.inmobi.share.id

com.snmi.sdk.download.DataDownLoadReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.snmi.sdk.download.DataInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.qitiancloud.sdk.NetworkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.hz.yl.b.McReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.bugtags.library.BugtagsReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message
AdServer.apk
.apk android arch:arm64 arch:arm

com.miui.systemAdSolution

Permissions

android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
analytics_core.apk
.apk android arch:arm64 arch:arm

com.miui.analytics

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES

Receivers

com.miui.analytics.AnalyticsReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

Services

com.miui.analytics.AnalyticsService

com.miui.action.ANALYTICS_SERVICE
bdxadsdk.jar
.apk android
gdtadv2.jar
.apk android arch:arm arch:arm64

Android Permissions

376b500fb9cfd484a14681d20be45190_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.FOREGROUND_SERVICE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INSTALL_SHORTCUT

android.permission.UNINSTALL_SHORTCUT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.PACKAGE_USAGE_STATS

android.permission.BATTERY_STATS

android.permission.MANAGE_USERS

android.permission.READ_LOGS

getui.permission.GetuiService.dopool.player

dopool.player.permission.MIPUSH_RECEIVE

com.android.launcher.permission.WRITE_SETTINGS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

Sharing

General

Malware Config

Signatures

Files

dopool.player

com.dopool.module_splash.view.splash.activity.SplashActivity

Activities

com.dopool.module_splash.view.splash.activity.SplashActivity

com.dopool.module_play.play.view.PlayActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.tencent.tauth.AuthActivity

dopool.player.wxapi.WXPayEntryActivity

com.alipay.sdk.app.AlipayResultActivity

Permissions

Receivers

com.dopool.module_base_component.broadcast.PushBroadCastReceiver

com.dopool.module_base_component.play.ReserveReceiver

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.snmi.sdk.download.DataDownLoadReceiver

com.snmi.sdk.download.DataInstallReceiver

com.qitiancloud.sdk.NetworkStateReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

com.hz.yl.b.McReceiver

com.bugtags.library.BugtagsReceiver

com.igexin.sdk.PushReceiver

Services

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.igexin.sdk.PushService

com.miui.systemAdSolution

Permissions

com.miui.analytics

Permissions

Receivers

com.miui.analytics.AnalyticsReceiver

Services

com.miui.analytics.AnalyticsService

Android Permissions

376b500fb9cfd484a14681d20be45190_JaffaCakes118