377847cb27194457a3a5e1dc251cb50e_JaffaCakes118

General

Target

377847cb27194457a3a5e1dc251cb50e_JaffaCakes118
Size

10.7MB
MD5

377847cb27194457a3a5e1dc251cb50e
SHA1

9b1fcb8c5eaee6a08d520fb95658d2a118c1af22
SHA256

adbd5d58b02fa484d949196b62fde3a91e3d2ed4f6912c702d05d9be82d90d17
SHA512

d4ed789dc9994534cb38b0be0418b37a93d28c50ec9145f35d5f267c8a67bf5728b7a8e65c30050a785d2db8b7253a92eee8574e0f04b230803c3928e05c4c70
SSDEEP

196608:4pC10GNtrOgrudA0VFERp1hnI9K+sd3aq7did:4pTiEgruVHS1J3J7od

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

377847cb27194457a3a5e1dc251cb50e_JaffaCakes118
.apk android arch:arm

com.ifeng.openbook

com.qiyuenovel.cn.activitys.LoadingActivity

Activities

com.qiyuenovel.cn.activitys.LoadingActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.GET_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CHANGE_WIFI_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.SET_DEBUG_APP
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.ACCESS_NETWORK_STATE
android.permission.GET_PACKAGE_SIZE
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS

Receivers

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.qiyuenovel.book.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.umeng.message.UmengService

com.qiyuenovel.book.intent.action.START
com.qiyuenovel.book.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
QihooPay.apk
.apk android arch:arm arch:x86

com.qihoo360pp.qihoopay

com.qihoo360pp.qihoopay.plugin.page.MainActivity

Activities

com.qihoo360pp.qihoopay.plugin.page.MainActivity

com.qihoopay.pay

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.SEND_SMS
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_SMS
android.permisson.WAKE_LOCK
android.permission.RECEIVE_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.ACCESS_COARSE_LOCATION
dmss.jar
.apk android
alipay_plugin.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

377847cb27194457a3a5e1dc251cb50e_JaffaCakes118

Permissions

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_PACKAGE_SIZE

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.ifeng.openbook

com.qiyuenovel.cn.activitys.LoadingActivity

Activities

com.qiyuenovel.cn.activitys.LoadingActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.qihoo360pp.qihoopay

com.qihoo360pp.qihoopay.plugin.page.MainActivity

Activities

com.qihoo360pp.qihoopay.plugin.page.MainActivity

Permissions

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

377847cb27194457a3a5e1dc251cb50e_JaffaCakes118