3816718a361552c31b9678c890b994ad_JaffaCakes118

General

Target

3816718a361552c31b9678c890b994ad_JaffaCakes118
Size

24.9MB
MD5

3816718a361552c31b9678c890b994ad
SHA1

bd27faa9115b8e0701705922777b88937372c327
SHA256

720f064a683288d7b4dc6f45ad0f26ea8c556285d57fa9fe63533a63cc8c703d
SHA512

bfe539a6dabde1789fea85f026f315d76f1865d998db7628d0b2febfed9b4c5fd579fc70dd0372d69139f66190bcf7a3a02a10be1a476f66c240fe9264e6f8cb
SSDEEP

393216:plfn3k1c3hA4d+YnsLlnAxrG5/MqIZIdSuSvCTG+QunpG1rgQWqhQ3DQyJWzap:LnU1c36X6C/lbS6GIGoqhSkcWGp

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

3816718a361552c31b9678c890b994ad_JaffaCakes118
.apk android arch:arm

com.gmail.ericlu2006.BraveRun2

com.inject.InjectActivity

Activities

com.ansca.corona.CoronaActivity

android.intent.action.MAIN

com.inject.InjectActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.GET_TASKS
android.permission.RECEIVE_SMS
android.permission.DISABLE_KEYGUARD
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.SYSTEM_ALERT_WINDOW
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

com.ansca.corona.SystemStartupBroadcastReceiver

android.intent.action.BOOT_COMPLETED

com.ansca.corona.notifications.GoogleCloudMessagingBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE
com.google.android.c2dm.intent.REGISTRATION

com.ansca.corona.purchasing.GoogleStoreBroadcastReceiver

com.android.vending.billing.IN_APP_NOTIFY
com.android.vending.billing.RESPONSE_CODE
com.android.vending.billing.PURCHASE_STATE_CHANGED

com.inject.XXPushReceiver

com.cocos.push.service.action.MESSAGE
com.cocos.push.service.action.MESSAGE_V2
com.cocos.push.service.action.RECEIVE

com.cocos.push.client.CCPushClientReceiver

android.intent.action.BOOT_COMPLETED
com.cocos.push.service.action.notification.SHOW
com.cocos.push.service.action.notification.CANCEL
com.cocos.push.service.action.UPDATE
com.cocos.push.service.action.AUTOCHECK

Services

com.cocos.push.service.CCPushService

cocos.push.service
xxzhushou.apk
.apk android arch:arm

com.xxAssistant

com.xxAssistant.View.SplashActivity

Activities

com.xxAssistant.View.AppsLaunchActivity

android.intent.action.AppsLaunchActivity

com.xxAssistant.View.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_COARSE_LOCATION
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.ACCESS_FINE_LOCATION
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS

Receivers

com.GPProduct.Share.WechatReceiver

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.xxAssistant.Receiver.InstallReciver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.xxAssistant.Receiver.NetworkBroadcast

android.net.conn.CONNECTIVITY_CHANGE

com.xxAssistant.Receiver.SysTemDownloadCompleteBroadcast

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

Services
KingUser.apk
.apk android

com.kingroot.kinguser

com.kingroot.kinguser.activitys.SliderMainActivity

Activities

com.kingroot.kinguser.activitys.SliderMainActivity

android.intent.action.MAIN

Permissions

com.kingroot.kinguser.permission.REQUEST
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INSTALL_PACKAGES
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.GET_PACKAGE_SIZE
android.permission.WAKE_LOCK

Receivers

com.kingroot.kinguser.receiver.SuRequestReceiver

com.kingroot.kinguser.SU_REQUEST

com.kingroot.kinguser.receiver.PackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.kingroot.kinguser.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.kingroot.kinguser.receiver.InstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED

com.kingroot.kinguser.receiver.ScreenEventReceiver

android.intent.action.USER_PRESENT

com.kingroot.kinguser.receiver.AlarmReceiver

android.intent.action.BOOT_COMPLETED
com.kingroot.kinguser.action.update

Services

com.kingroot.kinguser.service.KingRootAppListService

com.kingroot.kinguser.service.IKingrootAppList

Android Permissions

3816718a361552c31b9678c890b994ad_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.RECEIVE_SMS

android.permission.DISABLE_KEYGUARD

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.gmail.ericlu2006.BraveRun2

com.inject.InjectActivity

Activities

com.ansca.corona.CoronaActivity

com.inject.InjectActivity

Permissions

Receivers

com.ansca.corona.SystemStartupBroadcastReceiver

com.ansca.corona.notifications.GoogleCloudMessagingBroadcastReceiver

com.ansca.corona.purchasing.GoogleStoreBroadcastReceiver

com.inject.XXPushReceiver

com.cocos.push.client.CCPushClientReceiver

Services

com.cocos.push.service.CCPushService

com.xxAssistant

com.xxAssistant.View.SplashActivity

Activities

com.xxAssistant.View.AppsLaunchActivity

com.xxAssistant.View.SplashActivity

com.tencent.tauth.AuthActivity

Permissions

Receivers

com.GPProduct.Share.WechatReceiver

com.xxAssistant.Receiver.InstallReciver

com.xxAssistant.Receiver.NetworkBroadcast

com.xxAssistant.Receiver.SysTemDownloadCompleteBroadcast

Services

com.kingroot.kinguser

com.kingroot.kinguser.activitys.SliderMainActivity

Activities

com.kingroot.kinguser.activitys.SliderMainActivity

Permissions

Receivers

com.kingroot.kinguser.receiver.SuRequestReceiver

com.kingroot.kinguser.receiver.PackageReceiver

com.kingroot.kinguser.receiver.BootReceiver

com.kingroot.kinguser.receiver.InstallReceiver

com.kingroot.kinguser.receiver.ScreenEventReceiver

com.kingroot.kinguser.receiver.AlarmReceiver

Services

com.kingroot.kinguser.service.KingRootAppListService

Android Permissions

3816718a361552c31b9678c890b994ad_JaffaCakes118