39e6d43098625519e3d4f629c62d0797_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

39e6d43098625519e3d4f629c62d0797_JaffaCakes118
Size

22.8MB
MD5

39e6d43098625519e3d4f629c62d0797
SHA1

30d54b47995cd23ba13e7dbfb912cd9b571152f2
SHA256

28af525dd0127de20d3d6075881ca71457488e1717e074f130ba7d32196f6495
SHA512

3a17f3ba430fd0fc1f28d749a7527afafba8f058b84a521619e6b2147ebc7a02800419a7f1d22521eb46c09d429942fcb5586932a36557e9eabedc428a81e3e9
SSDEEP

393216:CZrQ1FJtOWJaYqD/LppzCa65inBujz7nd4B79ov0WQ6dryJMl9gpo4z9ASygcjpR:urQ1FJte/dpea65wBevnIpFWQuyJMXwG

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

39e6d43098625519e3d4f629c62d0797_JaffaCakes118
.apk android arch:arm

com.mymoney.sms

com.mymoney.sms.ui.SplashActivity

Activities

com.mymoney.sms.ui.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.mymoney.sms.ui.forum.CardNiuForumDetailSchemeActivity

android.intent.action.VIEW

com.mymoney.sms.ui.main.CreateShortcutActivity

android.intent.action.CREATE_SHORTCUT

com.mymoney.sms.ui.socialshare.SinaEntryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.mymoney.sms.ui.main.MainActivity

com.mymoney.sms.action.IMPORT_EBANK
com.mymoney.sms.action.IMPORT_EMAIL
com.mymoney.sms.action.REFRESH_DATASOURCE

com.mymoney.sms.ui.navigate.NavigateJumpActivity

com.mymoney.sms.intent.action.PUSH

com.huawei.android.pushselfshow.richpush.RichPushActivity

com.huawei.android.push.intent.RICHPUSH

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.mymoney.sms
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.VIBRATE
getui.permission.GetuiService.com.mymoney.sms
com.mymoney.sms.permission.MIPUSH_RECEIVE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CAMERA
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MANAGE_DOCUMENTS
com.xiaomi.permission.AUTH_SERVICE
android.permission.GET_ACCOUNTS
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE

Receivers

com.mymoney.sms.receiver.SmsInterceptorReceiver

android.provider.Telephony.SMS_DELIVER
android.provider.Telephony.GET_SMSC
android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_RECEIVED2
android.provider.Telephony.GSM_SMS_RECEIVED
android.provider.Telephony.CMDA_SMS_RECEIVED

com.mymoney.sms.receiver.CoreBroadcastReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.net.conn.CONNECTIVITY_CHANGE
com.mymoney.sms.action.APP_BOOT_COMPLETED
com.mymoney.sms.core.self.Restart

com.mymoney.sms.receiver.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.mymoney.sms.receiver.MondayUpgradeRemindBroadcastReceiver

com.mymoney.sms.action.UPGRADE_REMIND

com.mymoney.sms.receiver.EbankImportGetCacheDataRemindBroadcastReceiver

com.mymoney.sms.action.GET_CACHE_DATA_REMIND

com.mymoney.sms.receiver.NotificationDeleteReceiver

com.mymoney.sms.action.NOTIFICATION_DELETE

com.mymoney.sms.push.receiver.GeTuiPushReceiver

com.igexin.sdk.action.dtwykizSZO7NqYhtvnCFC

com.mymoney.sms.receiver.TimeChangeBroadcastReceiver

android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED
android.intent.action.TIMEZONE_CHANGED

com.eguan.monitor.receiver.SystemStartReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

com.mymoney.sms.push.receiver.XiaoMiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.mymoney.sms.push.receiver.HuaweiPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE
com.huawei.android.push.plugin.RESPONSE

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL
com.huawei.intent.action.PUSH
com.huawei.intent.action.PUSH_ON
com.huawei.android.push.PLUGIN
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.huawei.android.pushagent.PushBootReceiver

com.huawei.android.push.intent.REGISTER
android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls
android.intent.action.MEDIA_MOUNTED
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.dtwykizSZO7NqYhtvnCFC

com.dx168.patchsdk.DebugReceiver

com.dx168.patchsdk.DebugReceiver.APPLY_PATCH
com.dx168.patchsdk.DebugReceiver.RESTART

Services

com.mymoney.core.download.DownloadService

com.mymoney.sms.core.download.IDownloadService

com.mymoney.core.web.SmsUploadService

com.mymoney.sms.core.web.SmsUploadServiceType

com.mymoney.sms.service.CardNiuSdkService

com.cardniu.sdk.openapi.action.cardniusdkservice

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.cardniu.app.alipay.newlog.EbankReportLogService

com.mymoney.sms.send.intent.EbankReportLogService
com.cardniu.app.alipay.apk
.apk android

com.cardniu.app.alipay

com.cardniu.app.alipay.TaobaoLoginActivity

Activities

Permissions

android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.cardniu.app.loan.apk
.apk android

com.cardniu.app.loan

com.cardniu.app.loan.ui.LoanPluginRouteActivity

Activities

com.cardniu.app.loan.ui.LoanPluginRouteActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
com.cardniu.lib.common.apk
.apk android

com.cardniu.lib.common

Android Permissions

39e6d43098625519e3d4f629c62d0797_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.mymoney.sms

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.VIBRATE

getui.permission.GetuiService.com.mymoney.sms

com.mymoney.sms.permission.MIPUSH_RECEIVE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CAMERA

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MANAGE_DOCUMENTS

com.xiaomi.permission.AUTH_SERVICE

android.permission.GET_ACCOUNTS

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

Files

com.mymoney.sms

com.mymoney.sms.ui.SplashActivity

Activities

com.mymoney.sms.ui.SplashActivity

com.mymoney.sms.ui.forum.CardNiuForumDetailSchemeActivity

com.mymoney.sms.ui.main.CreateShortcutActivity

com.mymoney.sms.ui.socialshare.SinaEntryActivity

com.tencent.tauth.AuthActivity

com.mymoney.sms.ui.main.MainActivity

com.mymoney.sms.ui.navigate.NavigateJumpActivity

com.huawei.android.pushselfshow.richpush.RichPushActivity

Permissions

Receivers

com.mymoney.sms.receiver.SmsInterceptorReceiver

com.mymoney.sms.receiver.CoreBroadcastReceiver

com.mymoney.sms.receiver.NetworkChangeReceiver

com.mymoney.sms.receiver.MondayUpgradeRemindBroadcastReceiver

com.mymoney.sms.receiver.EbankImportGetCacheDataRemindBroadcastReceiver

com.mymoney.sms.receiver.NotificationDeleteReceiver

com.mymoney.sms.push.receiver.GeTuiPushReceiver

com.mymoney.sms.receiver.TimeChangeBroadcastReceiver

com.eguan.monitor.receiver.SystemStartReceiver

com.mymoney.sms.push.receiver.XiaoMiPushReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.mymoney.sms.push.receiver.HuaweiPushReceiver

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.pushagent.PushBootReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

com.dx168.patchsdk.DebugReceiver

Services

com.mymoney.core.download.DownloadService

com.mymoney.core.web.SmsUploadService

com.mymoney.sms.service.CardNiuSdkService

com.igexin.sdk.PushService

com.cardniu.app.alipay.newlog.EbankReportLogService

com.cardniu.app.alipay

com.cardniu.app.alipay.TaobaoLoginActivity

Activities

Permissions

com.cardniu.app.loan

com.cardniu.app.loan.ui.LoanPluginRouteActivity

Activities

com.cardniu.app.loan.ui.LoanPluginRouteActivity

Permissions

com.cardniu.lib.common

Android Permissions

39e6d43098625519e3d4f629c62d0797_JaffaCakes118