3f40f4c863620c384c3cb91ac54dce03_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f40f4c863620c384c3cb91ac54dce03_JaffaCakes118
Size

15.6MB
MD5

3f40f4c863620c384c3cb91ac54dce03
SHA1

1e93aadd1dda64ed8f28bdeaa2c151eedfa0ef41
SHA256

d2ff920982d4a0d1383f96fc60283fcb93bdd32679bed970361684ed22e3502f
SHA512

876ba0a7ae910522f52dec617a1cd8b808ecae768243dfe43e96c735a7ddc0a9756f1ad39bd5084f0f7a276e60803732e1dcdde13a510f20f190ba430db335b9
SSDEEP

393216:0NOYXXYc/puMgi0WSx0un3n7LfuqYXXY2IrosxdDBQaXn7AeQ1:0NOYYf/RtP7fYY2IpTQg72

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

3f40f4c863620c384c3cb91ac54dce03_JaffaCakes118
.apk android

com.tpad.change.unlock.content.chen2wei3ting2

.FunlockerContent

Activities

.FunlockerContent

android.intent.action.MAIN

Permissions

android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE

Receivers

.InstallListener

android.intent.action.PACKAGE_ADDED
Funlocker.apk
.apk android arch:arm arch:x86

com.change.unlock

com.change.unlock.FunlockerClientPull

Activities

com.change.unlock.FunlockerClientPull

android.intent.action.MAIN

com.tpadsz.lockview.UXLock

android.intent.action.MAIN

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW
android.intent.action.VIEW

Permissions

android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.SET_WALLPAPER_HINTS
android.permission.SET_WALLPAPER
android.permission.RESTART_PACKAGES
android.permission.EXPAND_STATUS_BAR
android.permission.DISABLE_KEYGUARD
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_LOGS
android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.REORDER_TASKS
android.permission.RECORD_AUDIO
android.permission.WAKE_LOCK
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.BROADCAST_STICKY
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.intent.category.HOME
android.permission.RUN_INSTRUMENTATION
android.permission.CHANGE_CONFIGURATION
android.permission.UPDATE_DEVICE_STATS
android.permission.WRITE_APN_SETTINGS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_UPDATES

Receivers

com.change.unlock.InstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_REPLACED

com.change.unlock.StartUpBroadcast

android.intent.action.BOOT_COMPLETED
android.media.AUDIO_BECOMING_NOISY
android.intent.action.USER_PRESENT
android.intent.action.SIM_STATE_CHANGED
android.intent.action.BATTERY_CHANGED
android.intent.action.MEDIA_MOUNTED
android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.STATE_CHANGE

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.change.unlock.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

jone.download.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.baidu.appx.app_download.CompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED
android.intent.action.PACKAGE_ADDED

Services

com.change.unlock.service.TTCService

com.change.unlock.service.aidl

com.change.unlock.service.AutoDownloadDataService

action.service.AUTO_DOWNLOAD_CPA

com.change.unlock.service.DownloadCompleteService

jone.service.action.DOWNLOAD_COMPLETE

com.umeng.message.UmengService

com.change.unlock.intent.action.START
com.change.unlock.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.change.unlock.service.HttpJsonService

com.change.unlock.httpjsonservice.action
ONEKEY
.apk android

com.change.onekeylock

.OneLock

Activities

.OneLock

android.intent.action.MAIN

Permissions

com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.BIND_DEVICE_ADMIN

Receivers

.UninstallReceiver

android.intent.action.PACKAGE_REMOVED

.AdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED
gdtad.jar
.apk android

Android Permissions

3f40f4c863620c384c3cb91ac54dce03_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

Sharing

General

Malware Config

Signatures

Files

com.tpad.change.unlock.content.chen2wei3ting2

.FunlockerContent

Activities

.FunlockerContent

Permissions

Receivers

.InstallListener

com.change.unlock

com.change.unlock.FunlockerClientPull

Activities

com.change.unlock.FunlockerClientPull

com.tpadsz.lockview.UXLock

cn.sharesdk.framework.ShareSDKUIShell

Permissions

Receivers

com.change.unlock.InstallReceiver

com.change.unlock.StartUpBroadcast

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

jone.download.DownloadCompleteReceiver

com.baidu.appx.app_download.CompleteReceiver

Services

com.change.unlock.service.TTCService

com.change.unlock.service.AutoDownloadDataService

com.change.unlock.service.DownloadCompleteService

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.change.unlock.service.HttpJsonService

com.change.onekeylock

.OneLock

Activities

.OneLock

Permissions

Receivers

.UninstallReceiver

.AdminReceiver

Android Permissions

3f40f4c863620c384c3cb91ac54dce03_JaffaCakes118