3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118
Size 19.7MB
Sample240513-zfl9gade63
SHA256 079170d430ac4eb3899d1ebe4734742de6e6264aed76ca3392dba61c0df599f4
MD5 3c7c2cce9212a01e13f9427898ac8edc
SHA1 b1f607dd0dca0517238302a77ec39741663b64ab
SHA512 e1b713a5b0226895069933faac5e13466dfc26cebd07d8e1a04791eac4c43c977f5e1118f1ea7d64ff978c81ae6ed5cad513b0a8c4de004e3036b254d5b2cfae
SSDEEP 393216:cvlRtc7BoYFse/u7Ed7FT2khjbfyh0TXeQ+TWwGDRoY6j8d9M6h3pBWfBm99aNPd:qXtc7By80EBh/wOJuWZ76j8hXsg9M
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118

.apk 19.7MB

3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118

SHA256 079170d430ac4eb3899d1ebe4734742de6e6264aed76ca3392dba61c0df599f4
MD5 3c7c2cce9212a01e13f9427898ac8edc
SHA1 b1f607dd0dca0517238302a77ec39741663b64ab
SHA512 e1b713a5b0226895069933faac5e13466dfc26cebd07d8e1a04791eac4c43c977f5e1118f1ea7d64ff978c81ae6ed5cad513b0a8c4de004e3036b254d5b2cfae
SSDEEP 393216:cvlRtc7BoYFse/u7Ed7FT2khjbfyh0TXeQ+TWwGDRoY6j8d9M6h3pBWfBm99aNPd:qXtc7By80EBh/wOJuWZ76j8hXsg9M
MD5 SHA1 SHA512 SSDEEP

android arch:arm

net.koo

com.widget.KooMainActivity

com.widget.KooVideoFullSActivity

com.widget.KooWhiteBFullSActivity

com.widget.KooQuestionSelectActivity

com.widget.KooVodMainActivity

com.widget.KooVodVideoFullSActivity

com.widget.KooVodWhiteBFullSActivity

net.koo.ui.ActivitySplash

android.intent.action.MAIN

net.koo.ui.ActivityMyLive

net.koo.ui.ActivityLogin

net.koo.ui.ActivityMain

net.koo.ui.ActivityAbout

net.koo.ui.ActivityFeedback

net.koo.ui.ActivityAccountSecurity

com.soooner.EplayerPluginLibary.EplayerPluginActivity

com.soooner.EplayerPluginLibary.EplayerPluginPadActivity

net.koo.ui.ActivityUpdate

cn.jpush.android.ui.PushActivity

net.koo.ui.ActivityMyFav

net.koo.ui.ActivityRegister

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

net.koo.wxapi.WXPayEntryActivity

net.koo.wxapi.WXEntryActivity

com.koo.snslib.wxapi.WXEntryActivity

net.koo.ui.ActivityDetailShare

net.koo.ui.ActivityForceUpdate

net.koo.ui.ActivityTodayLive

net.koo.ui.ActivitySearchCourse

net.koo.ui.ActivityAllCategory

net.koo.ui.ActivityCourseInformation

android.intent.action.VIEW

net.koo.ui.ActivityTeacherList

net.koo.ui.ActivityCombination

net.koo.ui.ActivityMyCoupon

net.koo.ui.ActivityPay

net.koo.ui.ActivityPersonalSetting

net.koo.ui.ActivityAllOrder

net.koo.ui.ActivityRealName

net.koo.ui.ActivityReviseSex

net.koo.ui.ActivityMyAddress

net.koo.ui.ActivityMessage

net.koo.ui.ActivityRetrieveFirst

net.koo.ui.ActivityUserAgree

net.koo.ui.ActivityBuyResult

net.koo.ui.ActivityBinding

net.koo.ui.ActivityBindMessage

net.koo.ui.ActivityVipCourse

net.koo.ui.ActivityVipDetail

net.koo.ui.ActivityVipSearch

net.koo.ui.ActivityMyVip

net.koo.ui.ActivityBuyVipShow

net.koo.ui.ActivityBuyVipConfirm

net.koo.ui.ActivityMyAudition

net.koo.ui.ActivityAudition

net.koo.ui.ActivityMyCart

net.koo.ui.ActivityOrderAffirm

net.koo.ui.ActivitySelectCoupon

net.koo.ui.ActivityTest

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

Android Permissions

3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

net.koo.permission.JPUSH_MESSAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_OWNER_DATA

android.permission.READ_LOGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.BATTERY_STATS

Sharing

General

Malware Config

Signatures

File Explorer

3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118

com.widget.KooMainActivity

com.widget.KooVideoFullSActivity

com.widget.KooWhiteBFullSActivity

com.widget.KooQuestionSelectActivity

com.widget.KooVodMainActivity

com.widget.KooVodVideoFullSActivity

com.widget.KooVodWhiteBFullSActivity

net.koo.ui.ActivitySplash

net.koo.ui.ActivityMyLive

net.koo.ui.ActivityLogin

net.koo.ui.ActivityMain

net.koo.ui.ActivityAbout

net.koo.ui.ActivityFeedback

net.koo.ui.ActivityAccountSecurity

com.soooner.EplayerPluginLibary.EplayerPluginActivity

com.soooner.EplayerPluginLibary.EplayerPluginPadActivity

net.koo.ui.ActivityUpdate

cn.jpush.android.ui.PushActivity

net.koo.ui.ActivityMyFav

net.koo.ui.ActivityRegister

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

net.koo.wxapi.WXPayEntryActivity

net.koo.wxapi.WXEntryActivity

com.koo.snslib.wxapi.WXEntryActivity

net.koo.ui.ActivityDetailShare

net.koo.ui.ActivityForceUpdate

net.koo.ui.ActivityTodayLive

net.koo.ui.ActivitySearchCourse

net.koo.ui.ActivityAllCategory

net.koo.ui.ActivityCourseInformation

net.koo.ui.ActivityTeacherList

net.koo.ui.ActivityCombination

net.koo.ui.ActivityMyCoupon

net.koo.ui.ActivityPay

net.koo.ui.ActivityPersonalSetting

net.koo.ui.ActivityAllOrder

net.koo.ui.ActivityRealName

net.koo.ui.ActivityReviseSex

net.koo.ui.ActivityMyAddress

net.koo.ui.ActivityMessage

net.koo.ui.ActivityRetrieveFirst

net.koo.ui.ActivityUserAgree

net.koo.ui.ActivityBuyResult

net.koo.ui.ActivityBinding

net.koo.ui.ActivityBindMessage

net.koo.ui.ActivityVipCourse

net.koo.ui.ActivityVipDetail

net.koo.ui.ActivityVipSearch

net.koo.ui.ActivityMyVip

net.koo.ui.ActivityBuyVipShow

net.koo.ui.ActivityBuyVipConfirm

net.koo.ui.ActivityMyAudition

net.koo.ui.ActivityAudition

net.koo.ui.ActivityMyCart

net.koo.ui.ActivityOrderAffirm

net.koo.ui.ActivitySelectCoupon

net.koo.ui.ActivityTest

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.rtmp.rtmptclient.AppRtmptServer

com.rtmp.rtmptclient.PlayBackRtmptServer

net.koo.service.UpdateService

cn.jpush.android.service.PushService

cn.jpush.android.service.DownloadService

net.koo.receiver.UpdateReceiver

net.koo.service.AppUpgradeService$InstallBroadcastReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

net.koo.receiver.PushReceiver

Android Permissions

3c7c2cce9212a01e13f9427898ac8edc_JaffaCakes118