43d93d57dec63649f2b44d9cc3cf91da_JaffaCakes118

General

Target

43d93d57dec63649f2b44d9cc3cf91da_JaffaCakes118
Size

7.6MB
MD5

43d93d57dec63649f2b44d9cc3cf91da
SHA1

e0f18e662363dd7293c7d2bef4c4cd448b09f326
SHA256

586e226b6bdbb9b53af22e01441d629b291f9849b943074017cde94545beb13a
SHA512

593654943e56c62ffda437d3e6d510d98983b0f78e8e4d955dc399401fc8be8e33c5336a00fe273c73b1d7836a4307694a4788f325708802799714c79f253e39
SSDEEP

196608:atfdkNrIgRoO3gMIoUy6jeJ+3e8hK0dVW5ndWf8a0NYY4bvJFS/OLiPH9:cfEsoB6W+3xhFdYWPO0LLLUH9

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

43d93d57dec63649f2b44d9cc3cf91da_JaffaCakes118
.apk android arch:arm64 arch:arm arch:x86 arch:x64

com.zstime.lanzooms3

com.zstime.lanzooms3.view.mian.activity.SplashActivity

Activities

com.zstime.lanzooms3.view.mian.activity.SplashActivity

android.intent.action.MAIN

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

Permissions

android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.WRITE_APN_SETTINGS
android.permission.MODIFY_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.READ_CALL_LOG
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CALL_PHONE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.SYSTEM_ALERT_WINDOW
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.NFC
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.SET_TIME_ZONE
android.permission.VIBRATE
android.permission.DISABLE_KEYGUARD
android.permission.GET_TASKS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.WRITE_SETTINGS
android.permission.INTERACT_ACROSS_USERS_FULL

Services

com.zstime.lanzooms3.helper.NotificationBleService

android.service.notification.NotificationListenerService

com.zstime.lanzooms3.helper.BleService

com.zstime.abart.helper.BleService

Android Permissions

43d93d57dec63649f2b44d9cc3cf91da_JaffaCakes118

Permissions

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.WRITE_APN_SETTINGS

android.permission.MODIFY_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.READ_CALL_LOG

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.NFC

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.SET_TIME_ZONE

android.permission.VIBRATE

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

Sharing

General

Malware Config

Signatures

Files

com.zstime.lanzooms3

com.zstime.lanzooms3.view.mian.activity.SplashActivity

Activities

com.zstime.lanzooms3.view.mian.activity.SplashActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.umeng.qq.tencent.AuthActivity

Permissions

Services

com.zstime.lanzooms3.helper.NotificationBleService

com.zstime.lanzooms3.helper.BleService

Android Permissions

43d93d57dec63649f2b44d9cc3cf91da_JaffaCakes118