joker | 47330efd1cb848c1090019e79b56695c_JaffaCakes118

General

Target
47330efd1cb848c1090019e79b56695c_JaffaCakes118
Size 11.1MB
Sample240515-vs5jcsbd79
SHA256 bf41a428cdac921794a10b4e6fa97e4ea82a11f14a2c676355a06e2fa5b64d52
MD5 47330efd1cb848c1090019e79b56695c
SHA1 1b0b767f2fa33201123da6f6ef956b4ea08dd052
SHA512 578403890e0096281585cbb75eff9f8971a7c045265b18a8de563504605f41f30977c260387fed733222ca2a23e12e9435a1e9923fe47525f54aa996db75127e
SSDEEP 196608:TPKtkFCoVRm+HogTlALCXQOLdT6lUTcW2+4QLK/j9SA4DgFsf4+1PAwi:TGk0krH2L5CkUTcW2+4Q+/j8fkP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

joker

Malware Config

Signatures

Joker family
joker

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

47330efd1cb848c1090019e79b56695c_JaffaCakes118

.apk 11.1MB

47330efd1cb848c1090019e79b56695c_JaffaCakes118

SHA256 bf41a428cdac921794a10b4e6fa97e4ea82a11f14a2c676355a06e2fa5b64d52
MD5 47330efd1cb848c1090019e79b56695c
SHA1 1b0b767f2fa33201123da6f6ef956b4ea08dd052
SHA512 578403890e0096281585cbb75eff9f8971a7c045265b18a8de563504605f41f30977c260387fed733222ca2a23e12e9435a1e9923fe47525f54aa996db75127e
SSDEEP 196608:TPKtkFCoVRm+HogTlALCXQOLdT6lUTcW2+4QLK/j9SA4DgFsf4+1PAwi:TGk0krH2L5CkUTcW2+4Q+/j8fkP
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

cn.com.sxbid.app

android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.GET_TASKS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_CONTACTS android.permission.GET_TASKS android.permission.VIBRATE android.permission.READ_LOGS android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_CONTACTS android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.CAMERA android.permission.GET_ACCOUNTS android.permission.RECORD_AUDIO com.android.launcher.permission.INSTALL_SHORTCUT android.permission.MODIFY_AUDIO_SETTINGS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.CHANGE_WIFI_STATE android.permission.WAKE_LOCK android.permission.CALL_PHONE android.permission.FLASHLIGHT android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECEIVE_USER_PRESENT android.permission.WRITE_SETTINGS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.yulong.android.launcherL.permission.READ_SETTINGS com.meizu.flyme.launcher.permission.READ_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.qiku.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.zte.mifavor.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher3.READ_SETTINGS org.adw.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.lge.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.nd.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher.permission.READ_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.ztemt.launcher.permission.READ_SETTINGS cn.nubia.launcher.permission.READ_SETTINGS com.gionee.amisystem.permission.READ_SHORTCUT getui.permission.GetuiService.cn.com.sxbid.app

Android Permissions

47330efd1cb848c1090019e79b56695c_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

android.permission.GET_ACCOUNTS

android.permission.RECORD_AUDIO

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.yulong.android.launcher3.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

47330efd1cb848c1090019e79b56695c_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

cn.com.sxbid.app.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.WebviewActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.multiprocess.service.MultiProcessService

com.baidu.location.f

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

Sharing

General

Malware Config

Signatures

File Explorer

47330efd1cb848c1090019e79b56695c_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

cn.com.sxbid.app.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.WebviewActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.multiprocess.service.MultiProcessService

com.baidu.location.f

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

Android Permissions

47330efd1cb848c1090019e79b56695c_JaffaCakes118