49e4879361e4eed337c59a614f02a3ab_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

49e4879361e4eed337c59a614f02a3ab_JaffaCakes118
Size

1.7MB
MD5

49e4879361e4eed337c59a614f02a3ab
SHA1

6b912378913f2d69ec969cd0c900d463f369cc2e
SHA256

a63181c18434a96bcceca145f9e3322c483e8f8d597839418174dac0dfe84f39
SHA512

6a978132ac960b707bd172f1c8b281267591b0f3d3e1eb07d6d8a0b43d8b2474a226d21b023a64b6855e940b62d096ca0903879c6cc5fbac1dda17c182023d5c
SSDEEP

24576:gUj0Lm17lX6IsoyeZVeFeIXO5VQTpvXed5q/tBhTwAFjwtbReb2rNuL4uIw/Xd:BQLu1sdgVepeqAdc1HTwANsEb249l

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

49e4879361e4eed337c59a614f02a3ab_JaffaCakes118
.apk android arch:arm

com.maple.iqtest.activitycsas

.StartActivity

Activities

.StartActivity

android.intent.action.MAIN

com.ljlj.aabbcc.sttts.FYWActivity

android.intent.action.CREATE_SHORTCUT

com.hzhz.aabbcc.jkkkj.Sora

android.intent.action.CREATE_SHORTCUT

com.mini.loader.MiniMarket

android.intent.action.CREATE_SHORTCUT
android.intent.action.DELETE

Permissions

android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RESTART_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.VIBRATE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED

Receivers

com.kgkg.aabbcc.sttts.MyReceiver

android.intent.action.NEW_OUTGOING_CALL
android.intent.action.PHONE_STATE
android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.ljlj.aabbcc.sttts.FYKReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.hzhz.aabbcc.sttts.Pdr

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.vgvg.aabbcc.sttts.VTSReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.dgdg.aabbcc.sttts.logic.DgpBr

android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.hzhz.aabbcc.pcccp.Cefr

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.hzhz.aabbcc.jkkkj.Sorr

android.intent.action.PACKAGE_ADDED
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE

com.vgvg.aabbcc.ccccc.VCCReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.vgvg.aabbcc.pcccp.VCPReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.n.b.r

android.intent.action.USER_PRESENT
com.lseiei.downloadManager
android.intent.action.PACKAGE_ADDED

com.kgkg.aabbcc.zkkkz.MyKReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

com.hzhz.aabbcc.lbbbl.Bonr

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.mini.loader.MiniReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.appspop.Receiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.appsbanner.Receiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.appspresent.Receiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_INSTALL
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services
Duoguo.png
.apk android
apps_banner.jar
.apk android
apps_pop.jar
.apk android
apps_present.jar
.apk android

Android Permissions

49e4879361e4eed337c59a614f02a3ab_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

Sharing

General

Malware Config

Signatures

Files

com.maple.iqtest.activitycsas

.StartActivity

Activities

.StartActivity

com.ljlj.aabbcc.sttts.FYWActivity

com.hzhz.aabbcc.jkkkj.Sora

com.mini.loader.MiniMarket

Permissions

Receivers

com.kgkg.aabbcc.sttts.MyReceiver

com.ljlj.aabbcc.sttts.FYKReceiver

com.hzhz.aabbcc.sttts.Pdr

com.vgvg.aabbcc.sttts.VTSReceiver

com.dgdg.aabbcc.sttts.logic.DgpBr

com.hzhz.aabbcc.pcccp.Cefr

com.hzhz.aabbcc.jkkkj.Sorr

com.vgvg.aabbcc.ccccc.VCCReceiver

com.vgvg.aabbcc.pcccp.VCPReceiver

com.n.b.r

com.kgkg.aabbcc.zkkkz.MyKReceiver

com.hzhz.aabbcc.lbbbl.Bonr

com.mini.loader.MiniReceiver

com.appspop.Receiver

com.appsbanner.Receiver

com.appspresent.Receiver

Services

Android Permissions

49e4879361e4eed337c59a614f02a3ab_JaffaCakes118