4abf8e618f5ef540c92c0a7fc28d2cd1_JaffaCakes118

General

Target

4abf8e618f5ef540c92c0a7fc28d2cd1_JaffaCakes118
Size

27.2MB
MD5

4abf8e618f5ef540c92c0a7fc28d2cd1
SHA1

334b5bfed5a4ff10762023dfa366e3288c116809
SHA256

97fce6442aca5b611e42cebb92da7344f1de8e5c80ad059c1b381a8b62daf666
SHA512

4c0eb228dc6aa871cc5b2a14267aea91c18729c339b0b0ef96a26d8be7bb65135d93179f2d5db7794291d613d14f7441ed61f4d07653f8a34d6e722baabb2109
SSDEEP

393216:LSQwbycj9T2NwDAEJw1CsXx/vHMt+iSSMuy7xzxugtw05D2V7aGhNlASE:+ZAwhJwUsXx/v++6Dm/ugX5wRhNlo

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

4abf8e618f5ef540c92c0a7fc28d2cd1_JaffaCakes118
.apk android arch:arm

com.xiaomi.youpin.tuishou

com.xiaomi.youpin.tuishou.activity.SplashActivity

Activities

com.xiaomi.youpin.tuishou.activity.SplashActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.xiaomi.mishopsdk.SDKActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.xiaomi.mishopsdk.plugin.PluginRootActivity

android.intent.action.VIEW
com.xiaomi.mishopsdk.pluginRoot
com.xiaomi.mishopsdk.pluginRoot

com.xiaomi.mishopsdk.plugin.PluginChildActivity

android.intent.action.VIEW
com.xiaomi.mishopsdk.pluginChild

com.xiaomi.mishopsdk.MainActivity

android.intent.action.VIEW
com.xiaomi.mishopsdk.mainActivity

com.xiaomi.jr.verification.SystemGuideActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.share.WbShareToStoryActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_STORY

Permissions

android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.USE_CREDENTIALS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
com.xiaomi.channel.GAME_SERVICE_PERMISSION
android.permission.READ_LOGS
android.permission.REQUEST_INSTALL_PACKAGES
com.xiaomi.youpin.tuishou.permission.MIPUSH_RECEIVE
android.permission.WAKE_LOCK
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.MANAGE_ACCOUNTS
com.xiaomi.permission.CLOUD_MANAGER
android.permission.CAMERA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_CONTACTS
android.permission.READ_CALL_LOG
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.READ_CALENDAR
android.permission.WRITE_CALENDAR
android.permission.USE_FINGERPRINT
android.permission.WRITE_SETTINGS
android.permission.NFC
android.permission.READ_SYNC_STATS
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.FLASHLIGHT
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.xiaomi.xmsf.permission.PAYMENT
android.permission.BROADCAST_STICKY
android.permission.ACCESS_FIND_LOCATION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.INTERACT_ACROSS_USERS
android.permission.TRANSMIT_IR
android.permission.INTERACT_ACROSS_USERS_FULL
org.simalliance.openmobileapi.SMARTCARD
android.permission.BATTERY_STATS
android.permission.ACCESS_COARSE_UPDATES
android.permission.SYSTEM_ALERT_WINDOW
com.xiaomi.passport.permission.PASSPORT_UI_CONTROLLER_SERVICE

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.xiaomi.youpin.tuishou.push.YouPinPushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.jr.common.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

bindingx
binding
expressionBinding

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.accounts.AccountAuthenticator
customer_service-2-2.0-release.apk
.apk android

com.xiaomi.cs
profile-5-4.1-release.apk
.apk android

com.xiaomi.profile

Android Permissions

4abf8e618f5ef540c92c0a7fc28d2cd1_JaffaCakes118

Permissions

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.USE_CREDENTIALS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

com.xiaomi.channel.GAME_SERVICE_PERMISSION

android.permission.READ_LOGS

android.permission.REQUEST_INSTALL_PACKAGES

com.xiaomi.youpin.tuishou.permission.MIPUSH_RECEIVE

android.permission.WAKE_LOCK

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.MANAGE_ACCOUNTS

com.xiaomi.permission.CLOUD_MANAGER

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.USE_FINGERPRINT

android.permission.WRITE_SETTINGS

android.permission.NFC

android.permission.READ_SYNC_STATS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.FLASHLIGHT

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.xiaomi.xmsf.permission.PAYMENT

android.permission.BROADCAST_STICKY

android.permission.ACCESS_FIND_LOCATION

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.INTERACT_ACROSS_USERS

android.permission.TRANSMIT_IR

android.permission.INTERACT_ACROSS_USERS_FULL

Sharing

General

Malware Config

Signatures

Files

com.xiaomi.youpin.tuishou

com.xiaomi.youpin.tuishou.activity.SplashActivity

Activities

com.xiaomi.youpin.tuishou.activity.SplashActivity

com.xiaomi.mishopsdk.SDKActivity

com.xiaomi.mishopsdk.plugin.PluginRootActivity

com.xiaomi.mishopsdk.plugin.PluginChildActivity

com.xiaomi.mishopsdk.MainActivity

com.xiaomi.jr.verification.SystemGuideActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

Permissions

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.youpin.tuishou.push.YouPinPushMessageReceiver

com.xiaomi.jr.common.NetworkStatusReceiver

Services

com.alibaba.android.bindingx.plugin.weex.WXBindingXModuleService

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.cs

com.xiaomi.profile

Android Permissions

4abf8e618f5ef540c92c0a7fc28d2cd1_JaffaCakes118