Overview

overview

8

Static

static

6

4e632c1fcc...18.apk

android-9-x86

8

yqwb.apk

android-9-x86

8

yqwb.apk

android-13-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e632c1fcc6e350803819ce9d8a89f6a_JaffaCakes118

  • Size

    12.9MB

  • MD5

    4e632c1fcc6e350803819ce9d8a89f6a

  • SHA1

    9cbc498888352c2551516945372a4ab4032d53d1

  • SHA256

    4a428ed88f89eb173007d095ac1d2bc49c63703e48c0c623ec67120a94ddea7b

  • SHA512

    530623b8bedf79b966ddd3d65e04120f71022278e2d889e98de583d73fe81f4486e2bfa2844e4315ec89757488bca4562871ac8c3f152cd281d4b7509688cb54

  • SSDEEP

    393216:YA8o01u9d0mTldLNHuoeP12+QLoKolipbx:Bv0yd0mPTA73lipt

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 4e632c1fcc6e350803819ce9d8a89f6a_JaffaCakes118
    .apk android arch:arm

    com.yuetu.shentu.yqwb

    com.yuetu.shentu.ui.activity.LogoActivity


  • yqwb.apk
    .apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

    com.yqwb.agentapp

    com.yqwb.agentapp.main.SplashActivity


Android Permissions

4e632c1fcc6e350803819ce9d8a89f6a_JaffaCakes118

Permissions

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_SMS

android.permission.WAKE_LOCK

android.permission.SET_DEBUG_APP

android.permission.RECORD_AUDIO

android.permission.BLUETOOTH