General

  • Target

    4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118

  • Size

    30.3MB

  • MD5

    4f855ba3a78d3bb7418f8587d09caaa7

  • SHA1

    1c330edfe5f25ee9975b9d39176618dcc7f1d88a

  • SHA256

    27a645a3db0a8a9fbd4bfcd7993dabf995b6eaf727976dbc1c66a18f252834de

  • SHA512

    9affb34b414ba19e524bf872b71977741e40059c20d43c2211424d60fb2ba5a0044d36b28c3557e8532079a91bfa52b189d49a09a0f6030c8829b725fdceb466

  • SSDEEP

    393216:Rf3pH6bgZNpBzuxUwJrt2rH0haR8moTmS3xLzt0Jd/hnaqiTCYFwGa4l523hd5y/:RRpZVzwwrUh6W1xchnhitFwGa4H8d5up

Score
10/10

Malware Config

Extracted

Family

joker

C2

http://114.215.185.233:8079/

https://mobilegw.alipay.com/mgw.htm

Signatures

  • Joker family
  • Requests dangerous framework permissions 9 IoCs

Files

  • 4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118
    .apk android arch:arm arch:mips arch:x86

    com.happyteam.dubbingshow

    com.happyteam.dubbingshow.ui.StartActivity


  • CommonPlugin-3.3.apk
    .apk android

    com.taobao.munion.plugin.cm

    com.taobao.newxp.view.UMDetail


  • FrameworkPlugin-3.0.apk
    .apk android

    com.example.bizplugin


  • WelcomePlugin-2.3.apk
    .apk android

    com.alimama.mobile.sdk.welcome


  • dynamic1120.jar
    .apk android
  • gdtadv2.jar
    .apk android

Android Permissions

4f855ba3a78d3bb7418f8587d09caaa7_JaffaCakes118

Permissions

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.ACCESS_WIFI_STATE

getui.permission.GetuiService.com.happyteam.dubbingshow

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.CAMERA

android.permission.ACCESS_COARSE_UPDATES

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_CONFIGURATION

android.permission.SYSTEM_ALERT_WINDOW