52610838efa32adca4b7c848af3a4665_JaffaCakes118

General

Target
52610838efa32adca4b7c848af3a4665_JaffaCakes118
Size 17.0MB
Sample240518-bfhz2sce45
SHA256 e4ca8b1332fa508a7c6001728851ae53939ff0816066a062197fa79f04186f24
MD5 52610838efa32adca4b7c848af3a4665
SHA1 1b6ed1acc52cab13f24c7498f317ec3c5d57f87f
SHA512 29530c8ed9773a1076af7fe2a16b4c4fb2b16cd4c4ad2c3519bd7f04d2b086ad531a2df30fb40892a051ae29562d3781505a7d45d425abdee25f4f2d5ec70215
SSDEEP 393216:T/BDo31ukcdx1gyGjpWxqmeJE3DZrj+O0Vm7zL49k9o5DYosPH:T/BqokcXKyGjpWxqme+39n+tVm7X49m9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

52610838efa32adca4b7c848af3a4665_JaffaCakes118

.apk 17.0MB
AlipayMSP206_PPS3_V3.5.4.0619.apk

.apk 354KB

52610838efa32adca4b7c848af3a4665_JaffaCakes118

SHA256 e4ca8b1332fa508a7c6001728851ae53939ff0816066a062197fa79f04186f24
MD5 52610838efa32adca4b7c848af3a4665
SHA1 1b6ed1acc52cab13f24c7498f317ec3c5d57f87f
SHA512 29530c8ed9773a1076af7fe2a16b4c4fb2b16cd4c4ad2c3519bd7f04d2b086ad531a2df30fb40892a051ae29562d3781505a7d45d425abdee25f4f2d5ec70215
SSDEEP 393216:T/BDo31ukcdx1gyGjpWxqmeJE3DZrj+O0Vm7zL49k9o5DYosPH:T/BqokcXKyGjpWxqme+39n+tVm7X49m9
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips

tv.pps.mobile

android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.BROADCAST_STICKY android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.DISABLE_KEYGUARD android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.INTERNET android.permission.GET_TASKS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.CHANGE_CONFIGURATION android.permission.WRITE_SETTINGS android.permission.RECORD_AUDIO android.permission.CHANGE_NETWORK_STATE android.permission.RESTART_PACKAGES android.permission.READ_EXTERNAL_STORAGE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.CHANGE_WIFI_STATE android.permission.FLASHLIGHT android.permission.CHANGE_WIFI_STATE android.permission.READ_LOGS android.permission.READ_CONTACTS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS com.aspire.mm.permission.READ_SETTINGS com.aspire.mm.permission.WRITE_SETTINGS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.browser.permission.READ_HISTORY_BOOKMARKS android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.CALL_PHONE android.permission.ACCESS_FINE_LOCATION android.permission.BAIDU_LOCATION_SERVICE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_MOCK_LOCATION android.permission.ACCESS_GPS

.WelcomeActivity

android.intent.action.MAIN

com.google.ads.AdActivity

.framework.FrameFragmentActivity

android.intent.action.VIEW tv.pps.mobile.action.VEDIOSNIFFER

tv.pps.module.player.video.PPSVideoPlayerActivity

android.intent.action.VIEW android.intent.action.VIEW

tv.pps.module.iqiyiad.webview.PPSPlayerAdWebViewActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.html5webviewcore.HTML5WebViewTaobaoAD

tv.pps.mobile.wxapi.WXEntryActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

tv.pps.mobile.qrcode.util.SCAN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

tv.pps.vipmodule.vip.ui.VipGiftWebViewActivity

.greentail.GreenTailActivity

tv.pps.mobile.action.greentail

.gamecenter.utils.AppStatusReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED

.widget.WidgetProvider

tv.pps.mobile.action.widget.click.intoapp android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.currentimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.preimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.click.nextimage android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.action.widget.updateimage tv.pps.mobile.action.widget.restartservice

.widget.SearchWidget

tv.pps.mobile.widget.SearchWidget.SOURCE android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.INPUT android.appwidget.action.APPWIDGET_UPDATE tv.pps.mobile.widget.SearchWidget.SEARCH android.appwidget.action.APPWIDGET_UPDATE

tv.pps.bi.receiver.ScreenBroadcastReceiver

android.intent.action.USER_PRESENT android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE

tv.pps.bi.receiver.AlarmReceiver

tv.pps.alarmReceiver

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.action.MESSAGE com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.notification.CLICK

com.baidu.android.pushservice.PushServiceReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.pushservice.action.notification.SHOW com.baidu.android.pushservice.action.media.CLICK

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.METHOD com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

tv.pps.deliver.service.AlarmBroadcastReceiver

tv.pps.deliver.alarm

com.baidu.android.moplus.MoPlusReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE com.baidu.android.moplus.action.START com.baidu.android.pushservice.action.BIND_SYNC android.intent.action.PACKAGE_REMOVED

com.baidu.android.defense.push.PushMsgReceiver

com.baidu.android.pushservice.action.RECEIVE com.baidu.android.pushservice.action.MESSAGE

AlipayMSP206_PPS3_V3.5.4.0619.apk

SHA256 46f025d57f9aed1fb674c0fe8fc77add93cf00ea6e1633596955f33426be7688
MD5 12ae4560d8350db4bd6fa3bc1589614c
SHA1 dbbfce036a1823aaec9d1c7b621adbd7317f7fa9
SHA512 df7348142a8c294d0d7f7ce77795fd0f81f60831ca1831164e5060c900aa90af430b11f6972103a5c6307d81d8cdf095105a9ab3d01c2183d10d01910976c6fd
SSDEEP 6144:ipIlfloegHi/BBs3dWcfihtB7+Y3Ju4g29f5C8EcPK+WvyQcy2fn1E:ip2JgC/BBsNWfh3Vcc5CLE8Rcy2fn1E
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

52610838efa32adca4b7c848af3a4665_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

android.permission.RESTART_PACKAGES

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.READ_CONTACTS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.anddoes.launcher.permission.READ_SETTINGS

com.anddoes.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

52610838efa32adca4b7c848af3a4665_JaffaCakes118

.WelcomeActivity

com.google.ads.AdActivity

.framework.FrameFragmentActivity

tv.pps.module.player.video.PPSVideoPlayerActivity

tv.pps.module.iqiyiad.webview.PPSPlayerAdWebViewActivity

tv.pps.mobile.html5webviewcore.HTML5WebViewPlayer

tv.pps.mobile.html5webviewcore.HTML5WebViewTaobaoAD

tv.pps.mobile.wxapi.WXEntryActivity

.camera.LocalUploadActivity

.weather.WeatherActivity

.weather.WeatherCityActivity

.camera.UploadListActivity

.camera.VideoInfoActivity

.camera.EditVideoActivity

.camera.NewChannelActivity

.camera.WebViewActivity

.quickpass.QuickPassAcitivity

.quickpass.QuickPassHistoryAcitivity

.quickpass.QuickPassSendActivity

.quickpass.QuickPassReceiveActivity

.search.SearchBTWebViewActivity

.camera.CameraChannelActivity

tv.pps.mobile.qrcode.util.CaptureActivity

com.tencent.weibo.sdk.android.component.Authorize

tv.pps.vipmodule.MainActivity

tv.pps.vipmodule.alipay.ui.AliOrderPayActivity

tv.pps.vipmodule.alipay.ui.AliOrderIqyPayActivity

tv.pps.mobile.search.SearchBTListActivity

tv.pps.mobile.widget.SearchWidgetActivity

tv.pps.vipmodule.vip.ui.VipGiftWebViewActivity

.greentail.GreenTailActivity

org.openudid.OpenUDID_service

com.baidu.location.f

.gamecenter.download.DownloadService

tv.pps.module.download.impl.download.service.DownloadServiceImpl

.service.UpdateService

.service.CrashService

.service.DeliverService

.service.ApkDownService

.service.InitService

tv.pps.vipmodule.vip.utils.VipService

tv.pps.mobile.camera.CameraService

.widget.WidgetUpdateService

tv.pps.bi.service.ListenService

tv.pps.bi.proto.SAService

tv.pps.bi.pps.uploadlog.SendLogService

com.baidu.android.pushservice.PushService

com.umeng.common.ufp.net.DownloadingService

tv.pps.deliver.service.PPSDeliverService

com.baidu.android.moplus.MoPlusService

.gamecenter.utils.AppStatusReceiver

.widget.WidgetProvider

.widget.SearchWidget

tv.pps.bi.receiver.ScreenBroadcastReceiver

tv.pps.bi.receiver.AlarmReceiver

tv.pps.mobile.push.PushMessageReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

tv.pps.deliver.service.AlarmBroadcastReceiver

com.baidu.android.moplus.MoPlusReceiver

com.baidu.android.defense.push.PushMsgReceiver

AlipayMSP206_PPS3_V3.5.4.0619.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver