529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

General

Target
529602c6a9c64891fe550594e90ba7d5_JaffaCakes118
Size 23.7MB
Sample240518-chb5ysfc24
SHA256 219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332
MD5 529602c6a9c64891fe550594e90ba7d5
SHA1 fd728f37e869ae86cbd7f3658e18889136e25b8a
SHA512 edf1991baf1928396fedd3b16e3bc71897791bc0c5df3ecef5897403e6e521426f1b57f6034b034ae97fac47836dcde21b87c228600aa1cfb236229e5c33547d
SSDEEP 393216:6vySCToyy8hU/2LfhChzXDjyJFmUs3P9mbmyliCEqH72c8Qdyb/A+XCYdv0b+gsn:bRsyy8hNLfu7Ursf9Qb2NzMiw+ZF+UK6
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

.apk 23.7MB
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

.apk 4.2MB
vivounionsdk.res

.apk 29KB

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

SHA256 219237027090c7e65373663fd7b0a1fdae0df45252f8147637c84095d84cf332
MD5 529602c6a9c64891fe550594e90ba7d5
SHA1 fd728f37e869ae86cbd7f3658e18889136e25b8a
SHA512 edf1991baf1928396fedd3b16e3bc71897791bc0c5df3ecef5897403e6e521426f1b57f6034b034ae97fac47836dcde21b87c228600aa1cfb236229e5c33547d
SSDEEP 393216:6vySCToyy8hU/2LfhChzXDjyJFmUs3P9mbmyliCEqH72c8Qdyb/A+XCYdv0b+gsn:bRsyy8hNLfu7Ursf9Qb2NzMiw+ZF+UK6
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xzx.bsqsp.vivo

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.vivo.sdkplugin

Android Permissions

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

Permissions

vivo.game.permission.OPEN_JUMP_INTENTS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

com.daqu.BallRacer.UnityPlayerActivity

com.daqu.MainActivity

com.vivo.unionsdk.ui.UnionActivity

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.sdkplugin.core.functions.permission.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.sdkplugin.core.compunctions.activity.UnionActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.bbk.account.oauth.activity.AuthorizeActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.sdkplugin.suspension.service.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

com.vivo.upgradelibrary.utils.FileProvider

vivounionsdk.res

com.vivo.unionsdk.ui.UnionActivity

Sharing

General

Malware Config

Signatures

File Explorer

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118

com.daqu.BallRacer.UnityPlayerActivity

com.daqu.MainActivity

com.vivo.unionsdk.ui.UnionActivity

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.sdkplugin.core.functions.permission.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.sdkplugin.core.compunctions.activity.UnionActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.bbk.account.oauth.activity.AuthorizeActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.sdkplugin.suspension.service.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

com.vivo.upgradelibrary.utils.FileProvider

vivounionsdk.res

com.vivo.unionsdk.ui.UnionActivity

Android Permissions

529602c6a9c64891fe550594e90ba7d5_JaffaCakes118