53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

General

Target
53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118
Size 23.7MB
Sample240518-jqlspaae3w
SHA256 fe42b94ac9b37f9b23b9b994eeee836763007649bdb31f6c24d704b8b00d9cd3
MD5 53b18d857f6f5a90091fa86e6d31904f
SHA1 57a5b57ecb57a102f61271cb8f3f8f24f03eb420
SHA512 40d5128e84ba67e1b09047fed18a0d4270f8f09655c033934a3a3cb7963c8048eb862f39ef43e08dbabf54e0e5cee78375edd7f40e0cc4ed1729166e7dd63107
SSDEEP 393216:BWUDWVqgLDNbjcuKsYnqAjX1GyYVTWm0M57zzU/2RCPpshAEBHxV7fpG4c8XljzM:DaAsYqAjlGyWP5nE2RYE37XdFQ4S7K+
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

.apk 23.7MB
com.alipay.android.app.apk

.apk 807KB

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

SHA256 fe42b94ac9b37f9b23b9b994eeee836763007649bdb31f6c24d704b8b00d9cd3
MD5 53b18d857f6f5a90091fa86e6d31904f
SHA1 57a5b57ecb57a102f61271cb8f3f8f24f03eb420
SHA512 40d5128e84ba67e1b09047fed18a0d4270f8f09655c033934a3a3cb7963c8048eb862f39ef43e08dbabf54e0e5cee78375edd7f40e0cc4ed1729166e7dd63107
SSDEEP 393216:BWUDWVqgLDNbjcuKsYnqAjX1GyYVTWm0M57zzU/2RCPpshAEBHxV7fpG4c8XljzM:DaAsYqAjlGyWP5nE2RYE37XdFQ4S7K+
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.kiloo.subwaysurf

com.alipay.android.app.apk

SHA256 2e5ac4ddf8ccf0a45a59e86ea56db4c0b57ae7a7ac181a26ccb2a9da0c29b8f0
MD5 c8ff873b2a0d1efcbc81d83343732b29
SHA1 4f67883898f70e472313e7d76d36c40f8eef9c22
SHA512 53ae58acd4cd458851f40ee71a313f908a7ee06f7df76d9f3a015988d0b4f00a5f73ae24a2a923a09530746f3492f35a893acca553fa1ceac0c80a7886bd9317
SSDEEP 24576:NPxwdGHJfALbB8q4BOiwIX6QLfFUvWk8q99x/HNtf+VD:N5pJfAnBuB7wiXLyvP8OHff+VD
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.alipay.android.app

Android Permissions

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SEND_SMS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

com.kiloo.subwaysurf.RRAndroidPluginActivity

com.kiloo.subwaysurf.SubwaySurfProxyActivity

com.kiloo.subwaysurf.SubwaySurfActivity

com.kiloo.subwaysurf.SubwaySurfNativeActivity

com.unity3d.player.VideoPlayer

com.skynet.android.user.ui.SkynetSettingsActivity

com.skynet.android.payment.frame.ui.SkynetPayActivity

com.skynet.android.charge.frame.ui.SkynetChargeActivity

com.skynet.android.impl.ui.SkynetAboutActivity

com.skynet.android.impl.ui.SkynetGuideActivity

com.skynet.android.impl.ui.SkynetSplashActivity

com.skynet.android.online.service.ui.OnlineServiceActivity

com.skynet.android.impl.ui.SkynetFeedbackActivity

com.estore.ui.CTEStoreSDKActivity

com.s1.lib.plugin.dynload.service.S1Service

com.mobgi.android.service.MobgiService

com.kiloo.unityplugins.localnotifications.NotificationService

mm.sms.purchasesdk.sms.SMSReceiver

com.s1.lib.plugin.dynload.service.ConnectionChange

com.alipay.android.app.apk

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

com.alipay.android.app.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

com.alipay.android.app.helper.UserIdShareProvider

Sharing

General

Malware Config

Signatures

File Explorer

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118

com.kiloo.subwaysurf.RRAndroidPluginActivity

com.kiloo.subwaysurf.SubwaySurfProxyActivity

com.kiloo.subwaysurf.SubwaySurfActivity

com.kiloo.subwaysurf.SubwaySurfNativeActivity

com.unity3d.player.VideoPlayer

com.skynet.android.user.ui.SkynetSettingsActivity

com.skynet.android.payment.frame.ui.SkynetPayActivity

com.skynet.android.charge.frame.ui.SkynetChargeActivity

com.skynet.android.impl.ui.SkynetAboutActivity

com.skynet.android.impl.ui.SkynetGuideActivity

com.skynet.android.impl.ui.SkynetSplashActivity

com.skynet.android.online.service.ui.OnlineServiceActivity

com.skynet.android.impl.ui.SkynetFeedbackActivity

com.estore.ui.CTEStoreSDKActivity

com.s1.lib.plugin.dynload.service.S1Service

com.mobgi.android.service.MobgiService

com.kiloo.unityplugins.localnotifications.NotificationService

mm.sms.purchasesdk.sms.SMSReceiver

com.s1.lib.plugin.dynload.service.ConnectionChange

com.alipay.android.app.apk

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

com.alipay.android.app.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

com.alipay.android.app.helper.UserIdShareProvider

Android Permissions

53b18d857f6f5a90091fa86e6d31904f_JaffaCakes118