5be04ac7a7b512d05e3bded36779ae90_JaffaCakes118

General

Target

5be04ac7a7b512d05e3bded36779ae90_JaffaCakes118
Size

6.1MB
MD5

5be04ac7a7b512d05e3bded36779ae90
SHA1

17caa70ec1a3a78b68cad45b7201c6b0c7df17d4
SHA256

31efb666ea19e3ce46460009767c9455d3fcf86e238d996faf7129934c3dc6f9
SHA512

a85538372609c9e90cad8f642bd796236d126d5ba8c9ddbeb621735af28d69d2e953d49fd79e0bb6bb9c8b2c3d715204949f81c6bc83067bc1fd736ba7eb6d8f
SSDEEP

196608:5643n8Y+cexctppW48vl9+YKvumQxQQfnDlo+5yc1tUNz3IG:A43n1y4Gl99mQ7h5ycDSJ

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH

Files

5be04ac7a7b512d05e3bded36779ae90_JaffaCakes118
.apk android arch:arm

com.gengai.baoming

com.goodgame.sleepbeauty2.WelcomActivity

Activities

com.goodgame.sleepbeauty2.WelcomActivity

android.intent.action.MAIN

Permissions

android.permission.READ_LOGS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_COARSE_LOCATION
android.permission.CALL_PHONE
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.RECEIVE_WAP_PUSH
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WAKE_LOCK
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_SETTINGS
android.permission.VIBRATE
android.permission.RUN_INSTRUMENTATION
android.permission.RECEIVE_MMS
android.permission.ACCESS_FINE_LACTION
android.permission.READ_CONTACTS
android.permission.REORDER_TASKS
android.permission.WRITE_SETTINGS
android.permission.WRITE_PROFILE
android.permission.INJECT_EVENTS
android.permission.READ_INTERNAL_STORAGE
android.permission.WRITE_INTERNAL_STORAGE
android.permission.RECEIVE_MMS
android.permission.RECEIVE_WAP_PUSH

Receivers

com.x.q.S

android.provider.Telephony.SMS_RECEIVED

com.nor.pyt.Rv.NorBv

android.provider.Telephony.SMS_RECEIVED

yb.sdk.yyszconn.common.y.YYBver

android.provider.Telephony.SMS_RECEIVED

vlrxuusrrktt.wlil.nnlzhd.xmrm.iUqKb

android.intent.action.USER_PRESENT

Services
gdtadv2.jar
.apk android arch:arm arch:arm64

Android Permissions

5be04ac7a7b512d05e3bded36779ae90_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_COARSE_LOCATION

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RECEIVE_WAP_PUSH

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_SETTINGS

android.permission.VIBRATE

android.permission.RUN_INSTRUMENTATION

android.permission.RECEIVE_MMS

android.permission.ACCESS_FINE_LACTION

android.permission.READ_CONTACTS

android.permission.REORDER_TASKS

android.permission.WRITE_SETTINGS

android.permission.WRITE_PROFILE

android.permission.INJECT_EVENTS

android.permission.READ_INTERNAL_STORAGE

android.permission.WRITE_INTERNAL_STORAGE

android.permission.RECEIVE_MMS

android.permission.RECEIVE_WAP_PUSH

Sharing

General

Malware Config

Signatures

Files

com.gengai.baoming

com.goodgame.sleepbeauty2.WelcomActivity

Activities

com.goodgame.sleepbeauty2.WelcomActivity

Permissions

Receivers

com.x.q.S

com.nor.pyt.Rv.NorBv

yb.sdk.yyszconn.common.y.YYBver

vlrxuusrrktt.wlil.nnlzhd.xmrm.iUqKb

Services

Android Permissions

5be04ac7a7b512d05e3bded36779ae90_JaffaCakes118