57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118
Size 30.3MB
Sample240519-a7k32shf59
SHA256 7d23fe5c2cf6684ec455611a362c140a3d580788ac4752fc161912c2c238684d
MD5 57bab1c633ef8aa0f2ced2bcceeb98fe
SHA1 f402ce4c804184561036dbeb3349a4e190d2f69d
SHA512 18a0ea4d714bc22c8d77da0652e38532b76932fc5afb5d4807e495482f7a2fcb8faf1e30fa53a7311cbaea92af29dc5c37ef09242ebad410668d0a9fbb489621
SSDEEP 786432:3CzlyusNsEso/vg/VzvgQynNZ4o8cG65YMjZvR3:3CzdIHHg/ZglL4vMT
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118

.apk 30.3MB

57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118

SHA256 7d23fe5c2cf6684ec455611a362c140a3d580788ac4752fc161912c2c238684d
MD5 57bab1c633ef8aa0f2ced2bcceeb98fe
SHA1 f402ce4c804184561036dbeb3349a4e190d2f69d
SHA512 18a0ea4d714bc22c8d77da0652e38532b76932fc5afb5d4807e495482f7a2fcb8faf1e30fa53a7311cbaea92af29dc5c37ef09242ebad410668d0a9fbb489621
SSDEEP 786432:3CzlyusNsEso/vg/VzvgQynNZ4o8cG65YMjZvR3:3CzdIHHg/ZglL4vMT
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.iflytek.oshall.ahzwfw

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.iflytek.oshall.bsdt.activity.WelcomeActivity

android.intent.action.MAIN

com.iflytek.oshall.bsdt.activity.HomeActivity

com.iflytek.oshall.bsdt.activity.RegisterActivity

com.iflytek.oshall.bsdt.activity.RegisterResultActivity

com.iflytek.oshall.bsdt.activity.ForgetPassWordActivity

com.iflytek.oshall.bsdt.activity.ForgetPassWordConfirmActivity

com.iflytek.oshall.bsdt.activity.ProtocolActivity

com.iflytek.oshall.bsdt.activity.PswActivity

com.iflytek.oshall.bsdt.activity.PhoneNumberChangeActivity

com.iflytek.oshall.bsdt.activity.PswCodeActivity

com.iflytek.oshall.bsdt.activity.setting.SettingActivity

com.iflytek.oshall.bsdt.activity.setting.SettingVoiceActivity

com.iflytek.oshall.bsdt.activity.CertifyConfirmActivity

com.iflytek.oshall.bsdt.activity.CertifyActivity

com.iflytek.oshall.bsdt.activity.CertifyUploadActivity

com.iflytek.oshall.bsdt.activity.CertifySuccessActivity

com.iflytek.oshall.bsdt.activity.setting.AboutActivity

com.iflytek.oshall.bsdt.activity.MyTransactionActivity

com.iflytek.oshall.bsdt.activity.MyTransactionDetailActivity

com.iflytek.oshall.bsdt.activity.ThreeTypeActivity

com.iflytek.oshall.bsdt.activity.SearchActivity

com.iflytek.oshall.bsdt.activity.SearchConseDetailActivity

com.iflytek.oshall.bsdt.activity.MessageActivity

com.iflytek.oshall.bsdt.activity.MyEvaluationActivity

com.iflytek.oshall.bsdt.activity.MyCollectActivity

com.iflytek.oshall.bsdt.activity.SuggestActivity

com.iflytek.oshall.bsdt.activity.ChangeAddressActivity

com.iflytek.oshall.bsdt.activity.ComplaintConsultationActivity

com.iflytek.oshall.bsdt.activity.CCObjectActivity

com.iflytek.oshall.bsdt.activity.TransactionEvaluateActivity

com.iflytek.oshall.bsdt.activity.HomeWebActivity

com.iflytek.oshall.bsdt.activity.QueryActivity

com.iflytek.oshall.bsdt.activity.HallWebActivity

com.iflytek.oshall.bsdt.activity.HomeSearchActivity

com.iflytek.oshall.bsdt.activity.MyPayActivity

com.iflytek.oshall.bsdt.activity.IntelligentSpeechActivity

com.iflytek.oshall.bsdt.plugins.CrossActivity

com.iflytek.oshall.bsdt.activity.CaptureActivity

com.iflytek.oshall.bsdt.activity.CaptureEsscActivity

com.iflytek.oshall.bsdt.activity.MarketCityActivity

com.iflytek.oshall.bsdt.activity.ScanActivity

com.iflytek.oshall.bsdt.activity.PreLoadingActivity

com.iflytek.oshall.bsdt.activity.HallActivity

com.iflytek.oshall.bsdt.activity.MineActivity

com.iflytek.oshall.bsdt.activity.ShareActivity

com.iflytek.oshall.bsdt.activity.HomeServiceBookActivity

com.iflytek.oshall.bsdt.activity.HomePeopleServiceActivity

com.iflytek.oshall.bsdt.activity.setting.FeedBackActivity

com.iflytek.oshall.bsdt.activity.EsscActivity

com.lzy.imagepicker.ui.ImageBaseActivity

com.lzy.imagepicker.ui.ImageGridActivity

com.lzy.imagepicker.ui.ImageCropActivity

com.lzy.imagepicker.ui.ImagePreviewActivity

com.lzy.imagepicker.ui.ImageBrowseActivity

com.iflytek.oshall.bsdt.activity.TestActivity

com.iflytek.croods.qrcode.activity.ZbarActivityNew

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.iflytek.uaac.activity.TakePhotoActivity

com.iflytek.uaac.activity.YYZZActivity

com.iflytek.uaac.activity.LoginActivity

com.iflytek.uaac.activity.AliRegisterActivity

com.iflytek.uaac.activity.CommonUrlActivity

android.intent.action.VIEW

com.iflytek.uaac.facelibrary.ui.LivenessActivity

com.iflytek.uaac.activity.PersonalActivity

android.intent.action.VIEW

com.iflytek.oshall.bsdt.activity.UaacActivity

android.intent.action.VIEW

com.iflytek.oshall.bsdt.activity.voice.VoiceConfirmActivity

com.iflytek.oshall.bsdt.activity.voice.VoiceProtocolActivity

com.iflytek.oshall.bsdt.activity.voice.VoiceRegisterActivity

com.iflytek.oshall.bsdt.activity.voice.VoicePasswordActivity

com.iflytek.oshall.bsdt.activity.face.FaceAuthenticationActivity

com.iflytek.oshall.bsdt.activity.face.SeniorCertifiedActivity

com.iflytek.oshall.bsdt.activity.GuideActivity

com.iflytek.oshall.bsdt.activity.AdviertisementActivity

hc.mhis.paic.com.essclibrary.activity.ESSCMainActivity

hc.mhis.paic.com.essclibrary.activity.ESSCFaceDetectActivity

hc.mhis.paic.com.essclibrary.activity.ESSCScanCodeActivity

com.alipay.zoloz.toyger.workspace.ToygerActivity

com.iflytek.uaac.activity.MainActivity

com.iflytek.uaac.activity.UccpLoginActivity

com.iflytek.uaac.VideoAuthActivity

com.iflytek.uaac.activity.UccpActivity

com.iflytek.uaac.activity.TestActivity

com.alipay.sdk.auth.AuthActivity

com.yanzhenjie.permission.PermissionActivity

com.luck.picture.lib.PictureSelectorActivity

com.luck.picture.lib.PicturePreviewActivity

com.luck.picture.lib.PictureVideoPlayActivity

com.luck.picture.lib.PictureExternalPreviewActivity

com.yalantis.ucrop.UCropActivity

com.yalantis.ucrop.PictureMultiCuttingActivity

com.luck.picture.lib.PicturePlayAudioActivity

com.iflytek.croods.qrcode.activity.ZbarActivity

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

cn.sharesdk.wechat.utils.WechatHandlerActivity

Android Permissions

57bab1c633ef8aa0f2ced2bcceeb98fe_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RAISED_THREAD_PRIORITY

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.READ_CONTACTS

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.CALL_PHONE

android.permission.READ_LOGS

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_APN_SETTINGS

com.iflytek.oshall.ahzwfw.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.BLUETOOTH

android.hardware.camera.autofocus

android.permission.BROADCAST_STICKY

android.permission.PACKAGE_USAGE_STATS

android.permission.RECEIVE_SMS