57ebe38b75e9deb96429807a9a41534b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
57ebe38b75e9deb96429807a9a41534b_JaffaCakes118
Size 18.9MB
Sample240519-b11etsbf5y
SHA256 cc8489f14262468d020c186f4ce58eb3f7d006aebb6a2d4f3b9fd6a1dd9acc2a
MD5 57ebe38b75e9deb96429807a9a41534b
SHA1 013168425156ef160eefc4ff27f34cb74980821e
SHA512 bbcb1fd6e9568d91a1700eddc35d1b5e8d0750236bb29bf1991ca06e04036a8447592b2cbdf25ffcba2c4edcb3d5633bd98abda1fbb0afa36dd3a010b1d403a6
SSDEEP 196608:q7sW4lI/t7QHJAdG2Y1DR56tRrDxGvoxnxFx3xo6SioQwz5TqBr2+7Jqn7RKMAzm:Cs/S/4Y90S+orPBo6+fi7cndKMA0x
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

57ebe38b75e9deb96429807a9a41534b_JaffaCakes118

.apk 18.9MB

57ebe38b75e9deb96429807a9a41534b_JaffaCakes118

SHA256 cc8489f14262468d020c186f4ce58eb3f7d006aebb6a2d4f3b9fd6a1dd9acc2a
MD5 57ebe38b75e9deb96429807a9a41534b
SHA1 013168425156ef160eefc4ff27f34cb74980821e
SHA512 bbcb1fd6e9568d91a1700eddc35d1b5e8d0750236bb29bf1991ca06e04036a8447592b2cbdf25ffcba2c4edcb3d5633bd98abda1fbb0afa36dd3a010b1d403a6
SSDEEP 196608:q7sW4lI/t7QHJAdG2Y1DR56tRrDxGvoxnxFx3xo6SioQwz5TqBr2+7Jqn7RKMAzm:Cs/S/4Y90S+orPBo6+fi7cndKMA0x
MD5 SHA1 SHA512 SSDEEP

com.beatle.carrier

com.beatle.ajx.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.WRITE_SETTINGS com.beatle.ajx.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_SETTINGS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.GET_TASKS android.permission.INTERNET android.permission.CAMERA android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECEIVE_BOOT_COMPLETED android.permission.VIBRATE android.permission.FLASHLIGHT android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.CALL_PHONE

com.beatle.lg.LauncherActivity

android.intent.action.MAIN

com.qihoo.util.CommonActivity

com.beatle.lg.login.LoginActivity

com.beatle.lg.register.Register_1Activity

com.beatle.lg.person.BingingCarrierActivity

com.beatle.lg.register.Register_2Activity

com.beatle.lg.order.EndCitySelectActivity

com.beatle.lg.car.AddDeliveryManActivity

com.beatle.lg.register.Register_3Activity

com.beatle.lg.register.CarLength_Activity

com.beatle.lg.forget.Forget_1Activity

com.beatle.lg.car.EditDriverActivity

com.beatle.lg.forget.Forget_2Activity

com.beatle.lg.main.MainActivity

com.beatle.lg.order.OrderInfoActivity

com.beatle.lg.about.AboutActivity

com.beatle.lg.car.DeliveryMansActivity

com.beatle.lg.order.GoodsNameActivity

com.beatle.lg.order.GoodsTypeActivity

com.beatle.lg.register.ActHtml5

com.beatle.lg.price.AddTargetPriceActivity

com.beatle.lg.signin.CompanyInfoActivity

com.beatle.lg.person.EditInfoActivity

com.beatle.lg.person.EditInfoActivity_show

com.beatle.lg.price.EditPriceActivity

com.beatle.lg.order.ReceiverLSActivity

com.beatle.lg.price.AddPriceActivity

com.beatle.lg.car.CarMapActivity

com.beatle.lg.person.linemanage.AddLineActivity

com.beatle.lg.car.CarInfoActivity

com.beatle.lg.order.EndAddressSelectActivity

com.beatle.lg.order.SignAcitivity

com.beatle.lg.contactlist.Activity01

com.beatle.lg.person.linemanage.LineManageActivity

com.beatle.lg.signin.CityListActivity

com.beatle.lg.signin.MapActivity

com.beatle.lg.car.CarActivity

com.beatle.lg.car.MyCarActivity

com.beatle.lg.order.AddOrderActivity

com.beatle.lg.act.ActHtml5

com.example.jpushdemo.PushSetActivity

com.example.jpushdemo.SettingActivity

com.example.jpushdemo.TestActivity

jpush.testAction

cn.jpush.android.ui.PushActivity

Android Permissions

57ebe38b75e9deb96429807a9a41534b_JaffaCakes118

Permissions

com.beatle.ajx.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

com.beatle.ajx.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

Sharing

General

Malware Config

Signatures

File Explorer

57ebe38b75e9deb96429807a9a41534b_JaffaCakes118

com.beatle.lg.LauncherActivity

com.qihoo.util.CommonActivity

com.beatle.lg.login.LoginActivity

com.beatle.lg.register.Register_1Activity

com.beatle.lg.person.BingingCarrierActivity

com.beatle.lg.register.Register_2Activity

com.beatle.lg.order.EndCitySelectActivity

com.beatle.lg.car.AddDeliveryManActivity

com.beatle.lg.register.Register_3Activity

com.beatle.lg.register.CarLength_Activity

com.beatle.lg.forget.Forget_1Activity

com.beatle.lg.car.EditDriverActivity

com.beatle.lg.forget.Forget_2Activity

com.beatle.lg.main.MainActivity

com.beatle.lg.order.OrderInfoActivity

com.beatle.lg.about.AboutActivity

com.beatle.lg.car.DeliveryMansActivity

com.beatle.lg.order.GoodsNameActivity

com.beatle.lg.order.GoodsTypeActivity

com.beatle.lg.register.ActHtml5

com.beatle.lg.price.AddTargetPriceActivity

com.beatle.lg.signin.CompanyInfoActivity

com.beatle.lg.person.EditInfoActivity

com.beatle.lg.person.EditInfoActivity_show

com.beatle.lg.price.EditPriceActivity

com.beatle.lg.order.ReceiverLSActivity

com.beatle.lg.price.AddPriceActivity

com.beatle.lg.car.CarMapActivity

com.beatle.lg.person.linemanage.AddLineActivity

com.beatle.lg.car.CarInfoActivity

com.beatle.lg.order.EndAddressSelectActivity

com.beatle.lg.order.SignAcitivity

com.beatle.lg.contactlist.Activity01

com.beatle.lg.person.linemanage.LineManageActivity

com.beatle.lg.signin.CityListActivity

com.beatle.lg.signin.MapActivity

com.beatle.lg.car.CarActivity

com.beatle.lg.car.MyCarActivity

com.beatle.lg.order.AddOrderActivity

com.beatle.lg.act.ActHtml5

com.example.jpushdemo.PushSetActivity

com.example.jpushdemo.SettingActivity

com.example.jpushdemo.TestActivity

cn.jpush.android.ui.PushActivity

com.qihoo.util.CommonService

com.beatle.lg.base.service.YigeServ

com.beatle.lg.net.map.MapService

com.baidu.location.f

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.qihoo.util.CommonReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.example.jpushdemo.MyReceiver

com.beatle.lg.receiver.BootCompletedReceiver

com.beatle.lg.net.map.MapAlarm

com.qihoo.util.CommonProvider

Android Permissions

57ebe38b75e9deb96429807a9a41534b_JaffaCakes118