57fe5de790332044d6de2ae25d1098c6_JaffaCakes118

General

Target
57fe5de790332044d6de2ae25d1098c6_JaffaCakes118
Size 16.5MB
Sample240519-cb6qzscf57
SHA256 99fa88769906b629fa2805e3ffa495987607e33f4bd02e1afce8d8a6154f4d9b
MD5 57fe5de790332044d6de2ae25d1098c6
SHA1 19a515f94fc08715fcd882912ed22bd8bad5528e
SHA512 71fb9ad910d9a23beb8eaef886fa7ff787323941cfd4a31331f42fccc2bbba1acf666c83a2a07a52f229ca945bdb4f4c5398f541b27fdc60299eb8a7b05e3370
SSDEEP 393216:hoDclSLBYFqGXVEUPrtr68YjycHCCIVLuJKH77L6uIYdPbB:jYLBKzXVEUjtWUgcVnHIOPbB
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

57fe5de790332044d6de2ae25d1098c6_JaffaCakes118

.apk 16.5MB
QvodPlayerPlugForEasou_V1.0.15_v7neon.jpg

.apk 5.9MB
jackson.jar

.apk 315KB

57fe5de790332044d6de2ae25d1098c6_JaffaCakes118

SHA256 99fa88769906b629fa2805e3ffa495987607e33f4bd02e1afce8d8a6154f4d9b
MD5 57fe5de790332044d6de2ae25d1098c6
SHA1 19a515f94fc08715fcd882912ed22bd8bad5528e
SHA512 71fb9ad910d9a23beb8eaef886fa7ff787323941cfd4a31331f42fccc2bbba1acf666c83a2a07a52f229ca945bdb4f4c5398f541b27fdc60299eb8a7b05e3370
SSDEEP 393216:hoDclSLBYFqGXVEUPrtr68YjycHCCIVLuJKH77L6uIYdPbB:jYLBKzXVEUjtWUgcVnHIOPbB
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.esvideo

com.esvideo.activity.ActLoading

android.intent.action.MAIN

.activity.ActGuide

com.esvideo.activity.ActMain

.activity.ActMovieDetail

.activity.ActTvDetail

.activity.ActAnimDetail

.activity.ActMovieOffline

.activity.ActTvOffline

.activity.ActVarietyDetail

.activity.ActSearchResult

.activity.ActSearch

.activity.ActWebView

.activity.ActSourceWebView

.activity.ActMatureWebView

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.esvideo.player.ui.VideoCentreActivity

com.esvideo.player.ui.VideoCentreOnlineActivity

com.esvideo.player.vitamio.InitActivity

io.vov.vitamio.activity.InitActivity

com.esvideo.player.ui.PlayerActivity

com.esvideo.player.ui.VideoActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.SEND android.intent.action.SENDTO android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

.activity.ActOfflineCache

.activity.ActShakePlayRecord

.activity.TrafficStatActivity

QvodPlayerPlugForEasou_V1.0.15_v7neon.jpg

SHA256 ed12e447ee2004de2638ece78a071e73a04a4df98009681eb96b2ae925f0aca0
MD5 29f9e4be6237bb807e4c2c7a0b09522a
SHA1 35c18df4fe4fabc0531ed4ce310c119fc70c2427
SHA512 0431217ee54094ccb664f8bc91723c3180ee2a4445ba560309efc51f401197aa45f9eb1dcf060e145f7832a62a02c8255a6583f3b872f94d06f492d6148e4aaf
SSDEEP 98304:wKJa+m1zLgG3aWANa8g3yMD+tHkg8TZ4kRxBYs8q5wRvG1tysAxD6qlBfwa9kZ:n9Kd8I3+tl8TZbxBYFqGFLBf9SZ
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.qvod.plugin.for_easou

Android Permissions

57fe5de790332044d6de2ae25d1098c6_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.READ_LOGS

android.permission.ACCESS_MOCK_LOCATION

android.permission.BAIDU_LOCATION_SERVICE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

File Explorer

57fe5de790332044d6de2ae25d1098c6_JaffaCakes118

com.esvideo.activity.ActLoading

.activity.ActGuide

com.esvideo.activity.ActMain

.activity.ActMovieDetail

.activity.ActTvDetail

.activity.ActAnimDetail

.activity.ActMovieOffline

.activity.ActTvOffline

.activity.ActVarietyDetail

.activity.ActSearchResult

.activity.ActSearch

.activity.ActWebView

.activity.ActSourceWebView

.activity.ActMatureWebView

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.esvideo.player.ui.VideoCentreActivity

com.esvideo.player.ui.VideoCentreOnlineActivity

com.esvideo.player.vitamio.InitActivity

io.vov.vitamio.activity.InitActivity

com.esvideo.player.ui.PlayerActivity

com.esvideo.player.ui.VideoActivity

.activity.ActOfflineCache

.activity.ActShakePlayRecord

.activity.TrafficStatActivity

.service.DownloadQvodPluginService

.service.DownloadUpdateService

.service.DownloadVideoService

com.umeng.common.net.DownloadingService

com.baidu.location.f

com.esvideo.service.PlayerService

io.vov.vitamio.VitamioService

.service.MediaScannerService

.download.services.TrafficCounterService

.download.services.DownloadService

com.esvideo.receiver.DownloadReceiver

com.esvideo.receiver.NetworkChangeReceiver

QvodPlayerPlugForEasou_V1.0.15_v7neon.jpg

.activity.PluginPlayerActivity

com.qvod.player.core.p2p.service.P2PService

com.qvod.plugin.core.stat.StatService

com.qvod.plugin.core.update.UpdateService

jackson.jar

Android Permissions

57fe5de790332044d6de2ae25d1098c6_JaffaCakes118