580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

General

Target
580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118
Size 19.5MB
Sample240519-cha8nach5v
SHA256 b2ee62b61b11945d3daf8f36ca9aeb706cadb292ca7efee41a7b39332ab0e720
MD5 580766cbe79a51c64bb0cca2c2a18df9
SHA1 99a8db47655579193c50d96e1d8807e0f624f012
SHA512 9c249bf53ce0e94cd2a88c318b60fe12886e416c69309ba53174e8c2d0244e38f2b1eaa645eb2521219387b5d68361791a5430fb7b52b6586f91a447c79fdabe
SSDEEP 393216:S+ScCR/cK6w9d0e8GOY32sUnojGptaEatF3OtCLDG6JPl126Cpp3qUxZJVp5Y50:uxb6w30e8GOJ7nojGpYEaP3OtkDaz3hv
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS

File Explorer

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

.apk 19.5MB

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

SHA256 b2ee62b61b11945d3daf8f36ca9aeb706cadb292ca7efee41a7b39332ab0e720
MD5 580766cbe79a51c64bb0cca2c2a18df9
SHA1 99a8db47655579193c50d96e1d8807e0f624f012
SHA512 9c249bf53ce0e94cd2a88c318b60fe12886e416c69309ba53174e8c2d0244e38f2b1eaa645eb2521219387b5d68361791a5430fb7b52b6586f91a447c79fdabe
SSDEEP 393216:S+ScCR/cK6w9d0e8GOY32sUnojGptaEatF3OtCLDG6JPl126Cpp3qUxZJVp5Y50:uxb6w30e8GOJ7nojGpYEaP3OtkDaz3hv
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

io.dcloud.H552E41F2

android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.GET_TASKS android.permission.CHANGE_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_CONTACTS android.permission.VIBRATE android.permission.READ_LOGS android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_CONTACTS android.permission.ACCESS_NETWORK_STATE android.permission.RECEIVE_BOOT_COMPLETED com.android.launcher.permission.UNINSTALL_SHORTCUT android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.GET_ACCOUNTS com.android.launcher.permission.INSTALL_SHORTCUT android.permission.MODIFY_AUDIO_SETTINGS android.permission.SEND_SMS android.permission.INTERNET android.permission.CHANGE_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WAKE_LOCK android.permission.FLASHLIGHT android.permission.CALL_PHONE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECEIVE_USER_PRESENT android.permission.WRITE_SETTINGS android.permission.WRITE_SMS android.permission.READ_SMS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.yulong.android.launcherL.permission.READ_SETTINGS com.meizu.flyme.launcher.permission.READ_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.qiku.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.zte.mifavor.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher3.READ_SETTINGS org.adw.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.lge.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.nd.android.launcher.permission.READ_SETTINGS com.yulong.android.launcher.permission.READ_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.ztemt.launcher.permission.READ_SETTINGS cn.nubia.launcher.permission.READ_SETTINGS com.gionee.amisystem.permission.READ_SHORTCUT getui.permission.GetuiService.io.dcloud.H552E41F2

io.dcloud.PandoraEntry

android.intent.action.MAIN

io.dcloud.PandoraEntryActivity

android.intent.action.VIEW

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

io.dcloud.H552E41F2.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

io.dcloud.WebviewActivity

Android Permissions

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.CHANGE_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.READ_LOGS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_CONTACTS

android.permission.ACCESS_NETWORK_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SEND_SMS

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.FLASHLIGHT

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.WRITE_SMS

android.permission.READ_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.share.WbShareTransActivity

io.dcloud.H552E41F2.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

io.dcloud.WebviewActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

Sharing

General

Malware Config

Signatures

File Explorer

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118

io.dcloud.PandoraEntry

io.dcloud.PandoraEntryActivity

io.dcloud.imagepick.CustomGalleryActivity

io.dcloud.feature.nativeObj.photoview.PhotoActivity

io.dcloud.appstream.StreamAppMainActivity

io.dcloud.appstream.StreamAppsAbout

io.dcloud.WebAppActivity

io.dcloud.multiprocess.activity.WebAppActivity1

io.dcloud.appstream.OpenStreamAppTransferActivity

io.dcloud.ProcessMediator

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.share.WbShareTransActivity

io.dcloud.H552E41F2.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

io.dcloud.H552E41F2.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

io.dcloud.WebviewActivity

io.dcloud.adapter.io.MiniServerService

io.dcloud.streamdownload.DownloadService

io.dcloud.multiprocess.service.MultiProcessService

com.igexin.sdk.PushService

io.dcloud.feature.apsGt.GTNormalIntentService

io.dcloud.feature.apsGt.GTNormalPushService

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.common.adapter.io.DownloadReceiver

com.igexin.sdk.PushReceiver

io.dcloud.feature.apsGt.GTNotificationReceiver

Android Permissions

580766cbe79a51c64bb0cca2c2a18df9_JaffaCakes118