580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118
Size 13.0MB
Sample240519-cmwp6adb61
SHA256 79625b2eba2c1afd0f8685907f21579e504ac697e2f3047514f3c53e1b04b11d
MD5 580de0ece4c4d17dd8ad6336cc5a96da
SHA1 d949b82bcef7257450ca493fb87350cf31dc9db2
SHA512 2017ffd8cbe5575fbcbffc2d79adbedd6a20bea8b64a1073c141768a6db36d52eb2217766875663bcae5a4e0d2acd90db57ca343a3d7bd4f7b9965ce140d59bd
SSDEEP 393216:qBbSgChdAsLEI8oDa0LxeegZmZ4EklYk2LPhdY:2SklC5NeegZmZ4LK1Y
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118

.apk 13.0MB

580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118

SHA256 79625b2eba2c1afd0f8685907f21579e504ac697e2f3047514f3c53e1b04b11d
MD5 580de0ece4c4d17dd8ad6336cc5a96da
SHA1 d949b82bcef7257450ca493fb87350cf31dc9db2
SHA512 2017ffd8cbe5575fbcbffc2d79adbedd6a20bea8b64a1073c141768a6db36d52eb2217766875663bcae5a4e0d2acd90db57ca343a3d7bd4f7b9965ce140d59bd
SSDEEP 393216:qBbSgChdAsLEI8oDa0LxeegZmZ4EklYk2LPhdY:2SklC5NeegZmZ4LK1Y
MD5 SHA1 SHA512 SSDEEP

com.comma.fit

com.comma.fit.SplashActivity

android.intent.action.MAIN

com.comma.fit.common.camera.AlbumActivity

com.comma.fit.common.MainActivity

com.comma.fit.module.guest.GuestTourActivity

com.comma.fit.module.guest.OpenDoorActivity

com.comma.fit.common.WebViewActivity

com.comma.fit.module.authorization.LoginActivity

com.comma.fit.module.profile.ProfileSetupActivity

com.comma.fit.module.profile.ProfileReviseActivity

com.comma.fit.module.training.body.BodyDataActivity

com.comma.fit.module.training.body.BodyHistoryDataActivity

com.comma.fit.module.training.TrainingHistoryActivity

com.comma.fit.module.band.BandActivity

com.comma.fit.module.band.BandInfoActivity

com.comma.fit.module.personal.coupons.MyCouponsActivity

com.comma.fit.common.TabViewPagerActivity

com.comma.fit.module.personal.messages.NoticeDetailActivity

com.comma.fit.module.personal.orders.MyOrdersActivity

com.comma.fit.module.personal.more.MoreFunctionActivity

com.comma.fit.module.courses.coach.CoachDetailActivity

com.comma.fit.module.courses.coach.CoachOrderActivity

com.comma.fit.module.courses.group.GroupCoursesListActivity

com.comma.fit.module.courses.group.details.GroupCoursesDetailsActivity

com.comma.fit.module.courses.group.order.GroupOrderActivity

com.comma.fit.module.courses.group.selfcourse.list.SelfGroupCourseListActivity

com.comma.fit.module.courses.group.selfcourse.details.SelfGroupCourseDetailsActivity

com.comma.fit.module.courses.group.selfcourse.SelfGroupCourseActivity

com.comma.fit.module.opencity.OpenCityListActivity

com.comma.fit.module.gymnasium.GymnasiumListActivity

com.comma.fit.module.gymnasium.details.GymnasiumDetailsActivity

com.comma.fit.module.gymnasium.map.GymMapActivity

com.comma.fit.module.card.CardListActivity

com.comma.fit.module.card.buy.BuyCardActivity

com.comma.fit.module.training.sports.SportsDataActivity

com.comma.fit.module.band.buy.BuyBandActivity

com.comma.fit.module.personal.more.BecomeTeacherActivity

com.comma.fit.module.personal.more.AboutActivity

com.comma.fit.wxapi.WXPayEntryActivity

com.comma.fit.test.wxapi.WXPayEntryActivity

com.comma.fit.test.wxapi.WXEntryActivity

com.comma.fit.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118

Permissions

com.comma.fit.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118

com.comma.fit.SplashActivity

com.comma.fit.common.camera.AlbumActivity

com.comma.fit.common.MainActivity

com.comma.fit.module.guest.GuestTourActivity

com.comma.fit.module.guest.OpenDoorActivity

com.comma.fit.common.WebViewActivity

com.comma.fit.module.authorization.LoginActivity

com.comma.fit.module.profile.ProfileSetupActivity

com.comma.fit.module.profile.ProfileReviseActivity

com.comma.fit.module.training.body.BodyDataActivity

com.comma.fit.module.training.body.BodyHistoryDataActivity

com.comma.fit.module.training.TrainingHistoryActivity

com.comma.fit.module.band.BandActivity

com.comma.fit.module.band.BandInfoActivity

com.comma.fit.module.personal.coupons.MyCouponsActivity

com.comma.fit.common.TabViewPagerActivity

com.comma.fit.module.personal.messages.NoticeDetailActivity

com.comma.fit.module.personal.orders.MyOrdersActivity

com.comma.fit.module.personal.more.MoreFunctionActivity

com.comma.fit.module.courses.coach.CoachDetailActivity

com.comma.fit.module.courses.coach.CoachOrderActivity

com.comma.fit.module.courses.group.GroupCoursesListActivity

com.comma.fit.module.courses.group.details.GroupCoursesDetailsActivity

com.comma.fit.module.courses.group.order.GroupOrderActivity

com.comma.fit.module.courses.group.selfcourse.list.SelfGroupCourseListActivity

com.comma.fit.module.courses.group.selfcourse.details.SelfGroupCourseDetailsActivity

com.comma.fit.module.courses.group.selfcourse.SelfGroupCourseActivity

com.comma.fit.module.opencity.OpenCityListActivity

com.comma.fit.module.gymnasium.GymnasiumListActivity

com.comma.fit.module.gymnasium.details.GymnasiumDetailsActivity

com.comma.fit.module.gymnasium.map.GymMapActivity

com.comma.fit.module.card.CardListActivity

com.comma.fit.module.card.buy.BuyCardActivity

com.comma.fit.module.training.sports.SportsDataActivity

com.comma.fit.module.band.buy.BuyBandActivity

com.comma.fit.module.personal.more.BecomeTeacherActivity

com.comma.fit.module.personal.more.AboutActivity

com.comma.fit.wxapi.WXPayEntryActivity

com.comma.fit.test.wxapi.WXPayEntryActivity

com.comma.fit.test.wxapi.WXEntryActivity

com.comma.fit.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.lifesense.ble.message.NotificationService

com.lifesense.ble.message.NotificationAccessService

com.amap.api.location.APSService

com.liulishuo.filedownloader.services.FileDownloadService$SharedMainProcessService

com.liulishuo.filedownloader.services.FileDownloadService$SeparateProcessService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.comma.fit.jpush.ChefJPushReceiver

android.support.v4.content.FileProvider

cn.jpush.android.service.DataProvider

android.arch.lifecycle.ProcessLifecycleOwnerInitializer

Android Permissions

580de0ece4c4d17dd8ad6336cc5a96da_JaffaCakes118