58143ad622738d59d75d981b2d62daf0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
58143ad622738d59d75d981b2d62daf0_JaffaCakes118
Size 22.0MB
Sample240519-cr55dsdd9w
SHA256 251d70790a986f458d40fdeb5bee8914ccb8116d170dce418db7927f0f0710ee
MD5 58143ad622738d59d75d981b2d62daf0
SHA1 b552dba925c844b95d074279638cc7bdcb584b0c
SHA512 62ee1b56aceab54ceebda4bcfb64e8fc7c03a599a0d641288bf666c9e1ffb22aa77780c9dbeabe17ee680dc755253fdf45e82c2f9ec6777694bb978149b7dfd7
SSDEEP 393216:eQXpLUu1y5seSdO2DCjniRHlbF74M+r2tF9YtKaNdg0Fr91sTe:eWpr1as/O2DBZv7lF9ZLyh1sTe
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

58143ad622738d59d75d981b2d62daf0_JaffaCakes118

.apk 22.0MB

58143ad622738d59d75d981b2d62daf0_JaffaCakes118

SHA256 251d70790a986f458d40fdeb5bee8914ccb8116d170dce418db7927f0f0710ee
MD5 58143ad622738d59d75d981b2d62daf0
SHA1 b552dba925c844b95d074279638cc7bdcb584b0c
SHA512 62ee1b56aceab54ceebda4bcfb64e8fc7c03a599a0d641288bf666c9e1ffb22aa77780c9dbeabe17ee680dc755253fdf45e82c2f9ec6777694bb978149b7dfd7
SSDEEP 393216:eQXpLUu1y5seSdO2DCjniRHlbF74M+r2tF9YtKaNdg0Fr91sTe:eWpr1as/O2DBZv7lF9ZLyh1sTe
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xgbuy.xg

com.xgbuy.xg.activities.MainActivity_

com.xgbuy.xg.activities.RegisterActivity_

com.xgbuy.xg.activities.LoginActivity_

com.xgbuy.xg.activities.FastAndPwdLoginActivity_

com.xgbuy.xg.activities.PresellActivity_

com.xgbuy.xg.activities.ForgetPasswordActivity_

com.xgbuy.xg.activities.ResetPasswordActivity_

com.xgbuy.xg.activities.AboutusActivity_

com.xgbuy.xg.activities.SettingActivity_

com.xgbuy.xg.activities.PersonalSettingActivity_

com.xgbuy.xg.activities.SuperVIPActivity_

com.xgbuy.xg.activities.ChangePhoneActivity_

com.xgbuy.xg.activities.ChangePwdActivity_

com.xgbuy.xg.activities.FeedbackActivity_

com.xgbuy.xg.activities.AddAdressActivity_

com.xgbuy.xg.activities.AfterServerActivity_

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.xgbuy.xg.activities.RefundApplyActivity_

com.xgbuy.xg.activities.EditRefundActivity_

com.xgbuy.xg.activities.ComplainActivity_

com.xgbuy.xg.activities.ComplainQARActivity_

com.xgbuy.xg.activities.NewUserShareActivity_

com.xgbuy.xg.activities.WebActivity_

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.xgbuy.xg.wxapi.WXEntryActivity

com.xgbuy.xg.wxapi.WXPayEntryActivity

com.xgbuy.xg.activities.UpdatePageActivity_

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.xgbuy.xg.activities.PermissionsActivity

com.xgbuy.xg.activities.MyOrderActivity_

com.xgbuy.xg.activities.BindPhoneActivity_

com.xgbuy.xg.activities.DailyActivity_

com.xgbuy.xg.activities.FlashActivity_

android.intent.action.MAIN

com.xgbuy.xg.activities.JupshReceiveActivity_

android.intent.action.VIEW android.intent.action.VIEW

com.xgbuy.xg.activities.HuaweiReceiveActivity_

android.intent.action.VIEW

com.xgbuy.xg.activities.OppoReceiveActivity_

com.xgbuy.xg.activities.OrderDetailActivity_

com.xgbuy.xg.activities.ShowPhotoAcitivity_

com.xgbuy.xg.activities.SureOrderActivity_

com.xgbuy.xg.activities.MessageActivity_

com.xgbuy.xg.activities.LoginNewActivity_

douyin.callback.action

com.xgbuy.xg.activities.SettingPasswordActivity_

com.xgbuy.xg.activities.TestMemoryActivity_

com.xgbuy.xg.activities.ShareAppActivity_

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.xgbuy.xg.activities.TestChatActivity

com.xgbuy.xg.activities.PlatformInterventionActivity_

com.xgbuy.xg.activities.InterventionDetailActivity_

com.xgbuy.xg.activities.MoreConsultContentActivity_

com.xgbuy.xg.activities.LiuYanActivity_

com.xgbuy.xg.activities.AddCommentActivity_

com.xgbuy.xg.activities.MyCommentActivity_

com.xgbuy.xg.activities.AppendCommentActivity_

com.xgbuy.xg.activities.LuckAdrwActivity_

com.xgbuy.xg.activities.ShowHtmlJsonActivity_

com.xgbuy.xg.activities.DepositSureOrderActivity_

com.xgbuy.xg.activities.FragmentShowActivity_

com.xgbuy.xg.activities.RuleActivity_

com.xgbuy.xg.activities.RuleListActivity_

com.xgbuy.xg.activities.TaobaokeActivity_

com.xgbuy.xg.activities.AliTaokeWebViewProxyActivity_

com.xgbuy.xg.activities.UserSafeActivity_

com.xgbuy.xg.activities.CancleUserActivity_

com.xgbuy.xg.activities.CancleConditionActivity_

com.xgbuy.xg.activities.CancleUserResultAcitivty_

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.xgbuy.xg.activities.TaoBaoKeGoodsDetailActivity_

com.xgbuy.xg.activities.MyCenterCustomerServiceActivity_

com.xgbuy.xg.activities.MyCenterGoShoppingActivity_

com.xgbuy.xg.activities.MyCenterPlatformRuleActivity_

com.xgbuy.xg.activities.MechatActivity_

com.xgbuy.xg.activities.ShoppingcarActivity_

com.xgbuy.xg.activities.ProductDetailActivity_

com.xgbuy.xg.activities.CollectActivity_

com.xgbuy.xg.activities.MechatInfoActivity_

com.xgbuy.xg.activities.TrailerItemActivity_

com.xgbuy.xg.activities.MechatSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoListActivity_

com.xgbuy.xg.activities.VerifyPhoneActivity_

com.xgbuy.xg.activities.VerifyWxinActivity_

com.xgbuy.xg.bdopen.BdEntryActivity

com.xgbuy.xg.activities.LogisticsDetailActivity_

com.xgbuy.xg.activities.NewBrandGroupActivity_

com.xgbuy.xg.activities.NewUserSeckillActivity_

com.xgbuy.xg.activities.memberShareProfit.NewStarActivity_

com.xgbuy.xg.activities.memberShareProfit.PromoteOrderActivity_

com.xgbuy.xg.activities.memberShareProfit.CashWithdrawalActivity_

com.xgbuy.xg.activities.memberShareProfit.DetailRecordActivity_

com.xgbuy.xg.activities.memberShareProfit.MyFriendsActivity_

com.xgbuy.xg.activities.memberShareProfit.EnterInviteCodeActivity_

com.xgbuy.xg.activities.memberShareProfit.InviteFriendActivity_

com.xgbuy.xg.activities.memberShareProfit.GoodRecommendationActivity_

com.xgbuy.xg.activities.memberShareProfit.NewStarPlanOpenRecordActivity_

com.xgbuy.xg.activities.memberShareProfit.TaskProgressActivity_

com.xgbuy.xg.activities.memberShareProfit.FriendHomeActivity_

com.xgbuy.xg.activities.memberShareProfit.DynamicShopDetailActivity_

com.xgbuy.xg.activities.memberShareProfit.OthersNoticeAndFanActivity_

com.xgbuy.xg.activities.NewBrandGroupSecondLevelActivity_

com.ali.auth.third.ui.LoginActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.huawei.hms.activity.BridgeActivity

com.vivo.push.sdk.LinkProxyClientActivity

com.alibaba.baichuan.trade.biz.auth.AlibcAuthActivity

com.alibaba.baichuan.android.trade.ui.AlibcWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.baichuan.android.trade.ui.AlibcBackActivity

android.intent.action.VIEW

com.ali.auth.third.ui.webview.BaseWebViewActivity

com.ali.auth.third.ui.LoginWebViewActivity

com.ali.auth.third.accountlink.ui.BindResultActivity

com.ali.auth.third.accountlink.ui.UnbindWebViewActivity

com.ali.auth.third.ui.QrLoginConfirmActivity

com.ali.auth.third.ui.QrLoginActivity

com.alibaba.alibclinkpartner.ui.ALPWebviewActivity

com.alibaba.alibclinkpartner.ui.ALPCallbackActivity

com.alibaba.alibclinkpartner.ui.ALPEntranceActivity

com.alibaba.intent.action.GETWAY

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

com.xgbuy.xg.receivers.MyReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.xgbuy.xg.receivers.TagandAliasReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.xgbuy.xg.receivers.NetWorkChangReceiver

android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

cn.jpush.android.service.PluginHuaweiPlatformsReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

cn.jpush.android.service.PluginMeizuPlatformsReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

cn.jpush.android.service.PluginVivoMessageReceiver

com.vivo.pushclient.action.RECEIVE

Android Permissions

58143ad622738d59d75d981b2d62daf0_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_LOGS

android.permission.CHANGE_NETWORK_STATE

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

com.xgbuy.xg.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.xgbuy.xg.permission.MIPUSH_RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.xgbuy.xg.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.RUN_INSTRUMENTATION

android.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION