584dc76ae659b6b3f3cea098a0f8d998_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
584dc76ae659b6b3f3cea098a0f8d998_JaffaCakes118
Size 4.2MB
Sample240519-dvt2zaga55
SHA256 0589ad5bb3f735bcf93833a9248f1df8a1090556be5899eb42225e45252524c8
MD5 584dc76ae659b6b3f3cea098a0f8d998
SHA1 ec42340f35ee2e304677dddd2e14604b1d316153
SHA512 5a55ca4b236dcd314c0df858c87fa6f9a431a5e2f3b8b552aba643308ea5adc6d393444e6fb427e643e9165c99fb313142a8242d43c90ab22cf2380e5648b599
SSDEEP 98304:9Mb2Ecjg31voxEKuG6zKxXJ6RUVL/1a3d50EiZycO2IB1j:9KtoxEmjxXoYg3/0EiAcOf1j
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 28 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

584dc76ae659b6b3f3cea098a0f8d998_JaffaCakes118

.apk 4.2MB
alipay_plugin223_0309.apk

.apk 130KB

584dc76ae659b6b3f3cea098a0f8d998_JaffaCakes118

SHA256 0589ad5bb3f735bcf93833a9248f1df8a1090556be5899eb42225e45252524c8
MD5 584dc76ae659b6b3f3cea098a0f8d998
SHA1 ec42340f35ee2e304677dddd2e14604b1d316153
SHA512 5a55ca4b236dcd314c0df858c87fa6f9a431a5e2f3b8b552aba643308ea5adc6d393444e6fb427e643e9165c99fb313142a8242d43c90ab22cf2380e5648b599
SSDEEP 98304:9Mb2Ecjg31voxEKuG6zKxXJ6RUVL/1a3d50EiZycO2IB1j:9KtoxEmjxXoYg3/0EiAcOf1j
MD5 SHA1 SHA512 SSDEEP

com.mianfeia.book

android.permission.RESTART_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE com.chineseall.singlebook.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.RECORD_AUDIO android.permission.CAMERA android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.GET_TASKS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_SETTINGS android.permission.RESTART_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.KILL_BACKGROUND_PROCESSES android.permission.READ_LOGS android.permission.CHANGE_CONFIGURATION android.permission.WAKE_LOCK android.permission.READ_SMS android.permission.WRITE_SMS android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR android.permission.RECORD_AUDIO com.android.launcher.permission.INSTALL_SHORTCUT android.permission.VIBRATE

com.chineseall.reader.ui.FlashActivity

android.intent.action.MAIN android.intent.action.CREATE_SHORTCUT

com.chineseall.reader.ui.FrameActivity

com.chineseall.reader.ui.PreciseActivity

com.chineseall.reader.ui.AutherBookListActivity

com.chineseall.reader.ui.TabHomeActivity

com.chineseall.reader.ui.TabHomeRankActivity

com.chineseall.reader.ui.ChapterContentActivity

com.chineseall.reader.ui.ForgetPwdActivity

com.chineseall.reader.ui.MonthlyActivity

com.chineseall.reader.ui.HelperActivity

com.chineseall.reader.ui.BookIntroductionActivity

android.intent.action.VIEW

com.chineseall.reader.ui.VoiceIntroductionActivity

android.intent.action.VIEW

com.chineseall.reader.ui.DownloadActivity

com.chineseall.reader.ui.WebViewActivity

com.chineseall.reader.ui.ReadSettingActivity

com.chineseall.reader.ui.SearchActivity

com.chineseall.reader.ui.SearchResultActivity

com.chineseall.reader.ui.MySearchActivity

com.chineseall.reader.ui.ReadActivity

com.chineseall.reader.ui.BookShelfActivity

com.chineseall.reader.ui.AccountActivity

com.chineseall.reader.ui.AccountQQGrantActivity

com.chineseall.reader.ui.AccountQQBindActivity

com.chineseall.reader.ui.SystemSettingActivity

com.chineseall.reader.ui.SystemHelpActivity

com.chineseall.reader.ui.FileMgrActivity

com.chineseall.reader.ui.SystemExitActivity

com.chineseall.reader.ui.UserRegisterActivity

com.chineseall.reader.ui.ClassifyContentActivity

com.chineseall.reader.ui.VoiceClassifyContentActivity

com.chineseall.reader.ui.SMSDianxinChargeActivity

com.chineseall.reader.ui.ChargeTypeActivity

com.chineseall.reader.ui.AlipayChargeActivity

com.chineseall.reader.ui.MobileCardChargeActivity

com.chineseall.reader.ui.GameCardChargeActivity

com.chineseall.reader.ui.BookCommentActivity

com.chineseall.reader.ui.CommitSuggestActivity

com.chineseall.reader.ui.LoadMoreActivity

com.chineseall.reader.ui.WriteWorksActivity

com.chineseall.reader.ui.AlipayActivity

com.chineseall.reader.ui.WriteSiteActivity

com.chineseall.reader.ui.WriteChannelActivity

com.chineseall.reader.ui.WriteCategoryActivity

com.chineseall.reader.ui.WriteUpdateBookActivity

com.chineseall.reader.ui.DraftChapterContentActivity

com.chineseall.reader.ui.DraftPreviewActivity

com.chineseall.reader.ui.WriteVolumeActivity

com.chineseall.reader.ui.WriteRegActivity

com.chineseall.reader.ui.WriteActivity

com.chineseall.reader.ui.WriteNewBookActivity

com.chineseall.reader.ui.WriteDetailWorkActivity

com.chineseall.reader.ui.WriteNewVolumeActivity

com.chineseall.reader.ui.WriteNewChapterActivity

com.chineseall.reader.ui.WriteDirectoryActivity

com.chineseall.reader.ui.WriteWorkCountActivity

com.chineseall.reader.ui.SystemAboutActivity

com.chineseall.reader.ui.SubVIPModeActivity

com.chineseall.reader.ui.SubAllVipChapterActivity

com.chineseall.reader.ui.SubManualVipChapterActivity

com.chineseall.reader.ui.HelpCenterActivity

com.chineseall.reader.ui.HelpCenterSubActivity

com.chineseall.reader.ui.AutoChapterActivity

com.chineseall.reader.ui.ThemeListActivity

com.chineseall.reader.ui.CategoryListActivity

com.chineseall.reader.ui.PayedActivity

com.chineseall.reader.ui.ColorPickerActivity

com.chineseall.reader.ui.BuyBookActivity

com.chineseall.reader.ui.RDOChargeStep1Activity

com.chineseall.reader.ui.RDOChargeStep2Activity

com.chineseall.reader.ui.RDOChargeStep3Activity

com.chineseall.reader.ui.AliChargeStep1Activity

com.chineseall.reader.ui.GuideActivity

com.chineseall.reader.ui.PayedChapterActivity

com.chineseall.reader.ui.ChapterDownloadActivity

com.chineseall.reader.ui.DraftEditorActivity

com.chineseall.reader.ui.NewBookActivity

com.chineseall.reader.ui.DraftBoxActivity

com.chineseall.reader.ui.MoreBookActivity

com.adchina.android.ads.views.AdBrowserView

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.chineseall.singlebook.wxapi.WXEntryActivity

android.intent.action.VIEW

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

com.umpay.huafubao.ui.BillingActivity

com.baidu.mobads.AppActivity

com.otomod.ad.AdActivity

com.otomod.ad.shortcut

Android Permissions

584dc76ae659b6b3f3cea098a0f8d998_JaffaCakes118

Permissions

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.chineseall.singlebook.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_LOGS

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE