589d6fa413e083640fc16ce9afec65b2_JaffaCakes118

General

Target
589d6fa413e083640fc16ce9afec65b2_JaffaCakes118
Size 23.7MB
Sample240519-fez96aba7s
SHA256 45df5e19c65c28725ccc53908b531f43e8df7887f5dbd9f91f5ce790d20fddfc
MD5 589d6fa413e083640fc16ce9afec65b2
SHA1 6ae92be13a52c105a534f578a64351a5ba6a75ed
SHA512 2d342078d4efd46061c482751e8c851222053fb6d5972fd86ea17a41790091d5297145c3affe46adca3cbdf0ec5e2ad88da4c80bdb65c02402fc3195ca425fa4
SSDEEP 393216:q9QumRjyzfKaSVE/TcH/QRdh4IyL5n2I8WQH0sOu1siikELPgZYiyHa7VO:q9Qum5y2ErCMh4PLmUsOu1siDkHHuM
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

589d6fa413e083640fc16ce9afec65b2_JaffaCakes118

.apk 23.7MB

589d6fa413e083640fc16ce9afec65b2_JaffaCakes118

SHA256 45df5e19c65c28725ccc53908b531f43e8df7887f5dbd9f91f5ce790d20fddfc
MD5 589d6fa413e083640fc16ce9afec65b2
SHA1 6ae92be13a52c105a534f578a64351a5ba6a75ed
SHA512 2d342078d4efd46061c482751e8c851222053fb6d5972fd86ea17a41790091d5297145c3affe46adca3cbdf0ec5e2ad88da4c80bdb65c02402fc3195ca425fa4
SSDEEP 393216:q9QumRjyzfKaSVE/TcH/QRdh4IyL5n2I8WQH0sOu1siikELPgZYiyHa7VO:q9Qum5y2ErCMh4PLmUsOu1siDkHHuM
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.ldw.xiaolirili

android.permission.RECEIVE_BOOT_COMPLETED com.tjcalendar.permission.C2D_MESSAGE android.permission.WAKE_LOCK android.permission.INTERNET android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.CAMERA android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.GET_TASKS android.permission.BLUETOOTH com.google.android.c2dm.permission.RECEIVE com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.GET_TASKS android.permission.WAKE_LOCK android.permission.RECEIVE_USER_PRESENT android.permission.SYSTEM_ALERT_WINDOW android.permission.EXPAND_STATUS_BAR android.permission.READ_EXTERNAL_STORAGE

com.tjcalendar.MainActivity

android.intent.action.MAIN

com.facebook.react.devsupport.DevSettingsActivity

com.tjcalendar.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.yalantis.ucrop.UCropActivity

com.google.android.gms.common.api.GoogleApiActivity

com.bytedance.sdk.advert.PopActivity

com.bytedance.sdk.advert.BannerActivity

com.bytedance.sdk.advert.AdvertActivity

android.intent.action.MAIN

com.ss.android.socialbase.appdownloader.view.DownloadSizeLimitActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.downloadlib.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

Android Permissions

589d6fa413e083640fc16ce9afec65b2_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

com.tjcalendar.permission.C2D_MESSAGE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.BLUETOOTH

com.google.android.c2dm.permission.RECEIVE

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.RECEIVE_USER_PRESENT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.EXPAND_STATUS_BAR

android.permission.READ_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

589d6fa413e083640fc16ce9afec65b2_JaffaCakes118

com.tjcalendar.MainActivity

com.facebook.react.devsupport.DevSettingsActivity

com.tjcalendar.wxapi.WXEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.yalantis.ucrop.UCropActivity

com.google.android.gms.common.api.GoogleApiActivity

com.bytedance.sdk.advert.PopActivity

com.bytedance.sdk.advert.BannerActivity

com.bytedance.sdk.advert.AdvertActivity

com.ss.android.socialbase.appdownloader.view.DownloadSizeLimitActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.downloadlib.activity.TTDelegateActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.dieam.reactnativepushnotification.modules.RNPushNotificationRegistrationService

com.dieam.reactnativepushnotification.modules.RNPushNotificationListenerServiceGcm

com.dieam.reactnativepushnotification.modules.RNPushNotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.components.ComponentDiscoveryService

com.google.firebase.iid.FirebaseInstanceIdService

com.ss.android.socialbase.downloader.notification.DownloadNotificationService

com.ss.android.socialbase.downloader.downloader.DownloadService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.impls.DownloadHandleService

com.ss.android.socialbase.appdownloader.DownloadHandlerService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.bytedance.tea.crash.upload.CrashUploadService

com.google.android.gms.gcm.GcmReceiver

com.dieam.reactnativepushnotification.modules.RNPushNotificationPublisher

com.dieam.reactnativepushnotification.modules.RNPushNotificationBootEventReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.ss.android.downloadlib.core.download.DownloadReceiver

com.bytedance.embedapplog.collector.Collector

android.support.v4.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

com.bytedance.sdk.openadsdk.TTFileProvider

com.bytedance.sdk.openadsdk.multipro.TTMultiProvider

Android Permissions

589d6fa413e083640fc16ce9afec65b2_JaffaCakes118