58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118
Size 6.3MB
Sample240519-flea9sbd4y
SHA256 3b82b6d382f1df2cf2eb9c5b3e5615a5785e39bf9cb2deef7b550d0f26b2df04
MD5 58a6a3f41ec345b6a1a43b53ec570667
SHA1 c700d10819360d5586376b131d4256df66e30122
SHA512 97682cdffc5dbfe4f47463ae5baacac44ffc7916992a662652d4815d5e59f8ab5cd5b183e0922ecfc53a2e6960e1a6cd2a48260113f026dcc11e3df4da9a4389
SSDEEP 196608:23oyBapzp/RfF81kbL/tWhNOvTYCqVImr3:GKNp/01kbLQqqr3
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

.apk 6.3MB
__xadsdk__remote__final__.jar

.apk 83KB
gdtadv2.jar

.apk 142KB

58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

SHA256 3b82b6d382f1df2cf2eb9c5b3e5615a5785e39bf9cb2deef7b550d0f26b2df04
MD5 58a6a3f41ec345b6a1a43b53ec570667
SHA1 c700d10819360d5586376b131d4256df66e30122
SHA512 97682cdffc5dbfe4f47463ae5baacac44ffc7916992a662652d4815d5e59f8ab5cd5b183e0922ecfc53a2e6960e1a6cd2a48260113f026dcc11e3df4da9a4389
SSDEEP 196608:23oyBapzp/RfF81kbL/tWhNOvTYCqVImr3:GKNp/01kbLQqqr3
MD5 SHA1 SHA512 SSDEEP

com.lianzainovel

Android Permissions

58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

Permissions

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.REORDER_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.READ_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.VIBRATE

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

com.baidu.mobads.AppActivity

com.qihoo.util.CommonActivity

com.qihoo.ls.LsActivity

com.baidu.mobad.feeds.BaiduActivity

com.qq.e.ads.ADActivity

com.lianzainovel.activity.SplashActivity

com.lianzainovel.activity.HomeActivity

com.lianzainovel.activity.ReadingActivity

com.lianzainovel.activity.CataloguesActivity

com.lianzainovel.activity.SettingActivity

com.lianzainovel.activity.DisclaimerActivity

com.lianzainovel.activity.ReadingSettingActivity

com.lianzainovel.activity.SettingMoreActivity

com.lianzainovel.activity.FindBookDetailActivity

com.lianzainovel.activity.DownloadErrorActivity

com.lianzainovel.activity.SearchBookActivity

com.lianzainovel.activity.CoverPageActivity

com.lianzainovel.activity.BookEndActivity

com.lianzainovel.activity.DownloadManagerActivity

com.lianzainovel.activity.GuideActivity

net.lzbook.kit.ad.SwitchSplashAdActivity

com.alibaba.sdk.android.feedback.windvane.CustomHybirdActivity

com.alibaba.sdk.android.feedback.impl.ErrorPageActivity

com.amap.api.location.APSService

com.qihoo.util.QhJobService

com.qihoo.util.CommonService

com.qihoo.util.CommonService2

com.qihoo.ls.SoService

com.qq.e.comm.DownloadService

com.baidu.android.pushservice.PushService

com.baidu.android.pushservice.CommandService

net.lzbook.kit.utils.update.DownloadIntentService

net.lzbook.kit.book.component.service.DownloadService

net.lzbook.kit.book.component.service.CheckNovelUpdateService

net.lzbook.kit.book.component.service.DeleteBookIntentService

com.alibaba.mtl.appmonitor.AppMonitorService

com.qihoo.util.CommonReceiver

com.lianzainovel.receiver.PushClickReceiver

com.lianzainovel.receiver.DownBookClickReceiver

com.lianzainovel.receiver.BaiduPushReceiver

com.baidu.android.pushservice.PushServiceReceiver

com.baidu.android.pushservice.RegistrationReceiver

com.lianzainovel.receiver.ConnectionChangeReceiver

com.lianzainovel.receiver.BootReceiver

com.alibaba.sdk.android.feedback.impl.NetworkChangeReceiver

com.qihoo.util.CommonProvider

__xadsdk__remote__final__.jar

gdtadv2.jar

Android Permissions

58a6a3f41ec345b6a1a43b53ec570667_JaffaCakes118

xadsdkremotefinal.jar