58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118
Size 22.1MB
Sample240519-gf8tcsda7z
SHA256 4f02037fadb849d959136ed36bc3e2c189d6769285d4c3d28e4bfdfc7512f733
MD5 58d4a608fb38475b210ac75fef1ccbfe
SHA1 d17ed3d06493947fbf2ddf32abc300be6d431a16
SHA512 723c0ef9500b4c5a10fae756817f75af1a54c6d545b61fb255e1826e2a7e6cdde2937b9c10ec04081dfba67f416ed3f05a10036163ea3b30f9debab0dad23066
SSDEEP 393216:EO6Vd9USONOKrvq9u/8Vc3EE0rasvRlQmW4amT8kzIbczy/klQXANZFeuj:ERVd9i7qI/LEE0X1jPTvzIPkuQNeU
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118

.apk 22.1MB

58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118

SHA256 4f02037fadb849d959136ed36bc3e2c189d6769285d4c3d28e4bfdfc7512f733
MD5 58d4a608fb38475b210ac75fef1ccbfe
SHA1 d17ed3d06493947fbf2ddf32abc300be6d431a16
SHA512 723c0ef9500b4c5a10fae756817f75af1a54c6d545b61fb255e1826e2a7e6cdde2937b9c10ec04081dfba67f416ed3f05a10036163ea3b30f9debab0dad23066
SSDEEP 393216:EO6Vd9USONOKrvq9u/8Vc3EE0rasvRlQmW4amT8kzIbczy/klQXANZFeuj:ERVd9i7qI/LEE0X1jPTvzIPkuQNeU
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.iyoudoock.citymine

com.iyoudoock.citymine.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET com.android.launcher.permission.READ_SETTINGS android.permission.WAKE_LOCK android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.BLUETOOTH android.permission.CHANGE_CONFIGURATION android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.RECORD_AUDIO android.permission.CAMERA android.permission.MODIFY_AUDIO_SETTINGS android.permission.RECEIVE_BOOT_COMPLETED android.permission.GET_TASKS android.permission.READ_LOGS android.permission.CHANGE_CONFIGURATION android.permission.CALL_PHONE android.permission.DISABLE_KEYGUARD android.permission.SET_TIME_ZONE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE

com.iyoudoock.activity.WelcomeActivity

android.intent.action.MAIN

com.iyoudoock.activity.MapActivity

com.iyoudoock.activity.PersonActivity

com.iyoudoock.activity.FirstCategoryActivity

com.iyoudoock.activity.SecondCategoryActivity

com.iyoudoock.activity.ThridCategoryActivity

com.iyoudoock.activity.LoginActivity

com.iyoudoock.activity.RegisterOneActivity

com.iyoudoock.activity.RegisterAActivity

com.iyoudoock.activity.RegisterB3Activity

com.iyoudoock.activity.RegisterB1B2Activity

com.iyoudoock.activity.RegisterCActivity

com.iyoudoock.activity.SendOrderActivity

com.iyoudoock.activity.AcceptOrderActivity

com.iyoudoock.activity.OrderFailureActivity

com.iyoudoock.activity.OrderCancleActivity

com.iyoudoock.activity.OrderInformationBActivity

com.iyoudoock.activity.OrderListActivity

com.iyoudoock.activity.FirstBCategoryActivity

com.iyoudoock.activity.SecondBCategoryActivity

com.iyoudoock.activity.AddBCategoryActivity

com.iyoudoock.activity.EditPersonBinformation

com.iyoudoock.activity.EditPersonCinformation

com.iyoudoock.activity.EditPersonB3information

com.iyoudoock.activity.DeleteDialogActivity

com.iyoudoock.activity.OrderInformationList1Activity

com.iyoudoock.activity.OrderInformationList3Activity

com.iyoudoock.activity.GoodDetailActivity

com.iyoudoock.activity.ShareActivity

com.iyoudoock.activity.MyOrderPersonAActivity

com.iyoudoock.activity.OrderDetialAActivity

com.iyoudoock.activity.MyCollectActivity

com.iyoudoock.activity.MyBlackListActivity

com.iyoudoock.activity.IntegralMallActivity

com.iyoudoock.activity.InformationActivity

com.iyoudoock.activity.InformationDetialActivity

com.iyoudoock.activity.SettingActivity

com.iyoudoock.activity.EditPersonAinformation

com.iyoudoock.activity.ComplaintActivity

com.iyoudoock.activity.AdviceActivity

com.iyoudoock.activity.GetPWDOneActivity

com.iyoudoock.activity.GetPWDTwoActivity

com.iyoudoock.activity.GuideActivity

com.iyoudoock.activity.AboutUs

com.iyoudoock.activity.AddBcategoryWGActivity

com.iyoudoock.activity.MyOrderPersonaBActivity

com.iyoudoock.activity.SearchActivity

com.iyoudoock.activity.InputAddressActivity

com.iyoudoock.activity.ChangeIdentityActivity

com.iyoudoock.activity.ChangeIdentitySuccessActivity

com.iyoudoock.activity.MyOrderListBThreeActivity

com.iyoudoock.activity.LoginOutActivity

com.iyoudoock.activity.TransitActivity

com.umeng.update.UpdateDialogActivity

cn.jpush.android.ui.PushActivity

com.iyoudoock.activity.PersonCActivity

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.iyoudoock.citymine.wxapi.WXEntryActivity

Android Permissions

58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118

Permissions

com.iyoudoock.citymine.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.CHANGE_CONFIGURATION

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.READ_LOGS

android.permission.CHANGE_CONFIGURATION

Sharing

General

Malware Config

Signatures

File Explorer

58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118

com.iyoudoock.activity.WelcomeActivity

com.iyoudoock.activity.MapActivity

com.iyoudoock.activity.PersonActivity

com.iyoudoock.activity.FirstCategoryActivity

com.iyoudoock.activity.SecondCategoryActivity

com.iyoudoock.activity.ThridCategoryActivity

com.iyoudoock.activity.LoginActivity

com.iyoudoock.activity.RegisterOneActivity

com.iyoudoock.activity.RegisterAActivity

com.iyoudoock.activity.RegisterB3Activity

com.iyoudoock.activity.RegisterB1B2Activity

com.iyoudoock.activity.RegisterCActivity

com.iyoudoock.activity.SendOrderActivity

com.iyoudoock.activity.AcceptOrderActivity

com.iyoudoock.activity.OrderFailureActivity

com.iyoudoock.activity.OrderCancleActivity

com.iyoudoock.activity.OrderInformationBActivity

com.iyoudoock.activity.OrderListActivity

com.iyoudoock.activity.FirstBCategoryActivity

com.iyoudoock.activity.SecondBCategoryActivity

com.iyoudoock.activity.AddBCategoryActivity

com.iyoudoock.activity.EditPersonBinformation

com.iyoudoock.activity.EditPersonCinformation

com.iyoudoock.activity.EditPersonB3information

com.iyoudoock.activity.DeleteDialogActivity

com.iyoudoock.activity.OrderInformationList1Activity

com.iyoudoock.activity.OrderInformationList3Activity

com.iyoudoock.activity.GoodDetailActivity

com.iyoudoock.activity.ShareActivity

com.iyoudoock.activity.MyOrderPersonAActivity

com.iyoudoock.activity.OrderDetialAActivity

com.iyoudoock.activity.MyCollectActivity

com.iyoudoock.activity.MyBlackListActivity

com.iyoudoock.activity.IntegralMallActivity

com.iyoudoock.activity.InformationActivity

com.iyoudoock.activity.InformationDetialActivity

com.iyoudoock.activity.SettingActivity

com.iyoudoock.activity.EditPersonAinformation

com.iyoudoock.activity.ComplaintActivity

com.iyoudoock.activity.AdviceActivity

com.iyoudoock.activity.GetPWDOneActivity

com.iyoudoock.activity.GetPWDTwoActivity

com.iyoudoock.activity.GuideActivity

com.iyoudoock.activity.AboutUs

com.iyoudoock.activity.AddBcategoryWGActivity

com.iyoudoock.activity.MyOrderPersonaBActivity

com.iyoudoock.activity.SearchActivity

com.iyoudoock.activity.InputAddressActivity

com.iyoudoock.activity.ChangeIdentityActivity

com.iyoudoock.activity.ChangeIdentitySuccessActivity

com.iyoudoock.activity.MyOrderListBThreeActivity

com.iyoudoock.activity.LoginOutActivity

com.iyoudoock.activity.TransitActivity

com.umeng.update.UpdateDialogActivity

cn.jpush.android.ui.PushActivity

com.iyoudoock.activity.PersonCActivity

com.umeng.socialize.view.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.iyoudoock.citymine.wxapi.WXEntryActivity

com.iyoudoock.common.OpenVoiceService

com.umeng.update.net.DownloadingService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.DaemonService

com.baidu.location.f

cn.jpush.android.service.PushService

com.iyoudoock.citymine.NetState

com.iyoudoock.citymine.ClearDataRecever

com.iyoudoock.common.MyReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

Android Permissions

58d4a608fb38475b210ac75fef1ccbfe_JaffaCakes118