General

  • Target

    5b212b3ffe899bfb4554a8351e4fe419_JaffaCakes118

  • Size

    16.7MB

  • MD5

    5b212b3ffe899bfb4554a8351e4fe419

  • SHA1

    2e87b58d992ed2c5404d744024c2348c74ea6bb3

  • SHA256

    9c93158f56a255868458d185ef4f64d7f98159b71d4735672ce34c68c2624d7e

  • SHA512

    c7af06f82cdf7b4b0c280f06e5cb67e3249928622ce8dc07c7b81deb49eac45daae3894b64016f1779e500fa8045f248474cf4a424155f8bb43b17d984699544

  • SSDEEP

    196608:XvUWwc8Xq4cwjMBsTCTqrwH0zck/RrFbCoQdRecAd03LcfIN6SLo67BFBLjDrPEK:tM0wzfBzgXAdBoPLoS/ZYeMqSzK

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 7 IoCs

Files

  • 5b212b3ffe899bfb4554a8351e4fe419_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:mips

    com.dangbeimarket

    com.dangbeimarket.activity.WelcomeActivity


Android Permissions

5b212b3ffe899bfb4554a8351e4fe419_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.GET_TASKS

android.permission.INSTALL_PACKAGES

android.permission.DELETE_PACKAGES

android.permission.CLEAR_APP_USER_DATA

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.READ_FRAME_BUFFER

android.permission.WAKE_LOCK

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BROADCAST_STICKY

com.dangbeimarket.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_NETWORK_STATE

com.dangbeimarket.permission.MIPUSH_RECEIVE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.EXPAND_STATUS_BAR

baidu.push.permission.WRITE_PUSHINFOPROVIDER.com.dangbeimarket