General

  • Target

    68dd8da01f595c5af5114c9fbc6c8fbd_JaffaCakes118

  • Size

    9.6MB

  • MD5

    68dd8da01f595c5af5114c9fbc6c8fbd

  • SHA1

    4fd585284ed5e77c48e6ecbc60d66f2d20be3a65

  • SHA256

    70c6d251a723e78f154939a7e2cdf5cd9016d6f7c55e4f2ce491410643d09a7e

  • SHA512

    44c4129ec58e5bcc828e26f9878268e2ac9077eab61ce4c4d580e5c1fe33ce00b35ea1dcaf4fdfe3fede94ae14c28579be2eba1755e02d485fd2fabbdfcfb9ab

  • SSDEEP

    196608:zXRvmn2F5F1IuE4ZuTMfbF323RDCmpyOOuLN9cxDKCvRUE+xPnQVRBIXdJzkhM:zhvc2F5F1IuE4uMDMhDxyOhhqdSNnQO9

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • 68dd8da01f595c5af5114c9fbc6c8fbd_JaffaCakes118
    .apk android arch:arm64 arch:arm arch:x86 arch:x64

    com.luyun.quicklygrab

    com.luyun.quicklygrab.ui.SplashActivity


  • BannerPlugin-3.4.apk
    .apk android

    com.alimama.mobile.sdk.banner


  • CommonPlugin-5.0.apk
    .apk android

    com.taobao.munion.plugin.cm


  • WelcomePlugin-3.6.apk
    .apk android

    com.alimama.mobile.sdk.welcome


  • gdtadv2.jar
    .apk android

Android Permissions

68dd8da01f595c5af5114c9fbc6c8fbd_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_LOGS

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION

android.permission.RUN_INSTRUMENTATION