65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

General

Target
65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118
Size 12.3MB
Sample240522-dab1naab2v
SHA256 6e66a57fe30b71e368709c3cd01c272927978660aff89b3504a9d35564dc490d
MD5 65bf8b2b45fdfeac5d705dc6c445c700
SHA1 5e0db808d30cfe33dc413995f220d03f05ec24d7
SHA512 d934c63eb881d06a01414302901e650e080266e5104de6c0ba2b59ea162f5be8001ca2dcd6461dd5aaddb1a64962981c15363b62b0a33a8f918cd9708279e279
SSDEEP 393216:Rm2jGldbVTVATySzGgQKR/Cq5rZWIQ+jGwm:RhU/VAOSigQo/nbnZiwm
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

.apk 12.3MB

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

SHA256 6e66a57fe30b71e368709c3cd01c272927978660aff89b3504a9d35564dc490d
MD5 65bf8b2b45fdfeac5d705dc6c445c700
SHA1 5e0db808d30cfe33dc413995f220d03f05ec24d7
SHA512 d934c63eb881d06a01414302901e650e080266e5104de6c0ba2b59ea162f5be8001ca2dcd6461dd5aaddb1a64962981c15363b62b0a33a8f918cd9708279e279
SSDEEP 393216:Rm2jGldbVTVATySzGgQKR/Cq5rZWIQ+jGwm:RhU/VAOSigQo/nbnZiwm
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.app005.and

Android Permissions

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.NFC

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_USER_PRESENT

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SETTINGS

android.permission.INTERNET

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.VIBRATE

com.app005.and.permission.JPUSH_MESSAGE

android.permission.CHANGE_NETWORK_STATE

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.uzmap.pkg.uzmodules.audioCover.ScreenLockActivity

com.uzmap.pkg.uzmodules.uzFNScanner.Zxing.CaptureActivity

com.uzmap.pkg.uzmodules.uzimageBrowser.activity.GalleryActivity

com.uzmap.pkg.uzmodules.uzimageBrowser.activity.ImageActivity

com.pingplusplus.android.PaymentActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.unionpay.uppay.PayActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.uzmap.pkg.uzmodules.uzVideoPlayer.VideoActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.uzmap.pkg.uzmodules.uzSina.activity.WBAuthActivity

com.uzmap.pkg.uzmodules.uzSina.activity.WBShareActivity

.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.uzmap.pkg.uzmodules.audioCover.ListenScreenStateService

com.baidu.location.f

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

Sharing

General

Malware Config

Signatures

File Explorer

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118

com.uzmap.pkg.EntranceActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.uzmap.pkg.uzmodules.audioCover.ScreenLockActivity

com.uzmap.pkg.uzmodules.uzFNScanner.Zxing.CaptureActivity

com.uzmap.pkg.uzmodules.uzimageBrowser.activity.GalleryActivity

com.uzmap.pkg.uzmodules.uzimageBrowser.activity.ImageActivity

com.pingplusplus.android.PaymentActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.unionpay.uppay.PayActivity

com.tencent.connect.common.AssistActivity

com.apicloud.qqplus.LoginActivity

com.apicloud.qqplus.ShareActivity

com.tencent.tauth.AuthActivity

com.tencent.open.yyb.AppbarActivity

com.tencent.connect.avatar.ImageActivity

com.uzmap.pkg.uzmodules.uzVideoPlayer.VideoActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.uzmap.pkg.uzmodules.uzSina.activity.WBAuthActivity

com.uzmap.pkg.uzmodules.uzSina.activity.WBShareActivity

.wxapi.WXEntryActivity

com.uzmap.pkg.uzsocket.UPnsService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.uzmap.pkg.uzmodules.audioCover.ListenScreenStateService

com.baidu.location.f

com.uzmap.pkg.uzapp.UPExtraBridge

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.open.apicloud.jpush.JPushReceiver

com.uzmap.pkg.uzapp.UProvider

Android Permissions

65bf8b2b45fdfeac5d705dc6c445c700_JaffaCakes118