General

Malware Config

Signatures

Files

• 65d62b4677d6c5892a3f7ad4d1a80968_JaffaCakes118

  .apk android arch:arm arch:mips arch:x86

  com.mfw.roadbook

  com.mfw.roadbook.main.StartActivity

  
  

  Activities

  com.mfw.roadbook.main.StartActivity

  android.intent.action.MAIN

  
  

  com.mfw.roadbook.main.MainActivity

  android.intent.action.VIEW

  
  

  Permissions

  android.permission.RECEIVE_BOOT_COMPLETED

  android.permission.MOUNT_UNMOUNT_FILESYSTEMS

  android.permission.WRITE_EXTERNAL_STORAGE

  android.permission.INTERNET

  android.permission.READ_PHONE_STATE

  android.permission.ACCESS_NETWORK_STATE

  android.permission.ACCESS_WIFI_STATE

  android.permission.READ_LOGS

  android.permission.WRITE_SETTINGS

  android.permission.ACCESS_COARSE_LOCATION

  android.permission.GET_ACCOUNTS

  android.permission.MANAGE_ACCOUNTS

  android.permission.ACCESS_FINE_LOCATION

  android.permission.VIBRATE

  android.permission.CHANGE_NETWORK_STATE

  android.permission.CHANGE_WIFI_STATE

  android.permission.RECORD_AUDIO

  android.permission.WAKE_LOCK

  android.permission.BLUETOOTH

  android.permission.GET_TASKS

  com.android.launcher.permission.INSTALL_SHORTCUT

  android.permission.BROADCAST_STICKY

  com.google.android.providers.gsf.permission.READ_GSERVICES

  android.permission.DISABLE_KEYGUARD

  android.permission.CAMERA

  android.permission.VIBRATE

  Receivers

  com.mfw.roadbook.receiver.MfwReceiver

  com.mfw.roadbook.toWeb

  com.mfw.roadbook.startX

  com.mfw.roadbook.shareCallBack

  com.mfw.roadbook.deleteNotify

  
  

  com.mfw.roadbook.baidupush.BaiduPushReceiver

  com.baidu.android.pushservice.action.MESSAGE

  com.baidu.android.pushservice.action.RECEIVE

  com.baidu.android.pushservice.action.notification.CLICK

  
  

  com.baidu.android.pushservice.PushServiceReceiver

  android.intent.action.BOOT_COMPLETED

  android.net.conn.CONNECTIVITY_CHANGE

  com.baidu.android.pushservice.action.notification.SHOW

  com.baidu.android.pushservice.action.media.CLICK

  android.intent.action.MEDIA_MOUNTED

  android.intent.action.USER_PRESENT

  android.intent.action.ACTION_POWER_CONNECTED

  android.intent.action.ACTION_POWER_DISCONNECTED

  
  

  com.baidu.android.pushservice.RegistrationReceiver

  com.baidu.android.pushservice.action.METHOD

  com.baidu.android.pushservice.action.BIND_SYNC

  android.intent.action.PACKAGE_REMOVED

  
  

  com.mfw.roadbook.widget.TravelNoteWidget

  android.appwidget.action.APPWIDGET_UPDATE

  
  

  Services

  com.baidu.android.pushservice.PushService

  com.baidu.android.pushservice.action.PUSH_SERVICE

  
  
• plugin-deploy.jar

  .apk android

Android Permissions