68856ee5eb02c752d72331083217d265_JaffaCakes118

General

Target

68856ee5eb02c752d72331083217d265_JaffaCakes118
Size

30.6MB
MD5

68856ee5eb02c752d72331083217d265
SHA1

fafbd93e049f1136787aeb4f3b4ca25e4b2347f9
SHA256

e773b7f5a8fddb33bfa01fab77790e877873ba349a1afdc530b3bf403cc76397
SHA512

bc2b0ab293ab8d241192e988aea341534d6974b340063cbcfa41f46056b91755372e6ec86a55928f70424056294bff8909200317764c28b3ace34b4f3504006e
SSDEEP

786432:deal5Z/sIVf4Xsz9r3RnfEYypD0h+t1grd:dT/Z/sb0r3lEJpIwru

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

Processes:

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

68856ee5eb02c752d72331083217d265_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:x86 arch:x64

mobi.infolife.ezweather.widget.weather.location.app.pro

mobi.info.ezweather.mahawidget.activity.WeatherMainActivity

Activities

mobi.info.ezweather.mahawidget.activity.WeatherMainActivity

android.intent.action.MAIN
com.amber.lib.locker.start.main
com.amber.lib.widget.click.rootview
com.amber.lib.basewidget.notification.start.main
com.amber.lib.newspush.start.main

com.amber.lib.basewidget.otheractivity.settings.SettingsActivity

com.amber.lib.locker.start.setting

com.amber.lib.widget.store.ui.store.AmberWidgetStoreActivity

com.amber.lib.widget.start.store

com.amber.lib.store.activity.WidgetStoreActivity

com.amber.lib.widget.start.store

com.amber.lib.widget.AddWidgetSuccessActivity

android.appwidget.action.APPWIDGET_CONFIGURE

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SET_WALLPAPER
android.permission.RECEIVE_BOOT_COMPLETED
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.c2dm.permission.RECEIVE

Receivers

com.amber.lib.basewidget.pop.receiver.NotificationEventReceiver

notification.action.weather_condition_click
notification.action.weather_condition_cancel
notification.action.temp_change_push_click
notification.action.aqi_click
notification.action.aqi_cancel

com.amber.lib.basewidget.lwp.receiver.PackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.MY_PACKAGE_REPLACED

com.amber.lib.store.receiver.ApplyStoreWidgetReceiver

store.apply.widget

com.amber.lib.widget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.appwidget.action.APPWIDGET_DELETED
android.appwidget.action.APPWIDGET_UPDATE_OPTIONS
android.appwidget.action.APPWIDGET_DISABLED
android.appwidget.action.APPWIDGET_RESTORED

com.amber.lib.widget.render.WidgetActionReceiver

widget.action.apply_for_amber
widget.action.download_amber
widget.action.more_skin

com.amber.lib.applive.assist.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

com.amber.lib.applive.assist.receiver.OtherReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.TIME_TICK

com.amber.lib.appuser.ReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.amber.lib.weatherdata.core.SDKSyncBroadcastReceiver

com.amber.lib.weatherdata.sync.Data
com.amber.lib.weatherdata.sync.WeatherUnit
com.amber.lib.weatherdata.sync.SDKConfig

com.amber.lib.weatherdata.core.SDKInstallBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

Services

com.amber.lib.applive.assist.gcm.PlatformGcmService

com.google.android.gms.gcm.ACTION_TASK_READY

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.iid.FirebaseInstanceIdService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

68856ee5eb02c752d72331083217d265_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SET_WALLPAPER

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE

Sharing

General

Malware Config

Signatures

Files

mobi.infolife.ezweather.widget.weather.location.app.pro

mobi.info.ezweather.mahawidget.activity.WeatherMainActivity

Activities

mobi.info.ezweather.mahawidget.activity.WeatherMainActivity

com.amber.lib.basewidget.otheractivity.settings.SettingsActivity

com.amber.lib.widget.store.ui.store.AmberWidgetStoreActivity

com.amber.lib.store.activity.WidgetStoreActivity

com.amber.lib.widget.AddWidgetSuccessActivity

Permissions

Receivers

com.amber.lib.basewidget.pop.receiver.NotificationEventReceiver

com.amber.lib.basewidget.lwp.receiver.PackageReceiver

com.amber.lib.store.receiver.ApplyStoreWidgetReceiver

com.amber.lib.widget.WidgetProvider

com.amber.lib.widget.render.WidgetActionReceiver

com.amber.lib.applive.assist.BootCompletedReceiver

com.amber.lib.applive.assist.receiver.OtherReceiver

com.amber.lib.appuser.ReferrerReceiver

com.amber.lib.weatherdata.core.SDKSyncBroadcastReceiver

com.amber.lib.weatherdata.core.SDKInstallBroadcastReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

Services

com.amber.lib.applive.assist.gcm.PlatformGcmService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.iid.FirebaseInstanceIdService

Android Permissions

68856ee5eb02c752d72331083217d265_JaffaCakes118