6a0ea91dc9d03804c4b44e68c9620fce_JaffaCakes118

General

Target

6a0ea91dc9d03804c4b44e68c9620fce_JaffaCakes118
Size

20.0MB
MD5

6a0ea91dc9d03804c4b44e68c9620fce
SHA1

74d02e97ba09a72c2c28e5ccae7ce22182ab6461
SHA256

25e5152fe12d3a3d01b20f72f6791ac3f0caeadc6fdc718071dbf1aab2823313
SHA512

7a2d6cd733582a7da2eadb390d3874eb0cd14faca0ec8ab674d2eb5777cb4b4514b0f54877ac3c44ab42a527866235123099ce66c06f0027ae6ddd1ff88bcb8f
SSDEEP

393216:nlChdgfKG5pG9QMuk9R5egv5HuVcCTBQoa9vRXh3/NaxrfdOimy8pmlI9uY:nIdAKGTG9JFvv5O932ZXd/NaRf9mECQY

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 3 IoCs

Processes:

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

6a0ea91dc9d03804c4b44e68c9620fce_JaffaCakes118
.apk android arch:arm

com.nssoft.vplayer

com.nssoft.vplayer.SplashActivity

Activities

com.nssoft.vplayer.SplashActivity

android.intent.action.MAIN

com.nssoft.vplayer.PlayerMainActivity

android.intent.action.CREATE_SHORTCUT

com.nssoft.vplayer.PlayerActivity

android.intent.action.VIEW

com.ninexiu.au.ui.SplashUI

android.intent.action.MAIN

com.ninexiu.au.ui.LiveRoomUI

com.ninexiu.au.liveroomactivity

com.ninexiu.au.ui.AdActivity

com.ninexiu.sixninexiu.adactivity

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.VIBRATE

Receivers

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.nssoft.vplayer.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

com.umeng.message.UmengService

com.nssoft.vplayer.intent.action.START
com.nssoft.vplayer.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

com.water.mgr.DownloadFromNotifyService

com.water.mgr.DownloadFromNotifyService
alipay_msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

6a0ea91dc9d03804c4b44e68c9620fce_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.VIBRATE

Sharing

General

Malware Config

Signatures

Files

com.nssoft.vplayer

com.nssoft.vplayer.SplashActivity

Activities

com.nssoft.vplayer.SplashActivity

com.nssoft.vplayer.PlayerMainActivity

com.nssoft.vplayer.PlayerActivity

com.ninexiu.au.ui.SplashUI

com.ninexiu.au.ui.LiveRoomUI

com.ninexiu.au.ui.AdActivity

com.tencent.tauth.TAuthView

com.tencent.tauth.AuthActivity

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

Permissions

Receivers

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.water.mgr.DownloadFromNotifyService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

6a0ea91dc9d03804c4b44e68c9620fce_JaffaCakes118