7345c2a5bd0f72e638282b13d17d2e59_JaffaCakes118

General

Target

7345c2a5bd0f72e638282b13d17d2e59_JaffaCakes118
Size

21.6MB
MD5

7345c2a5bd0f72e638282b13d17d2e59
SHA1

d6dd918fe1044ee4c212119003e4cad1bee7a7fb
SHA256

dce9cf177254e04cbd0ddd8e2d676474e0cc8097a90cf7dddb711da462758580
SHA512

61eed75f6d942d18d29cb13986636d012d8b83207b9b33d5031cdd15289e2b7409a4cc79ef4e95284a885815f9ad535da60b736b93c248697104213ebab06f75
SSDEEP

393216:Hm2uSVAedzFyoVqJ/YGMFFp9Y5IQHy2EnFiF3v+RtM46j18:5nVxdkqqBYGMFDq5HMF6/+3v6j18

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

Files

7345c2a5bd0f72e638282b13d17d2e59_JaffaCakes118
.apk android arch:arm

com.xunlei.downloadprovider

com.xunlei.downloadprovider.loading.LaunchActivity

Activities

com.xunlei.downloadprovider.loading.LaunchActivity

android.intent.action.MAIN

com.xunlei.downloadprovider.frame.MainTabActivity

android.intent.action.VIEW

com.xunlei.downloadprovider.bho.ThunderTaskBHOActivity

com.xunlei.downloadprovider.ADD_TASK

com.xunlei.downloadprovider.bho.ScanCodeResultActivity

com.xunlei.downloadprovider.ADD_TASK
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

com.xunlei.downloadprovider.qrcode.CameraActivity

android.intent.action.MAIN

com.xunlei.downloadprovider.download.create.DownloadBtFileExplorerActivity

android.intent.action.VIEW

com.xunlei.downloadprovider.vod.VodPlayerActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.xunlei.downloadprovider.vod.VodProxyActivity

android.intent.action.MAIN

com.xunlei.downloadprovider.web.DetailPageBrowserActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.xunlei.downloadprovider.web.base.ShortMovieDetailActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.xunlei.downloadprovider.thirdpart.ThirdPartActivity

com.xulei.downloadprovider.thirdpart.start

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_MULTICAST_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.WRITE_SETTINGS
android.permission.READ_SETTINGS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.DISABLE_KEYGUARD
android.permission.READ_EXTERNAL_STORAGE
android.permission.MODIFY_AUDIO_SETTINGS

Receivers

com.xunlei.downloadprovider.app.ExternBroadcastReceiver

com.xunlei.downloadprovider.app.ExternBroadcast

com.xunlei.downloadprovider.notification.ApkReceiver

com.xunlei.action.APK_CLICK

com.xunlei.downloadprovider.notification.CommonFileReceiver

com.xunlei.action.COMMON_FILE_CLICK
com.xunlei.action.COMMON_MERGE_FILES_CLICK
com.xunlei.action.COMMON_DELETE_NOTI_CLICK

Services

com.xunlei.downloadprovider.service.DownloadService

com.xunlei.downloadprovider.service.DownloadServiceAction

com.uc.addon.sdk.remote.AddonService

com.uc.browser.action.Addon

com.xunlei.downloadprovider.thirdpart.thirdpartycallplay.ServiceThirdPartyCallPlay

com.xunlei.ThirdPartyCallPlay
dynamic1119.jar
.apk android
xldlnapass.jar
.apk android

org.fourthline.cling

Android Permissions

7345c2a5bd0f72e638282b13d17d2e59_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.DISABLE_KEYGUARD

android.permission.READ_EXTERNAL_STORAGE

android.permission.MODIFY_AUDIO_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.xunlei.downloadprovider

com.xunlei.downloadprovider.loading.LaunchActivity

Activities

com.xunlei.downloadprovider.loading.LaunchActivity

com.xunlei.downloadprovider.frame.MainTabActivity

com.xunlei.downloadprovider.bho.ThunderTaskBHOActivity

com.xunlei.downloadprovider.bho.ScanCodeResultActivity

com.xunlei.downloadprovider.qrcode.CameraActivity

com.xunlei.downloadprovider.download.create.DownloadBtFileExplorerActivity

com.xunlei.downloadprovider.vod.VodPlayerActivity

com.xunlei.downloadprovider.vod.VodProxyActivity

com.xunlei.downloadprovider.web.DetailPageBrowserActivity

com.xunlei.downloadprovider.web.base.ShortMovieDetailActivity

com.tencent.tauth.AuthActivity

com.xunlei.downloadprovider.thirdpart.ThirdPartActivity

Permissions

Receivers

com.xunlei.downloadprovider.app.ExternBroadcastReceiver

com.xunlei.downloadprovider.notification.ApkReceiver

com.xunlei.downloadprovider.notification.CommonFileReceiver

Services

com.xunlei.downloadprovider.service.DownloadService

com.uc.addon.sdk.remote.AddonService

com.xunlei.downloadprovider.thirdpart.thirdpartycallplay.ServiceThirdPartyCallPlay

org.fourthline.cling

Android Permissions

7345c2a5bd0f72e638282b13d17d2e59_JaffaCakes118