76da8c1f99e87aa22f1a57bda33ca421_JaffaCakes118

General

Target

76da8c1f99e87aa22f1a57bda33ca421_JaffaCakes118
Size

8.4MB
MD5

76da8c1f99e87aa22f1a57bda33ca421
SHA1

cfe80fca82258c9f06e7a06e4950e9bf855549ff
SHA256

65f70064fff87ad3ae45e6be321d8797e7fd92d6958fce0234e9b77bbde63646
SHA512

c9948da84c60013883e7180a4b1d44abd38498880647b9aeed721f156f8761d611e07836c1a5915a6aaa615a1b021bca946ea69cc1144d75a77f4c99ff460523
SSDEEP

196608:JCuLI+/xY+eM9D/hNIOH8pM4lw8qSk0QRnlwhYlMORSeAl:JCuLIkY+v9DZaRkHRlwhCMjem

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

76da8c1f99e87aa22f1a57bda33ca421_JaffaCakes118
.apk android arch:arm

com.thegame.diamondcrushcn

com.thegame.diacrush.DiamondCrush

Activities

com.thegame.diacrush.DiamondCrush

android.intent.action.MAIN

com.yt.apkrun.RunnerRuntimeActivity

yt_uulib_apkrun_intent.activity

Permissions

android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_APN_SETTINGS
android.permission.VIBRATE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.GET_TASKS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_MOCK_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.WAKE_LOCK

Receivers

com.lyhtgh.pay.receiver.BootReceiver

android.intent.action.BATTERY_CHANGED
android.intent.action.SIM_STATE_CHANGED
android.intent.action.NOTIFICATION_ADD
android.intent.action.SERVICE_STATE
android.intent.action.NOTIFICATION_REMOVE
android.intent.action.NOTIFICATION_UPDATE
android.bluetooth.adapter.action.STATE_CHANGED
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.ANY_DATA_STATE
android.net.wifi.STATE_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.USER_PRESENT

com.lyhtgh.pay.receiver.NetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.lyhtgh.pay.receiver.InSmsReceiver

android.provider.Telephony.SMS_RECEIVED

com.yt.uu.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.yt.uu.receiver.ClientReceiver

com.uu.action.client

com.yt.uu.receiver.UserPresentReceiver

android.intent.action.USER_PRESENT

com.yt.uu.receiver.NetChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.yt.uu.receiver.WakeUpReceiver

yt.uu.action.st

com.droidpush.SSDataReceiver

com.ssdroid.DATA

com.droidpush.listenner.PackageReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.droidpush.SSLaunchReceiver

android.intent.action.BATTERY_CHANGED
android.intent.action.BOOT_COMPLETED
android.intent.action.SCREEN_ON
android.intent.action.TIME_TICK
android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.thegame.diamondcrushcn.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

apple.snail.zip

droid.snailw.action.General

google.uu.coconut

yt.uu.action.General

com.yt.apkrun.RunnerRuntimeService

yt_uulib_apkrun_intent.service

com.droidpush.SSTranscationService

com.ssdroid.SERVICE

com.droidpush.TestService

com.ssdroid.TEST_SERVICE

com.umeng.message.UmengService

com.thegame.diamondcrushcn.intent.action.START
com.thegame.diamondcrushcn.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2
lyhtgh.mn.ltplugin_v1012.pl
.apk android

com.lyhtgh.pay.ltplugin

Android Permissions

76da8c1f99e87aa22f1a57bda33ca421_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

android.permission.GET_TOP_ACTIVITY_INFO

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

Files

com.thegame.diamondcrushcn

com.thegame.diacrush.DiamondCrush

Activities

com.thegame.diacrush.DiamondCrush

com.yt.apkrun.RunnerRuntimeActivity

Permissions

Receivers

com.lyhtgh.pay.receiver.BootReceiver

com.lyhtgh.pay.receiver.NetworkReceiver

com.lyhtgh.pay.receiver.InSmsReceiver

com.yt.uu.receiver.BootReceiver

com.yt.uu.receiver.ClientReceiver

com.yt.uu.receiver.UserPresentReceiver

com.yt.uu.receiver.NetChangeReceiver

com.yt.uu.receiver.WakeUpReceiver

com.droidpush.SSDataReceiver

com.droidpush.listenner.PackageReceiver

com.droidpush.SSLaunchReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengBroadcastReceiver

Services

apple.snail.zip

google.uu.coconut

com.yt.apkrun.RunnerRuntimeService

com.droidpush.SSTranscationService

com.droidpush.TestService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

com.lyhtgh.pay.ltplugin

Android Permissions

76da8c1f99e87aa22f1a57bda33ca421_JaffaCakes118