743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118
Size 6.5MB
Sample240526-ebxjesee36
SHA256 bd0c51d6694dabd0c86a717b78af543b86f6c429c412e42b4064fcae9bf65c0a
MD5 743c7b981b95dccf79aebaf29c7d0d8d
SHA1 eb99630b06dca9ce481a27d556f02d4925944d14
SHA512 6ae433bf3437609a7515a284aa765a0d3596fabdf299553224cce331850375592428070b4a103c05b3f9c4e4d638c6d610c7071ec0112db3eef63e51f2f6e057
SSDEEP 196608:3I3rBevERvL8qu22O+XZcQ+hxcgi49j+UQLEu4:3cG4m22OqSQ+hxcgibUQLEu4
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118

.apk 6.5MB
alipay_msp.apk

.apk 354KB
com.skymobi.appui.sole_v1001.apk

.apk 421KB
com.skymobi.pay.opplugin_V2017.apk

.apk 189KB

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118

SHA256 bd0c51d6694dabd0c86a717b78af543b86f6c429c412e42b4064fcae9bf65c0a
MD5 743c7b981b95dccf79aebaf29c7d0d8d
SHA1 eb99630b06dca9ce481a27d556f02d4925944d14
SHA512 6ae433bf3437609a7515a284aa765a0d3596fabdf299553224cce331850375592428070b4a103c05b3f9c4e4d638c6d610c7071ec0112db3eef63e51f2f6e057
SSDEEP 196608:3I3rBevERvL8qu22O+XZcQ+hxcgi49j+UQLEu4:3cG4m22OqSQ+hxcgibUQLEu4
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:arm

com.j1game.flight2.zyf

alipay_msp.apk

SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
MD5 89c04e1ebcd58eca6dd93211628ed0bc
SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

com.skymobi.pay.opplugin_V2017.apk

SHA256 dc55c0952f54064f229d4105fe09178ab2061dba5ac33a78ac76bd711bfaeb0d
MD5 7ca433f40d2e4d750cd5d19e0998e005
SHA1 dbb1f221cb279c9c067be19ae2756a1c9b5b67c8
SHA512 a561bf5401050c65c5f227b3457d76bd48c4182ecfba5213b02800fc7072b209ee3baf25d024a145314503f946773dde8fc0e17907ee618286fa42c8ab323404
SSDEEP 3072:MLWTvQatpn8vCt1WgMsNFlRkSlj4Z1j4ipaEGdWGGWXEnJ:/TvZ8vCbRbvjEZ4hEcGqAJ
MD5 SHA1 SHA512 SSDEEP

android

com.skymobi.pay.opplugin

Android Permissions

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.UPDATE_DEVICE_STATS

android.permission.WRITE_APN_SETTINGS

android.permission.VIBRATE

android.permission.RUN_INSTRUMENTATION

android.permission.MODIFY_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

File Explorer

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118

com.j1game.flight.MainActivity

com.myapp.sdkproxy.context.ProxyActivity

com.skymobi.pay.sdk.SkyPayActivity

com.skymobi.pay.third.activity.impl.EnterChargeCenter

com.skymobi.pay.third.activity.impl.QueryChargeResultActivity

com.skymobi.pay.third.activity.impl.HelpActivity

com.myapp.sdkproxy.context.ProxyService

com.skymobi.pay.sms.service.SmsService

com.skymobi.pay.sms.service.SynService

com.skymobi.pay.common.service.PayCtrlService

com.skymobi.pay.services.SkyPayRemoteService

com.skymobi.pay.third.service.CheckResultBackgroundService

com.myapp.sdkproxy.context.ProxyReceiver

com.skymobi.pay.sms.receiver.BootReceiver

com.skymobi.pay.sms.receiver.SmsReceiver

com.skymobi.pay.sms.receiver.NetworkReceiver

alipay_msp.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

com.skymobi.appui.sole_v1001.apk

com.skymobi.pay.opplugin_V2017.apk

com.skymobi.pay.sdk.SkyPayActivity

com.skymobi.pay.third.activity.impl.EnterChargeCenter

com.skymobi.pay.third.activity.impl.QueryChargeResultActivity

com.skymobi.pay.third.activity.impl.HelpActivity

com.skymobi.pay.sms.service.SmsService

com.skymobi.pay.sms.service.SynService

com.skymobi.pay.common.service.PayCtrlService

com.skymobi.pay.services.SkyPayRemoteService

com.skymobi.pay.third.service.CheckResultBackgroundService

com.skymobi.pay.sms.receiver.BootReceiver

com.skymobi.pay.sms.receiver.SmsReceiver

com.skymobi.pay.sms.receiver.NetworkReceiver

Android Permissions

743c7b981b95dccf79aebaf29c7d0d8d_JaffaCakes118