75be0f6154c4907203598b9eede99fe9_JaffaCakes118

General

Target
75be0f6154c4907203598b9eede99fe9_JaffaCakes118
Size 3.5MB
Sample240526-rhb8aaha8t
SHA256 1294e4fc4c4d9478c59a75197c43e6f43c58fe9bd1feb47ce261bf750d1f4ee9
MD5 75be0f6154c4907203598b9eede99fe9
SHA1 79c9d60ac7ade689fffefe43df1007b7acab5745
SHA512 a8d32bf8c89c55076e9d4725906ffd40c8efe77b9e4bd2a9119bc348e9e0b58eb6aa327389758ca3c8daaa246dbfb3ca9fa63534e867b7a7b322974c26c58115
SSDEEP 98304:ReaLV/n3qbcX4C1G8g0QlvB/tFi5XnfuTwKaWucEfS8ET+JGYvvx:MA1zf3cEjE0Hx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

File Explorer

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

.apk 3.5MB
__xadsdk__remote__final__.jar

.apk 40KB

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

SHA256 1294e4fc4c4d9478c59a75197c43e6f43c58fe9bd1feb47ce261bf750d1f4ee9
MD5 75be0f6154c4907203598b9eede99fe9
SHA1 79c9d60ac7ade689fffefe43df1007b7acab5745
SHA512 a8d32bf8c89c55076e9d4725906ffd40c8efe77b9e4bd2a9119bc348e9e0b58eb6aa327389758ca3c8daaa246dbfb3ca9fa63534e867b7a7b322974c26c58115
SSDEEP 98304:ReaLV/n3qbcX4C1G8g0QlvB/tFi5XnfuTwKaWucEfS8ET+JGYvvx:MA1zf3cEjE0Hx
MD5 SHA1 SHA512 SSDEEP

android

com.hb.qx

Android Permissions

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_STICKY

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.PACKAGE_USAGE_STATS

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

com.hb.qx.SplashActivity

com.hb.qx.NewADActivity

com.baidu.mobads.AppActivity

com.baidu.mobad.feeds.BaiduActivity

com.umeng.socialize.view.ShareActivity

com.hb.qx.wxapi.WXEntryActivity

com.tencent.connect.common.AssistActivity

com.hb.qx.MainActivity

com.hb.qx.MoreActivity

com.hb.qx.LockMainActvity

com.hb.qx.HelpSettingActivity

com.hb.qx.WebViewActivity

com.hb.qx.wxapi.RightActivity

com.hb.qx.SeniorActivity

com.hb.qx.NoKickActivity

com.hb.qx.LockService

com.hb.qx.UpdateService

com.hb.qx.QQHongbaoService

com.baidu.location.f

com.hb.qx.ScreenReceiver

com.baidu.bottom.service.BottomReceiver

xadsdkremotefinal.jar

Sharing

General

Malware Config

Signatures

File Explorer

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

com.hb.qx.SplashActivity

com.hb.qx.NewADActivity

com.baidu.mobads.AppActivity

com.baidu.mobad.feeds.BaiduActivity

com.umeng.socialize.view.ShareActivity

com.hb.qx.wxapi.WXEntryActivity

com.tencent.connect.common.AssistActivity

com.hb.qx.MainActivity

com.hb.qx.MoreActivity

com.hb.qx.LockMainActvity

com.hb.qx.HelpSettingActivity

com.hb.qx.WebViewActivity

com.hb.qx.wxapi.RightActivity

com.hb.qx.SeniorActivity

com.hb.qx.NoKickActivity

com.hb.qx.LockService

com.hb.qx.UpdateService

com.hb.qx.QQHongbaoService

com.baidu.location.f

com.hb.qx.ScreenReceiver

com.baidu.bottom.service.BottomReceiver

__xadsdk__remote__final__.jar

Android Permissions

75be0f6154c4907203598b9eede99fe9_JaffaCakes118

xadsdkremotefinal.jar