General

  • Target

    7819cd90cbd1bb12b14764a1be129cc3_JaffaCakes118

  • Size

    25.8MB

  • MD5

    7819cd90cbd1bb12b14764a1be129cc3

  • SHA1

    3926e87a92963a6d2dfc7cf6f748208f9668fa7a

  • SHA256

    8322b9999ae2b0b46fb3e2fa6f31b49758fbeb341a9d68d527ccb60899582ff6

  • SHA512

    0a501a9030ba72c67868d9629d24d6e52fcce3630b6da4778f8f1340eff1b2a63ce0e0ccb68796a5a88b4e9285ebab02a7608e86c107af6a1725c29b1270ce79

  • SSDEEP

    786432:M401iIhLStME3sSLPF201qOnKjLszgyU2UtN5JWELu2O:+gIhLoMEcSB7nKjWgyU2Ut7JWt2O

Score
6/10

Malware Config

Signatures

  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Declares services with permission to bind to the system 3 IoCs
  • Requests dangerous framework permissions 18 IoCs

Files

  • 7819cd90cbd1bb12b14764a1be129cc3_JaffaCakes118
    .apk android arch:arm

    com.cleanmaster.mguard_cn

    com.keniu.security.main.MainActivity


  • plugin_boostplus.so
    .apk android

    com.cm.plugin.boostplus

    com.cleanmaster.boostplus.settings.WidgetGuideActivity


  • plugin_core.so
    .apk android

    com.cm.plugin.core

    com.cleanmaster.boost.onetap.OneTapCleanerActivity


  • plugin_internal.so
    .apk android arch:arm

    com.cm.plugin.internal

    com.cleanmaster.ui.game.GameBoxActivity


  • appupgrade.dex
    .apk android
  • dbcompt.dex
    .apk android
  • plugin.apk
    .apk android

    com.pp.sdk.apk

    com.pp.sdk.apk.activity.PPCommonWebActivity


  • plugin_junkplus.so
    .apk android

    com.cm.plugin.junkplus

    com.cleanmaster.ui.space.hold.Hold1Activity


  • wechatfile.apk
    .apk android

    com.cleanmaster.mguard_cn.WeChatFile

    com.cleanmaster.mguard_cn.WeChatFile.activity.MainActivity


  • plugin_news.so
    .apk android arch:arm

    com.cm.plugin.news

    com.cm.content.onews.ui.NewsOnePageDetailActivity


  • plugin_sgame.so
    .apk android

    com.cm.sgame.acceleration

    com.cm.sgame.acceleration.ui.main.SGameMainActivity


  • plugin_uniform.so
    .apk android

    com.cm.plugin.screensaver

    com.cleanmaster.festival.FestivalShortcutTransActivity


  • gdtadv2.jar
    .apk android

Android Permissions

7819cd90cbd1bb12b14764a1be129cc3_JaffaCakes118

Permissions

com.xiaomi.permission.AUTH_SERVICE

android.permission.GET_ACCOUNTS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.READ_LOGS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.DISABLE_KEYGUARD

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH

com.samsung.android.providers.context.permission.WRITE_USE_APP_FEATURE_SURVEY

android.permission.USE_FINGERPRINT

android.permission.GET_TASKS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.browser.permission.READ_HISTORY_BOOKMARKS

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.VIBRATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.EXPAND_STATUS_BAR

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

com.android.alarm.permission.SET_ALARM