792c5dbee17d75413d6d08ce89c4fdbb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

792c5dbee17d75413d6d08ce89c4fdbb_JaffaCakes118
Size

21.5MB
MD5

792c5dbee17d75413d6d08ce89c4fdbb
SHA1

042c918998d45af5cebbf36379bffc2c48904812
SHA256

ded0af5fd26b94832efef327523d034d16c6e20ba37a740dbf996f15b5175064
SHA512

57e540c38393229be873df973c1fc69c8968c085146040f2539ab27e9cc41f438c2ce7eb62cc62e0870428de0f55cd1010a9caeaf6c8f3d92090a18bf9894ee5
SSDEEP

393216:DHUBCttX4A+GMO2AIdmfZfkAgx7iligVCavAAjYvKOxA1tHBVdcz3b2Ym97szgoe:Tmyo0sjx7iligVPAAECOxwtHB0z3CYbM

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 21 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

792c5dbee17d75413d6d08ce89c4fdbb_JaffaCakes118
.apk android arch:arm

com.guangyi.finddoctor.activity

com.greenline.guahao.home.WelcomeActivity

Activities

com.greenline.guahao.home.HomeActivity

com.guangyi.finddoctor.activity.push

com.greenline.guahao.search.SearchActivity

com.guangyi.finddoctor.activity.SEARCH

com.greenline.guahao.search.RelativeDoctorActivity

com.guangyi.finddoctor.activity.search.expert

com.greenline.guahao.search.RelativeExpertGroupActivity

com.guangyi.finddoctor.activity.expertGroup

com.greenline.guahao.search.RelativeConsultActivity

com.guangyi.finddoctor.activity.consult

com.greenline.guahao.search.RelativeHospitalActivity

com.guangyi.finddoctor.activity.search.hospital

com.greenline.guahao.appointment.department.DeptListActivity

com.guangyi.finddoctor.activity.appointment.department

com.greenline.guahao.appointment.order.FinalOrderActivity

com.guangyi.finddoctor.activity.FINAL_ORDER_VIEW

com.greenline.guahao.account.login.LoginActivity

com.guangyi.finddoctor.activity.LOGIN

com.greenline.guahao.account.regist.SignUpActivity

com.guangyi.finddoctor.activity.SIGNUP

com.greenline.guahao.account.setting.FindPassWordActivity

com.guangyi.finddoctor.activity.FINDPASSWORD

com.greenline.guahao.personal.me.AddOrderCommentActivity

com.guangyi.finddoctor.activity.ADD_ORDER_COMMENT

com.greenline.guahao.home.WelcomeActivity

android.intent.action.MAIN

com.greenline.guahao.appointment.order.AppointmentInfoActivity

com.guangyi.finddoctor.activity.APPOINTMENT_INFO

com.greenline.guahao.intelligent.SelfDiagnoseActivity

com.guangyi.finddoctor.activity.guide.organ

com.greenline.guahao.hospital.home.HospitalBrief

com.guangyi.finddoctor.activity.hospital.brif

com.greenline.guahao.doctor.home.DoctorHomeActivity

com.guangyi.finddoctor.activity.DOCTOR_HOME_VIEW

com.greenline.guahao.common.web.share.SharePopActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.greenline.guahao.consult.before.expert.video.VideoOrderDetailActivity

com.guangyi.finddoctor.activity.video.ORDERDETAIL

com.greenline.guahao.common.pay.channel.qq.QQPayResultActivity

android.intent.action.VIEW

com.techbridge.conf.ui.activitys.ConfWithDataActivity

android.intent.action.VIEW

com.techbridge.conf.ui.activitys.ConfDataDocsViewerActivity

android.intent.action.VIEW

com.techbridge.conf.ui.activitys.ConfDataPageViewerActivity

android.intent.action.VIEW

com.techbridge.conf.ui.activitys.ConfAsertActivity

android.intent.action.VIEW

Permissions

android.permission.DISABLE_KEYGUARD
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.RECORD_AUDIO
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_OWNER_DATA
android.permission.WRITE_OWNER_DATA
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.ACCESS_NETWORK_STATE
android.permission.INTERNET
com.android.launcher.permission.READ_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.BROADCAST_STICKY
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.CAMERA
android.permission.INTERNET
android.permission.RECORD_AUDIO
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.CALL_PHONE
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE

Receivers

com.greenline.guahao.common.push.receiver.PushMessageReceiver

android.intent.action.BOOT_COMPLETED

com.guangyi.finddoctor.activity.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.greenline.im.echat.PushReceiver

com.greenline.echat.p_android_hehealth.SEND_MSG_BROAD
com.greenline.echat.ECHAT_SERVICE_DESTROY
android.intent.action.BOOT_COMPLETED

com.techbridge.conf.ui.broadcast.PhoneStatReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

com.techbridge.conf.ui.broadcast.ConnectionChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

com.greenline.guahao.common.push.xmpp.XMPPService

com.guahao.service.xmppservice
android.intent.action.BOOT_COMPLETED

com.greenline.subject.EChatService

com.guangyi.finddoctor.activity.EChatService
BarcodeScanner.apk
.apk android

com.google.zxing.client.android

.CaptureActivity

Activities

.CaptureActivity

android.intent.action.MAIN
com.google.zxing.client.android.SCAN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW

.encode.EncodeActivity

com.google.zxing.client.android.ENCODE
android.intent.action.SEND
android.intent.action.SEND

.book.SearchBookContentsActivity

com.google.zxing.client.android.SEARCH_BOOK_CONTENTS

.share.ShareActivity

com.google.zxing.client.android.SHARE

.history.HistoryActivity

android.intent.action.VIEW

.share.BookmarkPickerActivity

android.intent.action.PICK

.share.AppPickerActivity

android.intent.action.PICK

.HelpActivity

android.intent.action.VIEW

Permissions

android.permission.CAMERA
android.permission.INTERNET
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.READ_CONTACTS
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
Bundle2.5.2.hhm01.jar
.apk android
alipay_msp.apk
.apk android arch:arm arch:x86

com.alipay.android.app

com.alipay.android.app.pay.MainActivity

Activities

com.alipay.android.app.pay.MainActivity

android.intent.action.MAIN

com.alipay.android.app.pay.TransContainer

android.intent.action.MAIN

com.alipay.android.app.pay.HyperlinkActivity

android.intent.action.MAIN

com.alipay.android.app.pay.PageForBrowser

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

com.alipay.android.app.MspService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

792c5dbee17d75413d6d08ce89c4fdbb_JaffaCakes118

Permissions

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_OWNER_DATA

android.permission.WRITE_OWNER_DATA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

com.android.launcher.permission.READ_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.CAMERA

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

Sharing

General

Malware Config

Signatures

Files

com.guangyi.finddoctor.activity

com.greenline.guahao.home.WelcomeActivity

Activities

com.greenline.guahao.home.HomeActivity

com.greenline.guahao.search.SearchActivity

com.greenline.guahao.search.RelativeDoctorActivity

com.greenline.guahao.search.RelativeExpertGroupActivity

com.greenline.guahao.search.RelativeConsultActivity

com.greenline.guahao.search.RelativeHospitalActivity

com.greenline.guahao.appointment.department.DeptListActivity

com.greenline.guahao.appointment.order.FinalOrderActivity

com.greenline.guahao.account.login.LoginActivity

com.greenline.guahao.account.regist.SignUpActivity

com.greenline.guahao.account.setting.FindPassWordActivity

com.greenline.guahao.personal.me.AddOrderCommentActivity

com.greenline.guahao.home.WelcomeActivity

com.greenline.guahao.appointment.order.AppointmentInfoActivity

com.greenline.guahao.intelligent.SelfDiagnoseActivity

com.greenline.guahao.hospital.home.HospitalBrief

com.greenline.guahao.doctor.home.DoctorHomeActivity

com.greenline.guahao.common.web.share.SharePopActivity

com.tencent.tauth.AuthActivity

com.greenline.guahao.consult.before.expert.video.VideoOrderDetailActivity

com.greenline.guahao.common.pay.channel.qq.QQPayResultActivity

com.techbridge.conf.ui.activitys.ConfWithDataActivity

com.techbridge.conf.ui.activitys.ConfDataDocsViewerActivity

com.techbridge.conf.ui.activitys.ConfDataPageViewerActivity

com.techbridge.conf.ui.activitys.ConfAsertActivity

Permissions

Receivers

com.greenline.guahao.common.push.receiver.PushMessageReceiver

com.guangyi.finddoctor.activity.wxapi.AppRegister

com.greenline.im.echat.PushReceiver

com.techbridge.conf.ui.broadcast.PhoneStatReceiver

com.techbridge.conf.ui.broadcast.ConnectionChangeReceiver

Services

com.greenline.guahao.common.push.xmpp.XMPPService

com.greenline.subject.EChatService

com.google.zxing.client.android

.CaptureActivity

Activities

.CaptureActivity

.encode.EncodeActivity

.book.SearchBookContentsActivity

.share.ShareActivity

.history.HistoryActivity

.share.BookmarkPickerActivity

.share.AppPickerActivity

.HelpActivity

Permissions

com.alipay.android.app

com.alipay.android.app.pay.MainActivity

Activities

com.alipay.android.app.pay.MainActivity

com.alipay.android.app.pay.TransContainer

com.alipay.android.app.pay.HyperlinkActivity

com.alipay.android.app.pay.PageForBrowser

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

com.alipay.android.app.MspService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

792c5dbee17d75413d6d08ce89c4fdbb_JaffaCakes118