7bc2251d193db48cfc4773f4e6e6fc71_JaffaCakes118

General

Target

7bc2251d193db48cfc4773f4e6e6fc71_JaffaCakes118
Size

27.0MB
MD5

7bc2251d193db48cfc4773f4e6e6fc71
SHA1

15fe36fd0a7c5370a9026099510a6a9692795052
SHA256

d6098340614e2b0a510aeced1b267a1b70dbd7b6207f250330834b865a0d446c
SHA512

71ea0947199ded36e123d6383b998a9004b7fd841a49501114f24376587a3889d9f525c69cd771c6329a9d299a041648cf34c788dae99d81cf30a6a27847cae6
SSDEEP

786432:rwkLg22nzS7P0kbrf0Po+wSpW7EOIEj8ndP+:rwkLg22nzubrsP3W7OEw9+

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG

Files

7bc2251d193db48cfc4773f4e6e6fc71_JaffaCakes118
.apk android arch:arm arch:x86

com.to2100.ttjs

com.to2100.ttjs.SDK_WebApp

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.to2100.ttjs.wxapi.WXEntryActivity

android.intent.action.VIEW

com.to2100.ttjs.SDK_WebApp

android.intent.action.MAIN

io.dcloud.PandoraEntryActivity

android.intent.action.VIEW

io.dcloud.appstream.StreamAppMainActivity

android.intent.action.MAIN
android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.FLASHLIGHT
com.to2100.ttjs.permission.MIPUSH_RECEIVE
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.GET_TOP_ACTIVITY_INFO
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.RECORD_AUDIO
android.permission.CHANGE_NETWORK_STATE
com.xiaomi.permission.AUTH_SERVICE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_MOCK_LOCATION
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.USE_FINGERPRINT
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.WAKE_LOCK
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.GET_ACCOUNTS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
com.android.launcher2.permission.READ_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.yulong.android.launcherL.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.bbk.launcher2.permission.READ_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.qiku.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.zte.mifavor.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.READ_SETTINGS
com.yulong.android.launcher3.READ_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.ebproductions.android.launcher.permission.READ_SETTINGS
com.nd.android.launcher.permission.READ_SETTINGS
com.yulong.android.launcher.permission.READ_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.ztemt.launcher.permission.READ_SETTINGS
cn.nubia.launcher.permission.READ_SETTINGS
com.gionee.amisystem.permission.READ_SHORTCUT
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_CALL_LOG
android.permission.WRITE_CALL_LOG

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

io.dcloud.feature.apsXm.XMMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

io.dcloud.feature.apsXm.XMNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.to2100.ttjs.__CREATE_NOTIFICATION
com.to2100.ttjs.__REMOVE_NOTIFICATION
com.to2100.ttjs.__CLEAR_NOTIFICATION
com.to2100.ttjs.__CLILK_NOTIFICATION

io.dcloud.common.adapter.io.PushReceiver

dcloud.push.broswer

io.dcloud.appstream.receiver.DaemonReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

Services

io.dcloud.streamdownload.DownloadService

com.qihoo.life.plugin.streamapp.ACTION_PUSH_TO_PLUGIN
gdtadv2.jar
.apk android

Android Permissions

7bc2251d193db48cfc4773f4e6e6fc71_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.FLASHLIGHT

com.to2100.ttjs.permission.MIPUSH_RECEIVE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.GET_TOP_ACTIVITY_INFO

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.RECORD_AUDIO

android.permission.CHANGE_NETWORK_STATE

com.xiaomi.permission.AUTH_SERVICE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_MOCK_LOCATION

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.USE_FINGERPRINT

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.GET_ACCOUNTS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.yulong.android.launcherL.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.zte.mifavor.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.to2100.ttjs

com.to2100.ttjs.SDK_WebApp

Activities

com.tencent.tauth.AuthActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.to2100.ttjs.wxapi.WXEntryActivity

com.to2100.ttjs.SDK_WebApp

io.dcloud.PandoraEntryActivity

io.dcloud.appstream.StreamAppMainActivity

Permissions

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

io.dcloud.feature.apsXm.XMMessageReceiver

io.dcloud.feature.apsXm.XMNotificationReceiver

io.dcloud.common.adapter.io.PushReceiver

io.dcloud.appstream.receiver.DaemonReceiver

Services

io.dcloud.streamdownload.DownloadService

Android Permissions

7bc2251d193db48cfc4773f4e6e6fc71_JaffaCakes118