7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

General

Target
7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118
Size 3.1MB
Sample240529-dypawshe77
SHA256 0e83c1b61e47a3396dd8ef6297e6e961d2de4eb2a4040d715964866f35006050
MD5 7f5883c93b4bca072066ddd2fffca5ae
SHA1 9363876950eb9345058d79d8ea7a3aeb86a594f9
SHA512 6b7dc629b30203cc218dff389cdec974383fc26eff419e7f54773968e097ed5f7bd6c0f6db3a744aa6fc60732245dedf8b1a156ccdb1cab863108675b7a1f3ec
SSDEEP 49152:wOaRAsviAEklskRS/UAQmxKXkRS/U5NzkZ/9rC5sHsxMhtOAKpdFvid3D3tg9:wZR9m3kRA1KXkRXzi0xStCpqRD3tQ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

.apk 3.1MB
UPPayPluginEx.apk

.apk 742KB

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

SHA256 0e83c1b61e47a3396dd8ef6297e6e961d2de4eb2a4040d715964866f35006050
MD5 7f5883c93b4bca072066ddd2fffca5ae
SHA1 9363876950eb9345058d79d8ea7a3aeb86a594f9
SHA512 6b7dc629b30203cc218dff389cdec974383fc26eff419e7f54773968e097ed5f7bd6c0f6db3a744aa6fc60732245dedf8b1a156ccdb1cab863108675b7a1f3ec
SSDEEP 49152:wOaRAsviAEklskRS/UAQmxKXkRS/U5NzkZ/9rC5sHsxMhtOAKpdFvid3D3tg9:wZR9m3kRA1KXkRXzi0xStCpqRD3tQ
MD5 SHA1 SHA512 SSDEEP

android

cn.zhui.client2348320

.MediaPlayerActivity

android.intent.action.VIEW

.OptionListActivity

android.intent.action.VIEW

.wxapi.WXEntryActivity

android.intent.action.VIEW

.BaseActivity

android.intent.action.VIEW

.Temp2Activity

android.intent.action.VIEW

cn.zhui.push.TuisongActivity

android.intent.action.VIEW

.PhoneGap

.HtmlModeActivity

.main

android.intent.action.MAIN

.LoginActivity

.ZIDManage

.FileListActivity

.ImageViewerActivity

.ImageViewDialogActivity

.MapCardActivity

.AlbumActivity

.PaylistActivity

.AlarmAlert

cn.zhui.client2348320.component.AlertDialogActivity

.ManageAccountActivity

.ChangePasswordActivity

.ChangeUsernameActivity

.UserInfoActivity

.RegActivity

.LocalSettingsActivity

com.google.zxing.client.android.CaptureActivity

com.google.zxing.client.android.SCAN android.intent.action.VIEW

cn.zhui.client2348320.ShareActivity

cn.zhui.client2348320.WeShopPayActivity

cn.zhui.client2348320.WeShopArgueActivity

UPPayPluginEx.apk

SHA256 b6200ef234859b40f5d4a3e72f3f3e6856e17a5bd1b1bb5d42570970cc2497b6
MD5 b96d1094490791429fc0e62ff5db21a6
SHA1 48ced320d656172612eee2d01e3f34e74cb61639
SHA512 e7bf3be836b5e3f437304645fa506b0b1a395bd1867e74923321f28637e7a16cc1c8438499a800ce06c2c742ee5f5340daacdf376edfcc010528108319532463
SSDEEP 12288:AdBQNmgx/FUk3ee4BunZ49KCS2PznpSsPF1rDb2LQ6iZMB7/an6kIUXThJRkV+hO:pNTx/FJexgnBCRrMsN1iErEklzRASM
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.unionpay.uppay

Android Permissions

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCES_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.RECORD_VIDEO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

.MediaPlayerActivity

.OptionListActivity

.wxapi.WXEntryActivity

.BaseActivity

.Temp2Activity

cn.zhui.push.TuisongActivity

.PhoneGap

.HtmlModeActivity

.main

.LoginActivity

.ZIDManage

.FileListActivity

.ImageViewerActivity

.ImageViewDialogActivity

.MapCardActivity

.AlbumActivity

.PaylistActivity

.AlarmAlert

cn.zhui.client2348320.component.AlertDialogActivity

.ManageAccountActivity

.ChangePasswordActivity

.ChangeUsernameActivity

.UserInfoActivity

.RegActivity

.LocalSettingsActivity

com.google.zxing.client.android.CaptureActivity

cn.zhui.client2348320.ShareActivity

cn.zhui.client2348320.WeShopPayActivity

cn.zhui.client2348320.WeShopArgueActivity

cn.zhui.push.TuisongService

.CheckNewService

com.baidu.location.f

.BootReceiver

.CheckAlarmReceiver

UPPayPluginEx.apk

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

com.UCMobile.PayPlugin.PayPluginService

Sharing

General

Malware Config

Signatures

File Explorer

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118

.MediaPlayerActivity

.OptionListActivity

.wxapi.WXEntryActivity

.BaseActivity

.Temp2Activity

cn.zhui.push.TuisongActivity

.PhoneGap

.HtmlModeActivity

.main

.LoginActivity

.ZIDManage

.FileListActivity

.ImageViewerActivity

.ImageViewDialogActivity

.MapCardActivity

.AlbumActivity

.PaylistActivity

.AlarmAlert

cn.zhui.client2348320.component.AlertDialogActivity

.ManageAccountActivity

.ChangePasswordActivity

.ChangeUsernameActivity

.UserInfoActivity

.RegActivity

.LocalSettingsActivity

com.google.zxing.client.android.CaptureActivity

cn.zhui.client2348320.ShareActivity

cn.zhui.client2348320.WeShopPayActivity

cn.zhui.client2348320.WeShopArgueActivity

cn.zhui.push.TuisongService

.CheckNewService

com.baidu.location.f

.BootReceiver

.CheckAlarmReceiver

UPPayPluginEx.apk

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

com.UCMobile.PayPlugin.PayPluginService

Android Permissions

7f5883c93b4bca072066ddd2fffca5ae_JaffaCakes118