7f7cf81a8e55a407fbbb66f473f26632_JaffaCakes118

General

Target

7f7cf81a8e55a407fbbb66f473f26632_JaffaCakes118
Size

10.2MB
MD5

7f7cf81a8e55a407fbbb66f473f26632
SHA1

4981432ca62dee7f0285b8397888e8af11bbcb51
SHA256

d27dbc0c1c01aab2983482b10ab21030639fe44f2389c172ebc225cfa0f0d975
SHA512

fb03b576296423207282a54d280bda2f94f674bef61e4f3fc1010caf132a09fbb0b84dddef5d700dc62ab0c561a8dbf41814c971fc25f75a00044f2c022a1993
SSDEEP

196608:YIEYLksTtEzvX7gF0xcphseF8XnPRl7M63zGaVBLn4DQM63zGaVBLn5cNl:YIVrTtOvTehK/RlYHaXUDLHaXlUl

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Files

7f7cf81a8e55a407fbbb66f473f26632_JaffaCakes118
.apk android arch:arm arch:arm64 arch:mips arch:mips64 arch:x86 arch:x64

com.stzx.wzt.patient

.start.Start

Activities

.start.Start

android.intent.action.MAIN
android.intent.action.VIEW

io.rong.voipkit.activity.CallSideActivity

android.intent.action.VIEW

io.rong.voipkit.activity.CalledSideActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.CAMERA
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.CALL_PHONE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.READ_PHONE_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
getui.permission.GetuiService
android.permission.GET_TASKS

Receivers

io.rong.imlib.ipc.PushMessageReceiver

io.rong.push.message

net.sourceforge.simcpux.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.stzx.wzt.patient.getui.PushReceiver

com.igexin.sdk.action.gCIu4sqgh66NZegLa3yDM

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
com.igexin.sdk.action.refreshls

com.igexin.sdk.PushManagerReceiver

com.igexin.sdk.action.pushmanager

com.igexin.download.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.getuiext.service.PayloadReceiver

com.igexin.sdk.action.7fjUl2Z3LH6xYy7NQK4ni4
com.igexin.sdk.action.gCIu4sqgh66NZegLa3yDM

net.youmi.android.AdReceiver

android.intent.action.PACKAGE_ADDED

Services

Android Permissions

7f7cf81a8e55a407fbbb66f473f26632_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.CALL_PHONE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

getui.permission.GetuiService

android.permission.GET_TASKS

Sharing

General

Malware Config

Signatures

Files

com.stzx.wzt.patient

.start.Start

Activities

.start.Start

io.rong.voipkit.activity.CallSideActivity

io.rong.voipkit.activity.CalledSideActivity

Permissions

Receivers

io.rong.imlib.ipc.PushMessageReceiver

net.sourceforge.simcpux.AppRegister

com.stzx.wzt.patient.getui.PushReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.getuiext.service.PayloadReceiver

net.youmi.android.AdReceiver

Services

Android Permissions

7f7cf81a8e55a407fbbb66f473f26632_JaffaCakes118