89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

General

Target
89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118
Size 5.7MB
Sample240601-esfx1aab23
SHA256 f3197b42871f0bdf65b9a0acf47ec0ce7432e8ecd3c892c8e0da0559110f9ab9
MD5 89549dbc2031d230f4ce26fb46a2de13
SHA1 269e77a6528f10efc8dd2cdeda6dc735c3303be7
SHA512 70eb0fe6d72ebc84bc59d2e78ca9c90afddff2bbdeeb74c90349cfa712662eb07e50c6150182ebc4c421f6ff4fb567b5361786c8e9d4feeed68ad48fd115b5b4
SSDEEP 98304:PKQ1sWNRGc/f68W2GnU7No/rjz5o0WydaMwafNHAxKFWmR21ta3:Pp1M8bQkNErX51dSUd6MWmsTa3
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

.apk 5.7MB

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

SHA256 f3197b42871f0bdf65b9a0acf47ec0ce7432e8ecd3c892c8e0da0559110f9ab9
MD5 89549dbc2031d230f4ce26fb46a2de13
SHA1 269e77a6528f10efc8dd2cdeda6dc735c3303be7
SHA512 70eb0fe6d72ebc84bc59d2e78ca9c90afddff2bbdeeb74c90349cfa712662eb07e50c6150182ebc4c421f6ff4fb567b5361786c8e9d4feeed68ad48fd115b5b4
SSDEEP 98304:PKQ1sWNRGc/f68W2GnU7No/rjz5o0WydaMwafNHAxKFWmR21ta3:Pp1M8bQkNErX51dSUd6MWmsTa3
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.jhl.guandu

com.qk.plugin.js.shell.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.qk.plugin.js.shell.MainActivity

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.FloatDetailed

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

android.intent.action.MAIN android.intent.action.VIEW

com.wancms.sdk.ui.AilipayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

android.intent.action.MAIN

com.wancms.sdk.ui.PhoneBindingActivity

com.wancms.sdk.floatwindow.FloatActivity

com.wancms.sdk.ui.WaitConfirmationActivity

Android Permissions

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

Permissions

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_CHECKIN_PROPERTIES

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.BLUETOOTH

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_LOGS

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MODE_WORLD_READABLE

android.permission.RECEIVE_SMS

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

com.qk.plugin.js.shell.SplashActivity

com.qk.plugin.js.shell.MainActivity

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.FloatDetailed

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.AilipayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.wancms.sdk.floatwindow.FloatActivity

com.wancms.sdk.ui.WaitConfirmationActivity

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

Sharing

General

Malware Config

Signatures

File Explorer

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118

com.qk.plugin.js.shell.SplashActivity

com.qk.plugin.js.shell.MainActivity

com.wancms.sdk.ui.LoginActivity

com.wancms.sdk.floatwindow.FloatWebActivity

com.wancms.sdk.ui.ChargeActivity

com.wancms.sdk.ui.FloatDetailed

com.wancms.sdk.ui.TrumpetActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.alipay.sdk.app.H5PayActivity

com.wancms.sdk.ui.WeChatPayActivity

com.wancms.sdk.ui.AilipayActivity

com.wancms.sdk.ui.WebPayActivity

com.wancms.sdk.ui.SFTWebPayActivity

com.wancms.sdk.ui.XQTWebPayActivity

com.wancms.sdk.ui.YYWebPayActivity

com.wancms.sdk.ui.WFTWebPayActivity

com.wancms.sdk.ui.HuifubaoWebPayActivity

com.wancms.sdk.ui.JZWebPayActivity

com.wancms.sdk.ui.HaiBeiWebPayActivity

com.wancms.sdk.ui.WXH5PayActivity

com.wancms.sdk.wxapi.WXEntryActivity

com.wancms.sdk.wxapi.WXPayEntryActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.shengpay.express.smc.ExpressSmcClientActivity

com.wancms.sdk.ui.PhoneBindingActivity

com.wancms.sdk.floatwindow.FloatActivity

com.wancms.sdk.ui.WaitConfirmationActivity

com.wancms.sdk.WancmsSDKAppService

com.sina.weibo.sdk.net.DownloadService

Android Permissions

89549dbc2031d230f4ce26fb46a2de13_JaffaCakes118