8973ff10987999d41286db2876f2ec6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8973ff10987999d41286db2876f2ec6e_JaffaCakes118
Size 20.9MB
Sample240601-fxqhnsbf99
SHA256 1632f869be61b631f689bb903d48ca068113d500b68d897812705e5ca470142b
MD5 8973ff10987999d41286db2876f2ec6e
SHA1 509cbcf59fcb093feffba5638dd0d0750a1c5c0a
SHA512 95b195e083f11363be0c093d4921fbccedcadb61844b130d8f8298a9aab0cfc733c06e43ea48fa7f321215af743eca7cda155a7b5036698dcb4ec81644d5b3d3
SSDEEP 393216:cV6VOFNcZimMtu5CePWXhIJypUNPNNu4XCseQaLkmd0RElWgRkhl+JZLUM3zN4UA:w6VANcVM9eORmmTLk401muwJuMjNNVzu
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

8973ff10987999d41286db2876f2ec6e_JaffaCakes118

.apk 20.9MB

8973ff10987999d41286db2876f2ec6e_JaffaCakes118

SHA256 1632f869be61b631f689bb903d48ca068113d500b68d897812705e5ca470142b
MD5 8973ff10987999d41286db2876f2ec6e
SHA1 509cbcf59fcb093feffba5638dd0d0750a1c5c0a
SHA512 95b195e083f11363be0c093d4921fbccedcadb61844b130d8f8298a9aab0cfc733c06e43ea48fa7f321215af743eca7cda155a7b5036698dcb4ec81644d5b3d3
SSDEEP 393216:cV6VOFNcZimMtu5CePWXhIJypUNPNNu4XCseQaLkmd0RElWgRkhl+JZLUM3zN4UA:w6VANcVM9eORmmTLk401muwJuMjNNVzu
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.chinazyjr.creditloan

android.permission.READ_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.WAKE_LOCK android.permission.RECEIVE_BOOT_COMPLETED android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE getui.permission.GetuiService.com.chinazyjr.creditloan android.permission.GET_TASKS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.CALL_PHONE android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.CAMERA android.permission.FLASHLIGHT android.permission.RECORD_AUDIO android.permission.CHANGE_CONFIGURATION com.android.launcher.permission.READ_SETTINGS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.INTERNET android.permission.GET_TASKS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.CHANGE_CONFIGURATION android.permission.CHANGE_WIFI_STATE android.permission.READ_CONTACTS android.permission.ACCESS_COARSE_LOCATION

com.chinazyjr.creditloan.activity.WelcomeActivity

android.intent.action.MAIN

com.igexin.sdk.PushActivity

com.igexin.getuiext.activity.GetuiExtActivity

com.chinazyjr.creditloan.activity.GuideActivity

com.chinazyjr.creditloan.activity.MessageCenterActivity

com.chinazyjr.creditloan.camera.ScanCamera

com.wintone.bankcard.ScanCamera

com.chinazyjr.creditloan.activity.HomeFragmentHost

com.chinazyjr.creditloan.activity.AccountLoginActivity

com.chinazyjr.creditloan.activity.HomeLoginActivity

com.chinazyjr.creditloan.activity.MyInfoActivity

com.chinazyjr.creditloan.activity.ProgressAuditActivity

com.chinazyjr.creditloan.activity.MyIntegralActivity

com.chinazyjr.creditloan.activity.CashCouponActivity

com.chinazyjr.creditloan.activity.CashCouponSecletActivity

com.chinazyjr.creditloan.activity.BankCardActivity

com.chinazyjr.creditloan.activity.BankSelectActivity

com.chinazyjr.creditloan.activity.CalendarActivity

com.chinazyjr.creditloan.activity.RepaymentHistoryActivity

com.chinazyjr.creditloan.activity.ChangeDetailAddressActivity

com.chinazyjr.creditloan.activity.ChangeRealNameActivity

com.chinazyjr.creditloan.activity.ChangePasswordActivity

com.chinazyjr.creditloan.activity.GesturesChangePasswordActivity

com.chinazyjr.creditloan.activity.CommodityDetailsActivity

com.chinazyjr.creditloan.activity.ConversionDetailsActivity

com.chinazyjr.creditloan.activity.AddBankCardActivity

com.chinazyjr.creditloan.activity.ConvertSuccessActivity

com.chinazyjr.creditloan.activity.ConversionDetails2Activity

com.chinazyjr.creditloan.activity.RepaymentActivity

com.chinazyjr.creditloan.activity.RepaymentSuccessActivity

com.chinazyjr.creditloan.activity.IntegralActivity

com.chinazyjr.creditloan.activity.ImproveCreditActivity

com.chinazyjr.creditloan.activity.RateQueryActivity

com.chinazyjr.creditloan.activity.FeedBackActivity

com.chinazyjr.creditloan.activity.FeedEditActivity

com.chinazyjr.creditloan.activity.AboutActivity

com.chinazyjr.creditloan.activity.SettingActivity

com.chinazyjr.creditloan.activity.HelpQuestionActivity

com.chinazyjr.creditloan.activity.GetPhonePasswordActivity

com.chinazyjr.creditloan.activity.ThreePartiesActivity

com.chinazyjr.creditloan.activity.SettingGesturePwdActivity

com.chinazyjr.creditloan.activity.ProductIntroduceActivity

com.chinazyjr.creditloan.activity.CommonQuestionActivity

com.chinazyjr.creditloan.activity.BankCardAuditActivity

com.chinazyjr.creditloan.activity.ChangeGesturesPasswordActivity

com.chinazyjr.creditloan.activity.TasksActivity

com.chinazyjr.creditloan.activity.InformationActivity

com.chinazyjr.creditloan.activity.WorkDetailActivity

com.chinazyjr.creditloan.activity.CardInfomationActivity

com.chinazyjr.creditloan.activity.WithdrawalsActivity

com.chinazyjr.creditloan.activity.BankCardTypeActivity

com.chinazyjr.creditloan.activity.WithdrawalsSuccessActivity

com.chinazyjr.creditloan.activity.RegisterActivity

com.chinazyjr.creditloan.activity.ForgetPasswordActivity

com.chinazyjr.creditloan.activity.UpdateDeviceActivity

com.chinazyjr.creditloan.activity.AddressActivity

com.chinazyjr.creditloan.activity.RegisterAgreementActivity

com.chinazyjr.creditloan.activity.BankAgreementActivity

com.chinazyjr.creditloan.activity.GestureSetActivity

com.chinazyjr.creditloan.activity.GestureCheckOutActivity

com.chinazyjr.creditloan.activity.GestureLoginActivity

com.chinazyjr.creditloan.activity.PrivacyAgreementActivity

com.chinazyjr.creditloan.activity.LoanHomeActivity

com.chinazyjr.creditloan.activity.LoanActionActivity

com.chinazyjr.creditloan.activity.IDCardActivity

com.chinazyjr.creditloan.activity.PersonalInfoActivity

com.chinazyjr.creditloan.activity.BankcardInfoActivity

com.chinazyjr.creditloan.activity.InfoConfirmActivity

com.chinazyjr.creditloan.activity.LoanNoteActivity

com.chinazyjr.creditloan.activity.LoanScheduleActivity

com.chinazyjr.creditloan.activity.RepaymentActionActivity

com.chinazyjr.creditloan.activity.AboutRepaymentActivity

com.chinazyjr.creditloan.activity.LoanRecordActivity

com.chinazyjr.creditloan.activity.PersonalDataActivity

com.chinazyjr.creditloan.activity.ModifyBaseInfoActivity

com.chinazyjr.creditloan.activity.ModifyOccuptionInfoActivity

com.chinazyjr.creditloan.activity.RepaymentRecordActivity

com.chinazyjr.creditloan.activity.CouponActivity

com.chinazyjr.creditloan.activity.CouponDetailsActivity

com.chinazyjr.creditloan.activity.MyBankCardActivity

com.chinazyjr.creditloan.activity.ForgetServicePasswordActivity

com.chinazyjr.creditloan.camera.CameraActivity

com.chinazyjr.creditloan.activity.SelectSchoolActivity

com.chinazyjr.creditloan.activity.LocationActivity

com.chinazyjr.creditloan.activity.BankCardConfirmActivity

com.chinazyjr.creditloan.activity.EducationActivity

com.chinazyjr.creditloan.activity.WebviewActivity

com.mob.tools.MobUIShell

android.intent.action.VIEW

com.chinazyjr.creditloan.wxapi.WXEntryActivity

com.chinazyjr.creditloan.activity.AccreditSocialActivity

com.photoselector.ui.PhotoSelectorActivity

com.photoselector.ui.PhotoPreviewActivity

com.photoselector.ui.PhotoPreviewAndRemoveActivity

com.sensetime.stlivenesslibrary.ui.LivenessActivity

com.umeng.update.UpdateDialogActivity

Android Permissions

8973ff10987999d41286db2876f2ec6e_JaffaCakes118

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

getui.permission.GetuiService.com.chinazyjr.creditloan

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.CHANGE_CONFIGURATION

com.android.launcher.permission.READ_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_CONFIGURATION

android.permission.CHANGE_WIFI_STATE

android.permission.READ_CONTACTS

android.permission.ACCESS_COARSE_LOCATION