8aaadf13ecb9eb77a13472237327af94_JaffaCakes118

General

Target
8aaadf13ecb9eb77a13472237327af94_JaffaCakes118
Size 29.2MB
Sample240601-rb6tbaeb9w
SHA256 d2509053b285c78296c6960e9b07da05713b96799c38cf9c4861ab1b4490ff11
MD5 8aaadf13ecb9eb77a13472237327af94
SHA1 cb7058d9ca3ed9e4791a84e1c1fd623f4cd0e660
SHA512 b360ae73536df90d9a1e839d1f05607acd1438e2228766bff1aed2b86bc757af13bb2a0a834ede063c155a1e1f92451794ccfd70cbfd60503c1b5cb9f33b4029
SSDEEP 393216:x9rp0pX4yNBzHeEoMYvzyTer0IrYgxnV5XNTfLoMRmg89:xpp0pXpB7eE+oeY2YgP5XNBx89
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

File Explorer

8aaadf13ecb9eb77a13472237327af94_JaffaCakes118

.apk 29.2MB
rtk_app.apk

.apk 2.6MB

8aaadf13ecb9eb77a13472237327af94_JaffaCakes118

SHA256 d2509053b285c78296c6960e9b07da05713b96799c38cf9c4861ab1b4490ff11
MD5 8aaadf13ecb9eb77a13472237327af94
SHA1 cb7058d9ca3ed9e4791a84e1c1fd623f4cd0e660
SHA512 b360ae73536df90d9a1e839d1f05607acd1438e2228766bff1aed2b86bc757af13bb2a0a834ede063c155a1e1f92451794ccfd70cbfd60503c1b5cb9f33b4029
SSDEEP 393216:x9rp0pX4yNBzHeEoMYvzyTer0IrYgxnV5XNTfLoMRmg89:xpp0pXpB7eE+oeY2YgP5XNBx89
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.rockstargames.gtasa

rtk_app.apk

SHA256 3a69b0a413ee44e8da2a558457f3b9df4d8e65368586cf9d2dc48df75be700d1
MD5 6c7958fa0aaab85d1301461def35d378
SHA1 1d98e95cbf378edbff4cc279640a622eeb0dc51a
SHA512 528073f2c0419b516e7ada1ec79c148328c5397c41c6f19389f22189279c0b50879d0c4c90a9330c2aa05e554dcf4792b9e3d4722ddf7c3cbdcd257494197732
SSDEEP 49152:wA1OFsf1w8ZLkmCWwB/ImagZ7xHC0vqz6DxJY0E9kh6RLddpt4KgQM:bOSw8mmCWwB/ImvHCWzYE6RG
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips64 arch:mips arch:x86 arch:x64

com.rtk.app

com.rtk.app.Welcome

android.intent.action.MAIN

com.rtk.app.MainActivity

com.rtk.app.DownloadWebview

com.rtk.app.Download

com.rtk.app.SecondPage

com.rtk.app.Filter

com.rtk.app.AutoInstallDialog

com.rtk.app.APPDetailActivity

com.rtk.app.GiftFiltter

com.rtk.app.MyGiftActivity

com.rtk.app.GiftBagActivity

com.rtk.app.OpenServerActivity

com.rtk.app.GiftDetailActivity

com.rtk.app.APPPictureDetai

com.rtk.app.Login

com.rtk.app.Register

com.rtk.app.ApkManager

com.rtk.app.AppManager

com.rtk.app.Setting

com.rtk.app.MyTheam

com.rtk.app.Forget

com.rtk.app.PersonData

com.rtk.app.PersonItem1

com.rtk.app.PersonItem2

com.rtk.app.PersonItem3

com.rtk.app.SetEmail

com.rtk.app.SetNickname

com.rtk.app.SetQQ

com.rtk.app.SetBirthday

com.rtk.app.SetSex

com.rtk.app.SetSignature

com.rtk.app.Words

com.rtk.app.About

com.rtk.app.UpdatePwd

com.rtk.app.Pic

com.zbar.lib.CaptureActivity

com.mob.tools.MobUIShell

android.intent.action.VIEW

.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

Android Permissions

8aaadf13ecb9eb77a13472237327af94_JaffaCakes118

Permissions

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

com.android.vending.CHECK_LICENSE

android.permission.GET_ACCOUNTS

android.permission.BLUETOOTH

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.BATTERY_STATS

android.permission.BROADCAST_STICKY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_PHONE_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

File Explorer

8aaadf13ecb9eb77a13472237327af94_JaffaCakes118

.GTASA

com.muzhiwan.sdk.MzwShellActivity

com.gameservice.sdk.push.ui.SmartPushActivity

com.qiqiersan.sdk.QqesShellActivity

com.wardrumstudios.utils.WarDownloaderService

com.gameservice.sdk.push.api.SmartPushService

com.wardrumstudios.utils.WarAlarmReceiver

com.AdX.tag.AdXAppTracker

com.gameservice.sdk.push.api.SmartPushReceiver

rtk_app.apk

com.rtk.app.Welcome

com.rtk.app.MainActivity

com.rtk.app.DownloadWebview

com.rtk.app.Download

com.rtk.app.SecondPage

com.rtk.app.Filter

com.rtk.app.AutoInstallDialog

com.rtk.app.APPDetailActivity

com.rtk.app.GiftFiltter

com.rtk.app.MyGiftActivity

com.rtk.app.GiftBagActivity

com.rtk.app.OpenServerActivity

com.rtk.app.GiftDetailActivity

com.rtk.app.APPPictureDetai

com.rtk.app.Login

com.rtk.app.Register

com.rtk.app.ApkManager

com.rtk.app.AppManager

com.rtk.app.Setting

com.rtk.app.MyTheam

com.rtk.app.Forget

com.rtk.app.PersonData

com.rtk.app.PersonItem1

com.rtk.app.PersonItem2

com.rtk.app.PersonItem3

com.rtk.app.SetEmail

com.rtk.app.SetNickname

com.rtk.app.SetQQ

com.rtk.app.SetBirthday

com.rtk.app.SetSex

com.rtk.app.SetSignature

com.rtk.app.Words

com.rtk.app.About

com.rtk.app.UpdatePwd

com.rtk.app.Pic

com.zbar.lib.CaptureActivity

com.mob.tools.MobUIShell

.wxapi.WXEntryActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.igexin.sdk.PushService

com.igexin.sdk.PushServiceUser

com.igexin.download.DownloadService

com.rtk.tools.MyAccessibilityService

com.rtk.tools.BootReceiver

com.getui.demo.PushDemoReceiver

com.igexin.sdk.PushReceiver

com.igexin.sdk.PushManagerReceiver

com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider

Android Permissions

8aaadf13ecb9eb77a13472237327af94_JaffaCakes118