90100c11e553d229e7f48e2d62df73c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
90100c11e553d229e7f48e2d62df73c4_JaffaCakes118
Size 12.8MB
Sample240603-bkl79sdh2v
SHA256 fa4a2042f8833e79f4e2bf035b82b34ae80b1247b6a361d7d49c8691c9486c98
MD5 90100c11e553d229e7f48e2d62df73c4
SHA1 2edffb5ec69b966fd009d9851b4d0ea9df245e57
SHA512 26d5feec6637b1f21adbd403abd09621dac264d38508fc31ff0121252fc85f429723f930406422b5927f0229170f5c04879be6ee3fd8b6cb87d4eccdef9b266b
SSDEEP 196608:3v9GipB72/J/Wf9S91US8YusQyU2PRBTTfnG15nN/kfPFGu/gQTIUEBlQplNXCXX:3+91PGHUR0XnNatBYwfEBWLybr
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

90100c11e553d229e7f48e2d62df73c4_JaffaCakes118

.apk 12.8MB
alipay_msp-3.5.2-1000261.apk

.apk 332KB

90100c11e553d229e7f48e2d62df73c4_JaffaCakes118

SHA256 fa4a2042f8833e79f4e2bf035b82b34ae80b1247b6a361d7d49c8691c9486c98
MD5 90100c11e553d229e7f48e2d62df73c4
SHA1 2edffb5ec69b966fd009d9851b4d0ea9df245e57
SHA512 26d5feec6637b1f21adbd403abd09621dac264d38508fc31ff0121252fc85f429723f930406422b5927f0229170f5c04879be6ee3fd8b6cb87d4eccdef9b266b
SSDEEP 196608:3v9GipB72/J/Wf9S91US8YusQyU2PRBTTfnG15nN/kfPFGu/gQTIUEBlQplNXCXX:3+91PGHUR0XnNatBYwfEBWLybr
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.duomi.android

com.duomi.android.DMLauncher

android.intent.action.MAIN

com.qihoo.util.StartActivity

android.intent.action.MAIN

com.qihoo.util.appupdate.AppUpdateActivity

com.duomi.android.DMMainActivity

com.duomi.main.common.DmBaseActivity

com.duomi.android.DMPlayerActivity

com.duomi.main.equalizer.DMEQActivity

com.duomi.android.DMDownloadActivity

com.duomi.dms.gamechannel.DMDomobAdListActivity

com.duomi.android.DMSNSActivity

com.duomi.android.DMEditActivity

com.duomi.android.DMSDJActivity

com.duomi.android.DMChargeActivity

com.duomi.apps.dmplayer.ui.activity.DMWebActivity

com.duomi.apps.dmplayer.ui.activity.DMLoginActivity

com.duomi.android.DMSettingActivity

com.duomi.main.calendar.activity.CalenderActivity

com.duomi.android.DMCrbtZoneActivity

com.duomi.android.DMAccountBindActivity

com.duomi.android.DMDownRingActivity

com.duomi.main.impression.activity.ImpressionActivity

com.duomi.apps.alarm.AlarmSettingActivity

com.duomi.apps.dmplayer.ui.activity.DMNetDiagnosisActivity

com.duomi.main.flow.DMUnicomFlowActivity

com.duomi.main.vip.VipActivity

com.duomi.main.game.GameActivity

com.duomi.android.DMWelcomeActivity

com.duomi.main.flow.DMTelecomFlowActivity

com.duomi.android.PlayerStarterActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.duomi.android.wxapi.WXPayEntryActivity

com.duomi.android.wxapi.WXEntryActivity

cn.sharesdk.framework.ShareSDKUIShell

com.duomi.apps.ad.AppDownloadTipActivity

com.duomi.android.AppDownloadTipActivity

com.duomi.apps.lockScreen.LockScreenActivity

com.duomi.superdj.view.SDJSearchTrackActivity

.DMAlbumDetailActivity

com.duomi.main.gracenote.DMGraceNoteActivity

com.duomi.main.gracenote.DMGraceNoteHistoryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.cmsc.cmmusic.common.CMMusicActivity

com.jdwx.sdk.JDAdBrowser

com.jingdong.kepler.sdk.lib.jump.KeplerHandlerBackActivity

com.duomi.apps.alarm.AlarmInitReceiver

android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED android.intent.action.LOCALE_CHANGED

com.duomi.apps.alarm.AlarmReceiver

com.duomi.alarm.ALARM_ALERT alarm_killed cancel_snooze

com.duomi.dms.core.DMSdcardReceiver

android.intent.action.MEDIA_MOUNTED android.intent.action.MEDIA_EJECT

com.duomi.dms.player.DmMediaButtonRecv

android.intent.action.MEDIA_BUTTON com.duomi.android.imcs.action.MUSIC_CONTROL

com.duomi.dms.core.DMReceiver

android.net.conn.CONNECTIVITY_CHANGE com.duomi.dms.core.DMReceiver

com.duomi.dms.plugin.PackageReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.duomi.main.flow.logic.SMSReceiver

com.duomi.telecom.smssend

com.duomi.apps.dmwidget.DMAppWidget4x1

android.appwidget.action.APPWIDGET_UPDATE android.appwidget.action.APPWIDGET_ENABLED android.appwidget.action.APPWIDGET_DELETED android.appwidget.action.APPWIDGET_DISABLED android.appwidget.action.APPWIDGET_CONFIGURE

com.duomi.apps.dmwidget.DMAppWidget4x4

com.duomi.apps.dmwidget.DMAppWidgetReceiver

.DMDeviceAdminImpl

android.app.action.DEVICE_ADMIN_ENABLED

alipay_msp-3.5.2-1000261.apk

SHA256 14c5526a13cefa6d82095df76cd4f0445962911b607cbdb72a9c3ad0117b6868
MD5 17c548f15a7c90375b94bc3a56025a1a
SHA1 46b2d0dbde500c2417b6438e8ecb2dc32dffd37b
SHA512 5ae294dd9426d421426ab7cebbed04b5ad327dcb801044528ae8eaded04a70fe2372b26dbf63aa8c5d687b09cede52207e1d608f115beeac10b9f11e0793dfc8
SSDEEP 6144:cBMjVfYqEF229WaIDNFM9wzfkRdGSrfPVX12GHBNd02vpbQTN1xUS52fnzmgvV:csVfOF229WjjfkbGUHdT10I6N1eS52f1
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

90100c11e553d229e7f48e2d62df73c4_JaffaCakes118

Permissions

android.permission.WRITE_OWNER_DATA

android.permission.READ_OWNER_DATA

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.PROCESS_OUTGOING_CALLS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.ACCESS_WIFI_STATE

android.permission.DISABLE_KEYGUARD

com.android.email.permission.READ_ATTACHMENT

com.google.android.gm.permission.READ_GMAIL

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_SMS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_SMS

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.READ_LOGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.GET_PACKAGE_SIZE

android.permission.CHANGE_WIFI_STATE

imcs.permission.MUSIC_CONTROL

android.permission.ACCESS_FINE_LOCATION

Sharing

General

Malware Config

Signatures

File Explorer

90100c11e553d229e7f48e2d62df73c4_JaffaCakes118

com.duomi.android.DMLauncher

com.qihoo.util.StartActivity

com.qihoo.util.appupdate.AppUpdateActivity

com.duomi.android.DMMainActivity

com.duomi.main.common.DmBaseActivity

com.duomi.android.DMPlayerActivity

com.duomi.main.equalizer.DMEQActivity

com.duomi.android.DMDownloadActivity

com.duomi.dms.gamechannel.DMDomobAdListActivity

com.duomi.android.DMSNSActivity

com.duomi.android.DMEditActivity

com.duomi.android.DMSDJActivity

com.duomi.android.DMChargeActivity

com.duomi.apps.dmplayer.ui.activity.DMWebActivity

com.duomi.apps.dmplayer.ui.activity.DMLoginActivity

com.duomi.android.DMSettingActivity

com.duomi.main.calendar.activity.CalenderActivity

com.duomi.android.DMCrbtZoneActivity

com.duomi.android.DMAccountBindActivity

com.duomi.android.DMDownRingActivity

com.duomi.main.impression.activity.ImpressionActivity

com.duomi.apps.alarm.AlarmSettingActivity

com.duomi.apps.dmplayer.ui.activity.DMNetDiagnosisActivity

com.duomi.main.flow.DMUnicomFlowActivity

com.duomi.main.vip.VipActivity

com.duomi.main.game.GameActivity

com.duomi.android.DMWelcomeActivity

com.duomi.main.flow.DMTelecomFlowActivity

com.duomi.android.PlayerStarterActivity

com.duomi.android.wxapi.WXPayEntryActivity

com.duomi.android.wxapi.WXEntryActivity

cn.sharesdk.framework.ShareSDKUIShell

com.duomi.apps.ad.AppDownloadTipActivity

com.duomi.apps.lockScreen.LockScreenActivity

com.duomi.superdj.view.SDJSearchTrackActivity

.DMAlbumDetailActivity

com.duomi.main.gracenote.DMGraceNoteActivity

com.duomi.main.gracenote.DMGraceNoteHistoryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.cmsc.cmmusic.common.CMMusicActivity

com.jdwx.sdk.JDAdBrowser

com.jingdong.kepler.sdk.lib.jump.KeplerHandlerBackActivity

com.duomi.dms.core.DMCoreService

com.duomi.dms.core.DMBubbleService

com.duomi.apps.ad.AppDownloadService

com.duomi.apps.lockScreen.LockScreenService

cn.dm.android.DMService

com.cmsc.cmmusic.common.MediaService

com.migu.sdk.service.MiguSdkService

com.duomi.apps.alarm.AlarmInitReceiver

com.duomi.apps.alarm.AlarmReceiver

com.duomi.dms.core.DMSdcardReceiver

com.duomi.dms.player.DmMediaButtonRecv

com.duomi.dms.core.DMReceiver

com.duomi.dms.plugin.PackageReceiver

com.duomi.main.flow.logic.SMSReceiver

com.duomi.apps.dmwidget.DMAppWidget4x1

com.duomi.apps.dmwidget.DMAppWidget4x4

com.duomi.apps.dmwidget.DMAppWidgetReceiver

.DMDeviceAdminImpl

com.duomi.apps.alarm.AlarmProvider

alipay_msp-3.5.2-1000261.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

.AlixReceiver

Android Permissions

90100c11e553d229e7f48e2d62df73c4_JaffaCakes118