90619d788e29e96a72f47e40afeef183_JaffaCakes118

General

Target
90619d788e29e96a72f47e40afeef183_JaffaCakes118
Size 10.8MB
Sample240603-dv79lahd2y
SHA256 b1ef464c3aa8940869b085cfba74ffde58f19d1464b12809c8f0f96e157e9768
MD5 90619d788e29e96a72f47e40afeef183
SHA1 ae224c66326f2c47c29e773a62bd23b5fdfc59d1
SHA512 b735f903ac501b5b5d47c8437a6c361ab9dd9b31f83f48be97d74bde82dbbd54c2be1ee31a8ff9edf61d2c9b9b5f699e9c28e7720b1623f037ddaed77adeab7b
SSDEEP 196608:TSGMekuqTLUzGXmWgkW5c95ukG6hAQrwTslmARJgXgG8Bn1JKehC+wGN:TuekuqTLWGXjwaG4AQhlmARJH71J5hBx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

90619d788e29e96a72f47e40afeef183_JaffaCakes118

.apk 10.8MB

90619d788e29e96a72f47e40afeef183_JaffaCakes118

SHA256 b1ef464c3aa8940869b085cfba74ffde58f19d1464b12809c8f0f96e157e9768
MD5 90619d788e29e96a72f47e40afeef183
SHA1 ae224c66326f2c47c29e773a62bd23b5fdfc59d1
SHA512 b735f903ac501b5b5d47c8437a6c361ab9dd9b31f83f48be97d74bde82dbbd54c2be1ee31a8ff9edf61d2c9b9b5f699e9c28e7720b1623f037ddaed77adeab7b
SSDEEP 196608:TSGMekuqTLUzGXmWgkW5c95ukG6hAQrwTslmARJgXgG8Bn1JKehC+wGN:TuekuqTLWGXjwaG4AQhlmARJH71J5hBx
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.wzsy.wzoft

Android Permissions

90619d788e29e96a72f47e40afeef183_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

com.wzsy.wzoft.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

90619d788e29e96a72f47e40afeef183_JaffaCakes118

lzsy.jatz.Base.BaseWebViewActivity

lzsy.jatz.Base.LauncherActivity

lzsy.jzb.activity.SJSDLActivity

lzsy.jzb.activity.FanLiActivity

lzsy.jzb.activity.JZCirCleActivity

lzsy.jatz.login.LoginActivity

lzsy.jatz.login.RegisterActivityNew

lzsy.jatz.login.ResetPWDActivity

lzsy.jzb.activity.WSZQActivity

lzsy.jzb.activity.JZDLActivity

lzsy.jzb.activity.SJSDLActivity

lzsy.jzb.activity.FanLiTwoActivity

lzsy.jzb.activity.QYXZActivity

lzsy.jzb.activity.WLJZActivity

lzsy.jzb.activity.JianZhiYYBActivity

lzsy.jzb.activity.BYDRActivity

lzsy.jzb.activity.HbrcActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

android.support.v4.content.FileProvider

cn.jpush.android.service.DataProvider

cn.jpush.android.service.DownloadProvider

Sharing

General

Malware Config

Signatures

File Explorer

90619d788e29e96a72f47e40afeef183_JaffaCakes118

lzsy.jatz.Base.BaseWebViewActivity

lzsy.jatz.Base.LauncherActivity

lzsy.jzb.activity.SJSDLActivity

lzsy.jzb.activity.FanLiActivity

lzsy.jzb.activity.JZCirCleActivity

lzsy.jatz.login.LoginActivity

lzsy.jatz.login.RegisterActivityNew

lzsy.jatz.login.ResetPWDActivity

lzsy.jzb.activity.WSZQActivity

lzsy.jzb.activity.JZDLActivity

lzsy.jzb.activity.SJSDLActivity

lzsy.jzb.activity.FanLiTwoActivity

lzsy.jzb.activity.QYXZActivity

lzsy.jzb.activity.WLJZActivity

lzsy.jzb.activity.JianZhiYYBActivity

lzsy.jzb.activity.BYDRActivity

lzsy.jzb.activity.HbrcActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

android.support.v4.content.FileProvider

cn.jpush.android.service.DataProvider

cn.jpush.android.service.DownloadProvider

Android Permissions

90619d788e29e96a72f47e40afeef183_JaffaCakes118