90d3527a24a208fc5ca1643f2c4010b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

90d3527a24a208fc5ca1643f2c4010b6_JaffaCakes118
Size

9.5MB
MD5

90d3527a24a208fc5ca1643f2c4010b6
SHA1

0fe1fd425645145ae12eb878c71e3548b31755ae
SHA256

7ab8eebc83e1009985db813ef2cc0abd937aab4d5a4099a932d12a1780c9f6cc
SHA512

c39cc6d7689b300e3931eded3141122297ca9a6a08cc010e5da5a8d2cf0678a5371aae37f718255fad097bfadbd4aa8d29494bd148f452037899a8d8957e4000
SSDEEP

196608:NZaZQiqGq0QX+1kId7HG4UURN27eU54VaWwUI3HtM/6hYcXACOFy/:NZExqGq0QXk9Fm4UUREaU3JUI3HtMSa4

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Files

90d3527a24a208fc5ca1643f2c4010b6_JaffaCakes118
.apk android arch:arm arch:x86

com.maihan.tredian

com.maihan.tredian.activity.WelcomeActivity

Activities

com.maihan.tredian.activity.WelcomeActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.maihan.tredian.activity.NewsDetailActivity

android.intent.action.VIEW

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.READ_CONTACTS
android.permission.ACCESS_WIFI_STATE
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.MANAGE_USERS
android.permission.WAKE_LOCK
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.PACKAGE_USAGE_STATS
android.permission.BATTERY_STATS
android.permision.BLUETOOTH
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.READ_CALL_LOG
com.maihan.tredian.permission.MIPUSH_RECEIVE
com.meizu.flyme.push.permission.RECEIVE
com.maihan.tredian.push.permission.MESSAGE
com.meizu.c2dm.permission.RECEIVE
com.maihan.tredian.permission.C2D_MESSAGE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.DISABLE_KEYGUARD
android.permission.EXPAND_STATUS_BAR
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.ACCESS_DOWNLOAD_MANAGER
com.maihan.tredian.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Receivers

com.maihan.tredian.receiver.MyBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.maihan.tredian.push.XiaomiMessegeReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.maihan.tredian.push.MeizuPushMsgReceiver

com.meizu.flyme.push.intent.MESSAGE
com.meizu.flyme.push.intent.REGISTER.FEEDBACK
com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK
com.meizu.c2dm.intent.REGISTRATION
com.meizu.c2dm.intent.RECEIVE

com.maihan.tredian.push.MyJpushMessageReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.maihan.tredian.push.MyJpushBroadcastReceiver

cn.jpush.android.intent.REGISTRATION
cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED
cn.jpush.android.intent.CONNECTION

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL
com.huawei.intent.action.PUSH
com.huawei.intent.action.PUSH_ON
com.huawei.android.push.PLUGIN
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.huawei.android.pushagent.PushBootReceiver

com.huawei.android.push.intent.REGISTER
android.net.conn.CONNECTIVITY_CHANGE

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL
com.huawei.intent.action.PUSH
com.huawei.intent.action.PUSH_ON
com.huawei.android.push.PLUGIN
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.maihan.tredian.push.HuaweiReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE
com.huawei.android.push.plugin.RESPONSE
android.service.notification.NotificationListenerService

com.maihan.madsdk.download.DownloadManagerReceiver

android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED
android.intent.action.DOWNLOAD_COMPLETE

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND
com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

com.maihan.tredian.intent.action.COMMAND
android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.maihan.madsdk.receiver.MhBroadcastReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED

Services

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE
com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.XiaomiIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.enablecallback.action
com.umeng.message.disablecallback.action
com.umeng.message.message.handler.action

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME
bdxadsdk.jar
.apk android
gdtadv2.jar
.apk android

Android Permissions

90d3527a24a208fc5ca1643f2c4010b6_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MANAGE_USERS

android.permission.WAKE_LOCK

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.PACKAGE_USAGE_STATS

android.permission.BATTERY_STATS

android.permision.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_CALL_LOG

com.maihan.tredian.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

com.maihan.tredian.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.maihan.tredian.permission.C2D_MESSAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.EXPAND_STATUS_BAR

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.ACCESS_DOWNLOAD_MANAGER

com.maihan.tredian.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Sharing

General

Malware Config

Signatures

Files

com.maihan.tredian

com.maihan.tredian.activity.WelcomeActivity

Activities

com.maihan.tredian.activity.WelcomeActivity

com.maihan.tredian.activity.NewsDetailActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.umeng.qq.tencent.AuthActivity

cn.jpush.android.ui.PushActivity

Permissions

Receivers

com.maihan.tredian.receiver.MyBroadcastReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.maihan.tredian.push.XiaomiMessegeReceiver

com.maihan.tredian.push.MeizuPushMsgReceiver

com.maihan.tredian.push.MyJpushMessageReceiver

com.maihan.tredian.push.MyJpushBroadcastReceiver

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.pushagent.PushBootReceiver

com.huawei.android.pushagent.PushEventReceiver

com.maihan.tredian.push.HuaweiReceiver

com.maihan.madsdk.download.DownloadManagerReceiver

com.taobao.accs.EventReceiver

com.taobao.accs.ServiceReceiver

com.taobao.agoo.AgooCommondReceiver

cn.jpush.android.service.PushReceiver

com.maihan.madsdk.receiver.MhBroadcastReceiver

Services

cn.jpush.android.service.DaemonService

com.taobao.accs.ChannelService

com.taobao.accs.data.MsgDistributeService

org.android.agoo.accs.AgooService

com.umeng.message.UmengIntentService

com.umeng.message.XiaomiIntentService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

cn.jpush.android.service.PushService

Android Permissions

90d3527a24a208fc5ca1643f2c4010b6_JaffaCakes118