9261b703874378e50655e0c127325c41_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9261b703874378e50655e0c127325c41_JaffaCakes118
Size 13.9MB
Sample240603-tkvthsda65
SHA256 8bed9542ea7c9a94a03a6482785ada6e45943caf61e4d3f868be9b3e908a40f6
MD5 9261b703874378e50655e0c127325c41
SHA1 079ef2de99ccd0cff2b92a358ff386754c9a5387
SHA512 98f90147f02ee101d4681b19b2dfe28f072e109d4c254c00980054d6763f4f2e083e78eaac0f700b04f72ac4196101e66a0fd95ae1cc400e2c8248cd37d92174
SSDEEP 393216:OiJ+VcWh5ndl63bPPY8nu2VTJ6ekKuDJ/:OiJ+mE5dl6Y8nrJJ6ekJ/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

9261b703874378e50655e0c127325c41_JaffaCakes118

.apk 13.9MB
collector.dex

.apk 22KB
container.dex

.apk 13KB

9261b703874378e50655e0c127325c41_JaffaCakes118

SHA256 8bed9542ea7c9a94a03a6482785ada6e45943caf61e4d3f868be9b3e908a40f6
MD5 9261b703874378e50655e0c127325c41
SHA1 079ef2de99ccd0cff2b92a358ff386754c9a5387
SHA512 98f90147f02ee101d4681b19b2dfe28f072e109d4c254c00980054d6763f4f2e083e78eaac0f700b04f72ac4196101e66a0fd95ae1cc400e2c8248cd37d92174
SSDEEP 393216:OiJ+VcWh5ndl63bPPY8nu2VTJ6ekKuDJ/:OiJ+mE5dl6Y8nrJJ6ekJ/
MD5 SHA1 SHA512 SSDEEP

com.droidnew.qiang.asgardsoft.tunnel

Android Permissions

9261b703874378e50655e0c127325c41_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.VIBRATE

android.permission.RESTART_PACKAGES

android.permission.WRITE_SETTINGS

9261b703874378e50655e0c127325c41_JaffaCakes118

com.jonathanlanis.boost2.DemoActivity

com.pocketchange.android.rewards.NotificationActivity

com.pocketchange.android.rewards.ShopActivity

com.qiangfeng.wpa.OffersWebView

com.qiangfeng.kt.MyActivity

com.qiangfeng.ks.KSAActivity

com.qiangfeng.ks.KSBActivity

com.pocketchange.android.http.AsyncHttpRequestService

com.qiangfeng.kt.MyService

neo.proxy.FastService

com.pocketchange.android.PackageDataReceiver

com.qiangfeng.kt.MyReceiver

com.qiangfeng.ks.KSReceiver

neo.proxy.DistributeReceiver

collector.dex

container.dex