9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

General

Target
9662206ad98bc814c11ebfc22627ce12_JaffaCakes118
Size 6.4MB
Sample240604-1q8e5ade59
SHA256 b428859ef10f275e72bdf6095fd77f24f73ad4de1d88b6bcca395c3c7672e551
MD5 9662206ad98bc814c11ebfc22627ce12
SHA1 f91dc4e4681205c2c501a8d590d4c182ac091013
SHA512 23b6f12cf2dc77cae142bb52c0c1baeacd519d0777545881f28154eb09c0b32ab25a7b4d923983d7da0dc702566f39b7323b0ef894b6e99e4cae02c6baf5a320
SSDEEP 196608:UGc+ZBz6YQPYVvutCLXL8IoFTujfrp0GBd:Uh+36YlutOdocplBd
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

File Explorer

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

.apk 6.4MB

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

SHA256 b428859ef10f275e72bdf6095fd77f24f73ad4de1d88b6bcca395c3c7672e551
MD5 9662206ad98bc814c11ebfc22627ce12
SHA1 f91dc4e4681205c2c501a8d590d4c182ac091013
SHA512 23b6f12cf2dc77cae142bb52c0c1baeacd519d0777545881f28154eb09c0b32ab25a7b4d923983d7da0dc702566f39b7323b0ef894b6e99e4cae02c6baf5a320
SSDEEP 196608:UGc+ZBz6YQPYVvutCLXL8IoFTujfrp0GBd:Uh+36YlutOdocplBd
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.shenl.qinqinmh

Android Permissions

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.BLUETOOTH

android.permission.READ_EXTERNAL_STORAGE

com.shenl.qinqinmh.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

com.shenl.qinqinmh.MainActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.xcy8.ads.view.WebAct

com.yanzhenjie.permission.InstallPermissionActivity

com.yanzhenjie.permission.PermissionActivity

com.google.android.gms.common.api.GoogleApiActivity

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

nl.xservices.plugins.ShareChooserPendingIntent

cn.jpush.android.service.PushReceiver

cn.jiguang.cordova.push.JPushReceiver

cn.jpush.android.service.AlarmReceiver

cn.jiguang.cordova.push.JPushEventReceiver

com.xcy8.ads.AppInstallReceiver

io.github.pwlin.cordova.plugins.fileopener2.FileProvider

nl.xservices.plugins.FileProvider

cn.jpush.android.service.DataProvider

Sharing

General

Malware Config

Signatures

File Explorer

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118

com.shenl.qinqinmh.MainActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.xcy8.ads.view.WebAct

com.yanzhenjie.permission.InstallPermissionActivity

com.yanzhenjie.permission.PermissionActivity

com.google.android.gms.common.api.GoogleApiActivity

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

nl.xservices.plugins.ShareChooserPendingIntent

cn.jpush.android.service.PushReceiver

cn.jiguang.cordova.push.JPushReceiver

cn.jpush.android.service.AlarmReceiver

cn.jiguang.cordova.push.JPushEventReceiver

com.xcy8.ads.AppInstallReceiver

io.github.pwlin.cordova.plugins.fileopener2.FileProvider

nl.xservices.plugins.FileProvider

cn.jpush.android.service.DataProvider

Android Permissions

9662206ad98bc814c11ebfc22627ce12_JaffaCakes118