94ed711da884a796bcd5bdb50fb9c3ed_JaffaCakes118

General

Target

94ed711da884a796bcd5bdb50fb9c3ed_JaffaCakes118
Size

2.4MB
MD5

94ed711da884a796bcd5bdb50fb9c3ed
SHA1

8cae8ae036ca1daaeb8e0ae7da35253f5cbdf025
SHA256

e9e4bb0fa42a1caea36bfecc9ebbacd638233a1b055297835c0d0e5d0f33933d
SHA512

c882fd20cab8b294e33e5f4ea260848c3f2654b040c7d009a50f27f8a1a53de7d59f8b130a3b8066b581d5d0bf20f8ef5b20ad0f73c0eed1eea4c057bebcf389
SSDEEP

49152:ROjJPJ31vXbUmhDDbXzNthloPJtsY1xSTc5iuAihiL4A01KCwoqn:UR31vgqbzNthlmgUSTsbi4Af/

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS

Files

94ed711da884a796bcd5bdb50fb9c3ed_JaffaCakes118
.apk android

cn.qitu.qitutoolbox

.AppStart

Activities

.AppStart

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RESTART_PACKAGES
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.DISABLE_KEYGUARD
android.permission.RESTART_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.CAMERA
android.permission.FLASHLIGHT
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.DISABLE_KEYGUARD
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.READ_SYNC_STATS
android.permission.WRITE_SYNC_SETTINGS
com.android.launcher.permission.READ_SETTINGS
android.permission.CLEAR_APP_CACHE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.WRITE_SMS

Receivers

cn.qitu.qitutoolbox.receive.MainReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

cn.qitu.qitutoolbox.download.service.DownloadService

cn.qitu.qitutoolbox.download.services.IDownloadService

Android Permissions

94ed711da884a796bcd5bdb50fb9c3ed_JaffaCakes118

Permissions

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.DISABLE_KEYGUARD

android.permission.RESTART_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.CAMERA

android.permission.FLASHLIGHT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.DISABLE_KEYGUARD

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.READ_SYNC_STATS

android.permission.WRITE_SYNC_SETTINGS

com.android.launcher.permission.READ_SETTINGS

android.permission.CLEAR_APP_CACHE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.WRITE_SMS

Sharing

General

Malware Config

Signatures

Files

cn.qitu.qitutoolbox

.AppStart

Activities

.AppStart

Permissions

Receivers

cn.qitu.qitutoolbox.receive.MainReceiver

Services

cn.qitu.qitutoolbox.download.service.DownloadService

Android Permissions

94ed711da884a796bcd5bdb50fb9c3ed_JaffaCakes118