9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

General

Target
9624cc30ea23374f272ba5f663eb8984_JaffaCakes118
Size 20.9MB
Sample240604-y7wfsaba88
SHA256 129c9b94fa233ed3d4d359b076315254351143776cadd7674d398fbe3f9b690f
MD5 9624cc30ea23374f272ba5f663eb8984
SHA1 7e43f962188a3094ae883e59eea71428f978ddb2
SHA512 cf34cca3abe99f94622d0a0eb5581f62bd2b96a9af55771ffb7ef59d4bb3f7d66356bcf1b898b847f4f886a41c7b839d708e8311595c334b13cec6bbffe2d235
SSDEEP 393216:R1YDYsUtD4pbIkm2s3PsZ1oDOT0+0QGFkJObJv2vYADuZUW49Zc:rY0VwbIkhsfsLIOT10Z6JOwDu2a
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

.apk 20.9MB
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

.apk 4.2MB
vivounionsdk.res

.apk 29KB

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

SHA256 129c9b94fa233ed3d4d359b076315254351143776cadd7674d398fbe3f9b690f
MD5 9624cc30ea23374f272ba5f663eb8984
SHA1 7e43f962188a3094ae883e59eea71428f978ddb2
SHA512 cf34cca3abe99f94622d0a0eb5581f62bd2b96a9af55771ffb7ef59d4bb3f7d66356bcf1b898b847f4f886a41c7b839d708e8311595c334b13cec6bbffe2d235
SSDEEP 393216:R1YDYsUtD4pbIkm2s3PsZ1oDOT0+0QGFkJObJv2vYADuZUW49Zc:rY0VwbIkhsfsLIOT10Z6JOwDu2a
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.hlys.gddchyf.nearme.vivo

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.vivo.sdkplugin

Android Permissions

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

vivo.game.permission.OPEN_JUMP_INTENTS

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_FINE_LOCATION

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

com.tendcloud.wd.UWD

com.vivo.unionsdk.ui.UnionActivity

com.tendcloud.wd.provider.UpdateFileProvider

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.sdkplugin.core.functions.permission.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.sdkplugin.core.compunctions.activity.UnionActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.bbk.account.oauth.activity.AuthorizeActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.sdkplugin.suspension.service.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

com.vivo.upgradelibrary.utils.FileProvider

vivounionsdk.res

com.vivo.unionsdk.ui.UnionActivity

Sharing

General

Malware Config

Signatures

File Explorer

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118

com.tendcloud.wd.UWD

com.vivo.unionsdk.ui.UnionActivity

com.tendcloud.wd.provider.UpdateFileProvider

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.sdkplugin.core.functions.permission.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.sdkplugin.core.compunctions.activity.UnionActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.bbk.account.oauth.activity.AuthorizeActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.sdkplugin.suspension.service.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

com.vivo.upgradelibrary.utils.FileProvider

vivounionsdk.res

com.vivo.unionsdk.ui.UnionActivity

Android Permissions

9624cc30ea23374f272ba5f663eb8984_JaffaCakes118