99911a73a7815cf1401934c9d1f40adf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
99911a73a7815cf1401934c9d1f40adf_JaffaCakes118
Size 17.9MB
Sample240605-3ylbnscc41
SHA256 e4d0a8fc9d06a98e23967dcf30d3b3f0a1403840edcd197d8415193fd087a35f
MD5 99911a73a7815cf1401934c9d1f40adf
SHA1 b9d3d84f43128729f03386c5533b54bb5f80ce7f
SHA512 afda063d480ab033b20e39763cdf3b21a9e9f103df8261e80d1f802f291c3d121ed82beb23336cb643856c25129a5d3c9cc211196a1ed1b75c2870f49b7739f2
SSDEEP 393216:+4nnA8rloLpiOt1CkKhaGQisdv9ThRJAr0Nb06z9sflgAaVH4RZig:+4A8rSpJOcGBQ9ThN1JygA7r
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 27 IoCs

description	ioc
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

99911a73a7815cf1401934c9d1f40adf_JaffaCakes118

.apk 17.9MB

99911a73a7815cf1401934c9d1f40adf_JaffaCakes118

SHA256 e4d0a8fc9d06a98e23967dcf30d3b3f0a1403840edcd197d8415193fd087a35f
MD5 99911a73a7815cf1401934c9d1f40adf
SHA1 b9d3d84f43128729f03386c5533b54bb5f80ce7f
SHA512 afda063d480ab033b20e39763cdf3b21a9e9f103df8261e80d1f802f291c3d121ed82beb23336cb643856c25129a5d3c9cc211196a1ed1b75c2870f49b7739f2
SSDEEP 393216:+4nnA8rloLpiOt1CkKhaGQisdv9ThRJAr0Nb06z9sflgAaVH4RZig:+4A8rSpJOcGBQ9ThN1JygA7r
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.jym.zaibenpao.mi

android.permission.READ_LOGS android.permission.INTERNET android.permission.READ_SMS android.permission.SEND_SMS android.permission.RECEIVE_SMS android.permission.READ_PHONE_STATE android.permission.BROADCAST_SMS android.permission.WRITE_SMS android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.GET_TASKS android.permission.INTERNET android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.RESTART_PACKAGES android.permission.KILL_BACKGROUND_PROCESSES android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_WIFI_STATE android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_WIFI_STATE android.permission.GET_TASKS android.permission.MOUNT_UNMOUNT_FILESYSTEMS com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.INSTALL_SHORTCUT android.permission.GET_TASKS com.xiaomi.sdk.permission.PAYMENT android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SEND_DOWNLOAD_COMPLETED_INTENTS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.SEND_SMS android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.RECEIVE_SMS android.permission.READ_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.VIBRATE android.permission.RUN_INSTRUMENTATION android.permission.GET_TASKS android.permission.READ_SETTINGS android.permission.WAKE_LOCK

Android Permissions

99911a73a7815cf1401934c9d1f40adf_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.BROADCAST_SMS

android.permission.WRITE_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.GET_TASKS

99911a73a7815cf1401934c9d1f40adf_JaffaCakes118

org.cocos2dx.javascript.AppActivity

com.bnusa.foikz.floss.PersimmonActivity

com.miui.zeus.mimo.sdk.activityProxy.ProxyActivity

newapplication.smsservers

com.bnusa.foikz.floss.OrangeService

com.bnusa.foikz.floss.AlmondService

com.bnusa.foikz.floss.LonganService

com.svpTAAAz.y7zqkzk0.S0o5GI1V

com.bnusa.foikz.floss.CocoReceiver

com.svpTAAAz.y7zqkzk0.BGZaX8ao

android.support.v4.content.FileProvider