General

  • Target

    96fbd55c80fc0443f9e93d4f283fc040_JaffaCakes118

  • Size

    23.7MB

  • MD5

    96fbd55c80fc0443f9e93d4f283fc040

  • SHA1

    59f17bb188bea134979c5f6230808fad3ea571ae

  • SHA256

    5f75720bb2e2e646baa00ead0b7036beb58474b5c4503bc9943f242a409ceadf

  • SHA512

    8df3572914d53420917238e575566407ec69fe8b070461f581d81574087db3d8a86b3ee605c2d18a42bc20e5c0ce53d30409e54a9108bf3ba313a4c7c505c3e7

  • SSDEEP

    393216:l4tp43n4bgntOfXiFF+Fg1bxBgcUq4IPdoCCGHq0HCjZNFvOxmbhnKQoHHCZ6CMQ:lW43n4PfLgrikh1HWtNFvOQKQ2HSp1

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 9 IoCs

Files

  • 96fbd55c80fc0443f9e93d4f283fc040_JaffaCakes118
    .apk android arch:arm arch:x86

    com.nd.android.pandahome2

    com.nd.hilauncherdev.launcher.Launcher


  • SohuFixHack.jar
    .apk android
  • bdxadsdk.jar
    .apk android
  • com.felink.videopaper.plugin_V_21_M_0e0c944ddc587cb09fb66e410e8b805a.jar
    .apk android

    com.felink.videopaper.plugin

    com.video.felink.videopaper.plugin.MainActivity


  • com.nd.hilauncherdev.plugin.navigation_V_79_M_f69a4482979e2539e03f0e8e3ec0afc1.jar
    .apk android

    com.nd.hilauncherdev.plugin.navigation

    com.nd.hilauncherdev.plugin.navigation.activity.MainActivity2


  • gdtadv2.jar
    .apk android arch:arm arch:arm64
  • nd.jar
    .apk android

Android Permissions

96fbd55c80fc0443f9e93d4f283fc040_JaffaCakes118

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.EXPAND_STATUS_BAR

android.permission.GET_TASKS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.BIND_APPWIDGET

com.nd.android.pandahome2.permission.READ_SETTINGS

com.nd.android.pandahome2.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_PHONE_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_APN_SETTINGS

android.permission.BATTERY_STATS

android.permission.READ_EXTERNAL_STORAGE

com.android.ContactWidget.permission.READ_SETTINGS

com.android.ContactWidget.permission.WRITE_SETTINGS

android.permission.ACCESS_WEATHERCLOCK_PROVIDER

android.permission.READ_SMS

android.permission.WAKE_LOCK

android.permission.RESTART_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

com.android.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

com.tencent.qqlauncher.permission.READ_SETTINGS

com.android.mylauncher.permission.READ_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

com.dianxinos.dxhome.permission.READ_SETTINGS

android.permission.PERSISTENT_ACTIVITY

com.huawei.android.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS