97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

General

Target
97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118
Size 1.9MB
Sample240605-mrrxwaeb52
SHA256 ddea3466943e984f7fe84eb0d1d20b3f6ff6b180e00698056fc568cd4e05cc3c
MD5 97e72d4314951b53a91fc70f0e8eb1b5
SHA1 ef1b6aa74d9aeedcedd2bd2cdd37c8aeb802b3c1
SHA512 14e53e591e13e71757aef77ea78174a257e2e53fcf6f7c3f58ee76129fad9d4c27e0e7e9c02ef65f3dbacc9a3bbf800ebcdc2252b9aac0ffd8bff505b0deed56
SSDEEP 49152:Bmx9im9dWXHWoXjHkDZ2kRKMkufXUBsNxW88qlXuWG2:+iCd02oTEDIk9ffXms7W85uE
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

.apk 1.9MB
c1.r0

.apk 311KB

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

SHA256 ddea3466943e984f7fe84eb0d1d20b3f6ff6b180e00698056fc568cd4e05cc3c
MD5 97e72d4314951b53a91fc70f0e8eb1b5
SHA1 ef1b6aa74d9aeedcedd2bd2cdd37c8aeb802b3c1
SHA512 14e53e591e13e71757aef77ea78174a257e2e53fcf6f7c3f58ee76129fad9d4c27e0e7e9c02ef65f3dbacc9a3bbf800ebcdc2252b9aac0ffd8bff505b0deed56
SSDEEP 49152:Bmx9im9dWXHWoXjHkDZ2kRKMkufXUBsNxW88qlXuWG2:+iCd02oTEDIk9ffXms7W85uE
MD5 SHA1 SHA512 SSDEEP

android

com.ywqc.vygeytbijujh

Android Permissions

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

com.ywqc.mao.permission.MIPUSH_RECEIVE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

com.ywqc.mao.MainActivity

com.ywqc.mao.wxapi.WXEntryActivity

com.tabatoo.slidingbar.TabatooBrowserActivity

com.tangdaren.liaobao.CpActivity

com.droid.apkrun.RuntimeAdplatTtsactivity1

com.droid.apkrun.RuntimeAdplatTtsactivity2

com.droid.apkrun.RuntimeAdplatTtsactivity3

com.ywqc.utility.update.UpdateService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.unionsy.sdk.SsjjAdService

com.tangdaren.liaobao.DownService

com.tangdaren.liaobao.OtherAppCpService

com.droid.snail.priority.apple

google.snail.coconut

com.droid.apkrun.RuntimeService1

com.droid.apkrun.RuntimeService2

com.droid.apkrun.RuntimeService3

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.ywqc.mao.MiPushReceiver

com.tangdaren.liaobao.CpReceiver

com.droid.snail.receiver.BootReceiver

com.droid.snail.receiver.ClientReceiver

com.droid.snail.receiver.UserPresentReceiver

com.droid.snail.receiver.NetChangeReceiver

com.droid.snail.receiver.WakeUpReceiver

com.droid.apkrun.RuntimeReceiver1

com.droid.apkrun.RuntimeReceiver2

com.droid.apkrun.RuntimeReceiver3

com.droid.apkrun.RuntimeReceiver4

com.droid.apkrun.RuntimeReceiver5

c1.r0

com.droid.snail.loc.std.ctrl.ADSpotActivity

com.droid.snail.run.MainService

Sharing

General

Malware Config

Signatures

File Explorer

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

com.ywqc.mao.MainActivity

com.ywqc.mao.wxapi.WXEntryActivity

com.tabatoo.slidingbar.TabatooBrowserActivity

com.tangdaren.liaobao.CpActivity

com.droid.apkrun.RuntimeAdplatTtsactivity1

com.droid.apkrun.RuntimeAdplatTtsactivity2

com.droid.apkrun.RuntimeAdplatTtsactivity3

com.ywqc.utility.update.UpdateService

com.xiaomi.push.service.XMPushService

com.xiaomi.mipush.sdk.PushMessageHandler

com.unionsy.sdk.SsjjAdService

com.tangdaren.liaobao.DownService

com.tangdaren.liaobao.OtherAppCpService

com.droid.snail.priority.apple

google.snail.coconut

com.droid.apkrun.RuntimeService1

com.droid.apkrun.RuntimeService2

com.droid.apkrun.RuntimeService3

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.ywqc.mao.MiPushReceiver

com.tangdaren.liaobao.CpReceiver

com.droid.snail.receiver.BootReceiver

com.droid.snail.receiver.ClientReceiver

com.droid.snail.receiver.UserPresentReceiver

com.droid.snail.receiver.NetChangeReceiver

com.droid.snail.receiver.WakeUpReceiver

com.droid.apkrun.RuntimeReceiver1

com.droid.apkrun.RuntimeReceiver2

com.droid.apkrun.RuntimeReceiver3

com.droid.apkrun.RuntimeReceiver4

com.droid.apkrun.RuntimeReceiver5

c1.r0

com.droid.snail.loc.std.ctrl.ADSpotActivity

com.droid.snail.run.MainService

Android Permissions

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118