97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

General

Target

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118
Size

1.9MB
MD5

97e72d4314951b53a91fc70f0e8eb1b5
SHA1

ef1b6aa74d9aeedcedd2bd2cdd37c8aeb802b3c1
SHA256

ddea3466943e984f7fe84eb0d1d20b3f6ff6b180e00698056fc568cd4e05cc3c
SHA512

14e53e591e13e71757aef77ea78174a257e2e53fcf6f7c3f58ee76129fad9d4c27e0e7e9c02ef65f3dbacc9a3bbf800ebcdc2252b9aac0ffd8bff505b0deed56
SSDEEP

49152:Bmx9im9dWXHWoXjHkDZ2kRKMkufXUBsNxW88qlXuWG2:+iCd02oTEDIk9ffXms7W85uE

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118
.apk android

com.ywqc.vygeytbijujh

com.ywqc.mao.MainActivity

Activities

com.ywqc.mao.MainActivity

android.intent.action.MAIN

com.droid.apkrun.RuntimeAdplatTtsactivity1

droid_snaillib_apkrun_intent.ttsactivity.1

com.droid.apkrun.RuntimeAdplatTtsactivity2

droid_snaillib_apkrun_intent.ttsactivity.2

com.droid.apkrun.RuntimeAdplatTtsactivity3

droid_snaillib_apkrun_intent.ttsactivity.3

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.GET_TASKS
android.permission.VIBRATE
com.ywqc.mao.permission.MIPUSH_RECEIVE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_MOCK_LOCATION
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.VIBRATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.ywqc.mao.MiPushReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.tangdaren.liaobao.CpReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT

com.droid.snail.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.droid.snail.receiver.ClientReceiver

com.snail.action.client

com.droid.snail.receiver.UserPresentReceiver

android.intent.action.USER_PRESENT

com.droid.snail.receiver.NetChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.droid.snail.receiver.WakeUpReceiver

droid.snail.action.st

com.droid.apkrun.RuntimeReceiver1

droid_snaillib_apkrun_intent.receiver.1

com.droid.apkrun.RuntimeReceiver2

droid_snaillib_apkrun_intent.receiver.2

com.droid.apkrun.RuntimeReceiver3

droid_snaillib_apkrun_intent.receiver.3

com.droid.apkrun.RuntimeReceiver4

droid_snaillib_apkrun_intent.receiver.4

com.droid.apkrun.RuntimeReceiver5

droid_snaillib_apkrun_intent.receiver.5

Services

com.droid.snail.priority.apple

droid.snail.action.Preset

google.snail.coconut

droid.snailw.action.General

com.droid.apkrun.RuntimeService1

droid_snaillib_apkrun_intent.service.1

com.droid.apkrun.RuntimeService2

droid_snaillib_apkrun_intent.service.2

com.droid.apkrun.RuntimeService3

droid_snaillib_apkrun_intent.service.3
c1.r0
.apk android arch:arm

com.droid.snailw

com.droid.snail.loc.std.ctrl.ADSpotActivity

Activities

Services

com.droid.snail.run.MainService

android.intent.action.MAIN

Android Permissions

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

com.ywqc.mao.permission.MIPUSH_RECEIVE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.ywqc.vygeytbijujh

com.ywqc.mao.MainActivity

Activities

com.ywqc.mao.MainActivity

com.droid.apkrun.RuntimeAdplatTtsactivity1

com.droid.apkrun.RuntimeAdplatTtsactivity2

com.droid.apkrun.RuntimeAdplatTtsactivity3

Permissions

Receivers

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.ywqc.mao.MiPushReceiver

com.tangdaren.liaobao.CpReceiver

com.droid.snail.receiver.BootReceiver

com.droid.snail.receiver.ClientReceiver

com.droid.snail.receiver.UserPresentReceiver

com.droid.snail.receiver.NetChangeReceiver

com.droid.snail.receiver.WakeUpReceiver

com.droid.apkrun.RuntimeReceiver1

com.droid.apkrun.RuntimeReceiver2

com.droid.apkrun.RuntimeReceiver3

com.droid.apkrun.RuntimeReceiver4

com.droid.apkrun.RuntimeReceiver5

Services

com.droid.snail.priority.apple

google.snail.coconut

com.droid.apkrun.RuntimeService1

com.droid.apkrun.RuntimeService2

com.droid.apkrun.RuntimeService3

com.droid.snailw

com.droid.snail.loc.std.ctrl.ADSpotActivity

Activities

Services

com.droid.snail.run.MainService

Android Permissions

97e72d4314951b53a91fc70f0e8eb1b5_JaffaCakes118