9808d345f3985499f88eab22f0d04508_JaffaCakes118

General

Target
9808d345f3985499f88eab22f0d04508_JaffaCakes118
Size 18.0MB
Sample240605-np3r2afb69
SHA256 0a17bbd6cc8eed12bafac69dad8424791e6f7a237ad436dfccf5faf6501ace34
MD5 9808d345f3985499f88eab22f0d04508
SHA1 5705988e61ca1b57c682044d1154166137e9a340
SHA512 8b1cee484a16fd8ea27df386af7b6a265efc79f6c0e37897c06e8a62b38601229b442630f445c4a905074eb583d05fa934ee865c9c76c435e120e57d70307102
SSDEEP 393216:Vp2b2q9dABqOvt6GIfbbkpzx0Ep3kGiLkwYr3xWHicfdMq:VUaIkN16GIfENx1pSLOr3u9z
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

9808d345f3985499f88eab22f0d04508_JaffaCakes118

.apk 18.0MB
BaiduNaviSDK_3.1.1.png

.apk 676KB
BaiduNaviSDK_Resource_3.1.1.png

.apk 4.1MB

9808d345f3985499f88eab22f0d04508_JaffaCakes118

SHA256 0a17bbd6cc8eed12bafac69dad8424791e6f7a237ad436dfccf5faf6501ace34
MD5 9808d345f3985499f88eab22f0d04508
SHA1 5705988e61ca1b57c682044d1154166137e9a340
SHA512 8b1cee484a16fd8ea27df386af7b6a265efc79f6c0e37897c06e8a62b38601229b442630f445c4a905074eb583d05fa934ee865c9c76c435e120e57d70307102
SSDEEP 393216:Vp2b2q9dABqOvt6GIfbbkpzx0Ep3kGiLkwYr3xWHicfdMq:VUaIkN16GIfENx1pSLOr3u9z
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.cctvniuben.mycar

Android Permissions

9808d345f3985499f88eab22f0d04508_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCES_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_GPS

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_PHONE_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

9808d345f3985499f88eab22f0d04508_JaffaCakes118

com.niuben.mycar.SplashActivity

com.niuben.mycar.WelcomeActivity

com.niuben.mycar.MainActivity

com.niuben.mycar.Activitys.RoadNAVActivity

com.niuben.mycar.Activitys.BNDemoGuideActivity

com.niuben.mycar.Activitys.BusLineSearchActivity

com.niuben.mycar.Activitys.RoutePlanActivity

com.niuben.mycar.Activitys.AroundSearchActivity

com.niuben.mycar.Activitys.NewsTextActivity

com.niuben.mycar.Activitys.CarShowActivity

com.niuben.mycar.Activitys.LandActivity

com.niuben.mycar.Activitys.SingUpActivity

com.niuben.mycar.Activitys.CarRecordActivity

com.baidu.location.f

BaiduNaviSDK_3.1.1.png

BaiduNaviSDK_Resource_3.1.1.png

com.baidu.navi.api.MainActivity

Sharing

General

Malware Config

Signatures

File Explorer

9808d345f3985499f88eab22f0d04508_JaffaCakes118

com.niuben.mycar.SplashActivity

com.niuben.mycar.WelcomeActivity

com.niuben.mycar.MainActivity

com.niuben.mycar.Activitys.RoadNAVActivity

com.niuben.mycar.Activitys.BNDemoGuideActivity

com.niuben.mycar.Activitys.BusLineSearchActivity

com.niuben.mycar.Activitys.RoutePlanActivity

com.niuben.mycar.Activitys.AroundSearchActivity

com.niuben.mycar.Activitys.NewsTextActivity

com.niuben.mycar.Activitys.CarShowActivity

com.niuben.mycar.Activitys.LandActivity

com.niuben.mycar.Activitys.SingUpActivity

com.niuben.mycar.Activitys.CarRecordActivity

com.baidu.location.f

BaiduNaviSDK_3.1.1.png

BaiduNaviSDK_Resource_3.1.1.png

com.baidu.navi.api.MainActivity

Android Permissions

9808d345f3985499f88eab22f0d04508_JaffaCakes118