98246c745c3169d42cd5f0d230449a11_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
98246c745c3169d42cd5f0d230449a11_JaffaCakes118
Size 30.9MB
Sample240605-pg14xaga49
SHA256 a2a0f87596aaa77065c3b1a4e6b3f87372ae40bd110f5ab93b701cbe1359a927
MD5 98246c745c3169d42cd5f0d230449a11
SHA1 fc3e34a10a691dabe68ab2e8cd1389d25cd5c459
SHA512 f28b460309cc2552b0bf747d5db3260261dabc49899dce3ffee2e1e3b9c0f6543a58c2eca3671737ed5bd312cf23e9cc7a17675ff62b20398e5274499474fd8b
SSDEEP 786432:eH07YgGhgRkdpx8k4z2PB2jMrO4PF3lmafg56to9959:20pmgRkjako25UMrOuuPrX
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

98246c745c3169d42cd5f0d230449a11_JaffaCakes118

.apk 30.9MB

98246c745c3169d42cd5f0d230449a11_JaffaCakes118

SHA256 a2a0f87596aaa77065c3b1a4e6b3f87372ae40bd110f5ab93b701cbe1359a927
MD5 98246c745c3169d42cd5f0d230449a11
SHA1 fc3e34a10a691dabe68ab2e8cd1389d25cd5c459
SHA512 f28b460309cc2552b0bf747d5db3260261dabc49899dce3ffee2e1e3b9c0f6543a58c2eca3671737ed5bd312cf23e9cc7a17675ff62b20398e5274499474fd8b
SSDEEP 786432:eH07YgGhgRkdpx8k4z2PB2jMrO4PF3lmafg56to9959:20pmgRkjako25UMrOuuPrX
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.sixrpg.opalyer

com.sixrpg.opalyer.MainActive

com.sixrpg.opalyer.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.sixrpg.opalyer.business.demo.Demo

com.sixrpg.opalyer.business.TestLogin.LoginActivity

com.sixrpg.opalyer.business.base.BaseWebActivity

com.sixrpg.opalyer.business.ChannelCust.mvp.ChannelCustAvtivity

com.sixrpg.opalyer.business.TestBusiness

com.sixrpg.opalyer.business.search.SearchResult.SearchResultActivity

com.sixrpg.opalyer.business.classicalgame.ClassicalGameActivity

com.sixrpg.opalyer.business.editorrecgame.EditorRecGameActivity

com.sixrpg.opalyer.business.login.LoginActivity

com.sixrpg.opalyer.business.accountsafe.AccountSafeActivity

com.sixrpg.opalyer.business.settings.SettingsActivity

com.sixrpg.opalyer.business.bindsecurity.BindSecurityActivity

com.sixrpg.opalyer.business.register.RegisterActivity

com.sixrpg.opalyer.business.season.ShowSeasonActivity

com.sixrpg.opalyer.business.channeltype.ChannelTypeActivity

com.sixrpg.opalyer.business.recommendgame.RecommendGameActivity

com.sixrpg.opalyer.business.recentworks.RecentWorksActivity

com.sixrpg.opalyer.business.search.SearchActivity

com.sixrpg.opalyer.business.modifypassword.ModifyPwdActivity

com.sixrpg.opalyer.homepager.makergame.WebFullScreen

com.sixrpg.opalyer.business.downningQueue.DownningQueueActivity

com.sixrpg.opalyer.business.batchdelete.BatchDeleteActivity

engine.oplayer.OrgPlayerActivity

com.sixrpg.opalyer.business.H5GamePlayer.H5GameActicity

com.sixrpg.opalyer.business.about.AboutActivity

com.sixrpg.opalyer.business.feedback.FeedBackActivity

com.sixrpg.opalyer.business.softwarewall.SoftwareWallActivity

com.sixrpg.opalyer.business.mybadge.MyBadgeActivity

com.sixrpg.opalyer.business.mycard.MyCardActivity

com.sixrpg.opalyer.business.gamesetting.GameSettingActivity

com.sixrpg.opalyer.homepager.first.album.AlbumActivity

com.sixrpg.opalyer.business.gamedetail.flowerrank.ui.FlowerRankActivity

com.sixrpg.opalyer.business.gamedetail.gamevote.ui.activity.VoteActivity

com.sixrpg.opalyer.business.friendly.home.FriendlyActivity

com.sixrpg.opalyer.business.friendly.userinfo.UserInfoActivity

com.sixrpg.opalyer.business.gamedetail.checkdialog.ui.activity.CheckDialogActivity

com.sixrpg.opalyer.business.gamedetail.sendcomment.ui.activity.CommentReplyActivity

com.sixrpg.opalyer.business.detailspager.relationgames.relategame.RelatedGameActivity

com.sixrpg.opalyer.business.detailspager.relationgames.relationgamelink.RelationGameLinkActivity

com.sixrpg.opalyer.splash.gameResPath.mvp.GameResPathActivity

com.sixrpg.opalyer.business.dubgroupmanage.ui.GroupManagerActivity

com.sixrpg.opalyer.business.dubmodlist.ui.ModListActivity

com.sixrpg.opalyer.business.channeltype.diligentupdata.DiligentUpdataActivity

com.sixrpg.opalyer.business.mynews.ui.MyNewsActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.sixrpg.opalyer.wxapi.WXPayEntryActivity

com.sixrpg.opalyer.qqapi.QQPayCallBackActivity

android.intent.action.VIEW

com.sixrpg.opalyer.homepager.self.gameshop.yibaopay.ui.YiBaoPayActivity

com.sixrpg.opalyer.homepager.self.gameshop.rechargeshopnew.RechargeShopActivity

com.sixrpg.opalyer.business.selfprofile.PersonalProfilePager

com.sixrpg.opalyer.business.selfprofile.modifynickname.ModifyNickNamePager

com.sixrpg.opalyer.business.liveness.LivenessPager

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.sixrpg.opalyer.wxapi.WXEntryActivity

engine.game.popLayout.comment.PopMenuCommActivity

engine.game.popLayout.moreintroduction.MenuIntroductionActivity

com.sixrpg.opalyer.business.myconcern.mvp.MyConcernActivyty

com.sixrpg.opalyer.business.about.servicesystem.ServiceSystemActivity

com.sixrpg.opalyer.business.malevote.MaleVoteActivity

com.sixrpg.opalyer.business.gamedetail.report.ui.GameReportActivity

com.sixrpg.opalyer.business.giftcoupons.GiftCouponsActivity

com.sixrpg.opalyer.business.gamedetail.comment.reportcomment.ReportCommentActivity

com.sixrpg.opalyer.business.detailspager.DetailRevisionNewPager

com.sixrpg.opalyer.business.detailspager.comments.finecomment.FineCommentPager

com.sixrpg.opalyer.business.detailspager.wmod.modecv.WmodCVActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.sixrpg.opalyer.business.loginnew.LoginNewActivity

com.sixrpg.opalyer.business.registernew.RegisterNewActivity

com.sixrpg.opalyer.business.registernew.RegisterSetActivity

com.sixrpg.opalyer.business.registernew.RegisterNameActivity

com.huawei.hms.activity.BridgeActivity

com.huya.berry.webview.WebViewActivity

android.intent.action.VIEW

com.huya.berry.common.ImagePickerActivity

com.sixrpg.opalyer.NetWork.OrgWebStatus.ONetWorkStatusReceiver

com.sixrpg.opalyer.Root.Notification.NotificationBroadcastReceiver

notification_cancelled

com.tendcloud.appcpa.ReferralReceiver

com.android.vending.INSTALL_REFERRER

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.sixrpg.opalyer.push.jpush.OrgJpushReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.sixrpg.opalyer.push.jpush.MyJPushMessageReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

cn.jpush.android.service.PluginHuaweiPlatformsReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

cn.jpush.android.service.PluginMeizuPlatformsReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.sixrpg.opalyer.localnotify.localtimer.OgAlarmReceiver

com.sixrpg.opalyer.business.localtimer.TIMER_ACTION_REPEATING

com.meizu.cloud.pushsdk.SystemReceiver

com.meizu.cloud.pushservice.action.PUSH_SERVICE_START

com.huya.berry.common.util.NetWorkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

Android Permissions

98246c745c3169d42cd5f0d230449a11_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.BROADCAST_STICKY

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RESTART_PACKAGES

android.permission.CAMERA

com.sixrpg.opalyer.permission.MIPUSH_RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.sixrpg.opalyer.permission.C2D_MESSAGE

com.sixrpg.opalyer.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECORD_AUDIO

Manifest.permission.RECORD_AUDIO

android.permission.BLUETOOTH