9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118

General

Target
9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118
Size 5.1MB
Sample240605-tl1fdscd66
SHA256 6be93359cbe3875f2254c8afc4dc31bcb522e163211c11ec6c11019f7576fb1c
MD5 9896a6c6761b45c5a99a83f559f6a21c
SHA1 45b962fac6a8acbde29244483e7a0492a0677063
SHA512 0e6710a16646d568b9e5e7b9f9843aa9d28869889d364f1fd16d8ae55c3f51e0031f66b883e70f8606161426229ca0677a91484233061d1ae4e2cb8dd8c42ad5
SSDEEP 98304:3daQZ3JQLBVVVVVVV0zlq07Ui/OtcV94v3bb8oD/gdJOQRm6qgIXRnCP6xS:cQZDM569kbjMd3c6qgIXxCP6M
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118

.apk 5.1MB
alipay_msp.apk

.apk 354KB

9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118

SHA256 6be93359cbe3875f2254c8afc4dc31bcb522e163211c11ec6c11019f7576fb1c
MD5 9896a6c6761b45c5a99a83f559f6a21c
SHA1 45b962fac6a8acbde29244483e7a0492a0677063
SHA512 0e6710a16646d568b9e5e7b9f9843aa9d28869889d364f1fd16d8ae55c3f51e0031f66b883e70f8606161426229ca0677a91484233061d1ae4e2cb8dd8c42ad5
SSDEEP 98304:3daQZ3JQLBVVVVVVV0zlq07Ui/OtcV94v3bb8oD/gdJOQRm6qgIXRnCP6xS:cQZDM569kbjMd3c6qgIXxCP6M
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.mobilewindowcenter

android.permission.READ_PHONE_STATE android.permission.EXPAND_STATUS_BAR android.permission.SET_WALLPAPER android.permission.SET_WALLPAPER_HINTS android.permission.VIBRATE android.permission.WRITE_SETTINGS android.permission.PERSISTENT_ACTIVITY android.permission.INTERNET android.permission.RECEIVE_BOOT_COMPLETED android.permission.GET_TASKS android.permission.DISABLE_KEYGUARD android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_PHONE_STATE android.permission.CHANGE_CONFIGURATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_FINE_LOCATION com.android.launcher.permission.INSTALL_SHORTCUT android.permission.SYSTEM_ALERT_WINDOW android.permission.CHANGE_WIFI_STATE android.permission.READ_LOGS android.permission.BROADCAST_STICKY android.permission.REORDER_TASKS android.permission.RESTART_PACKAGES android.permission.AUTHENTICATE_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.READ_SYNC_SETTINGS android.permission.WRITE_SYNC_SETTINGS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_LOGS android.permission.VIBRATE android.permission.WRITE_SETTINGS

.DecorCenter

android.intent.action.MAIN

.DecorTaskRecom

.DecorDetail

android.intent.action.MAIN

.DecorSearch

android.intent.action.MAIN

.DecorWallpaperAlbum

.DecorWallpaperDetail

android.intent.action.MAIN

.puzzle.PuzzleImgActivity

.DecorLocal

.DecorWallpaperLocal

.DecorFontLocal

.app.component.LoginActivity

.app.component.AccountSetting

.app.component.InfoModifyActivity

.app.component.PasswordModifyActivity

.app.component.SexModifyActivity

.app.component.RegirsterActivity

.app.component.FindPasswordActivity

com.mobilewindowlib.control.RecommendCenter

com.mobilewindowlib.control.RecommendApps

com.mobilewindowlib.control.RecommendDetail

.StyleDiy

.ImageReview

com.alipay.android.app.sdk.WapPayActivity

com.paypal.android.MEP.PayPalActivity

.DecorTaskChatActivity

.DecorTaskSignInActivity

.DecorTaskFriends

.DecorTaskShareFriendActivity

.DecorTaskMoodActivity

.InVitationCodeActivity

.ShakeHimActivity

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

.wxapi.WXEntryActivity

.VIPAndModouIntroduce

alipay_msp.apk

SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
MD5 89c04e1ebcd58eca6dd93211628ed0bc
SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.EXPAND_STATUS_BAR

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.PERSISTENT_ACTIVITY

android.permission.INTERNET

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_WIFI_STATE

android.permission.READ_LOGS

android.permission.BROADCAST_STICKY

android.permission.REORDER_TASKS

android.permission.RESTART_PACKAGES

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

File Explorer

9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118

.DecorCenter

.DecorTaskRecom

.DecorDetail

.DecorSearch

.DecorWallpaperAlbum

.DecorWallpaperDetail

.puzzle.PuzzleImgActivity

.DecorLocal

.DecorWallpaperLocal

.DecorFontLocal

.app.component.LoginActivity

.app.component.AccountSetting

.app.component.InfoModifyActivity

.app.component.PasswordModifyActivity

.app.component.SexModifyActivity

.app.component.RegirsterActivity

.app.component.FindPasswordActivity

com.mobilewindowlib.control.RecommendCenter

com.mobilewindowlib.control.RecommendApps

com.mobilewindowlib.control.RecommendDetail

.StyleDiy

.ImageReview

com.alipay.android.app.sdk.WapPayActivity

com.paypal.android.MEP.PayPalActivity

.DecorTaskChatActivity

.DecorTaskSignInActivity

.DecorTaskFriends

.DecorTaskShareFriendActivity

.DecorTaskMoodActivity

.InVitationCodeActivity

.ShakeHimActivity

cn.sharesdk.framework.ShareSDKUIShell

.wxapi.WXEntryActivity

.VIPAndModouIntroduce

com.baidu.location.f

alipay_msp.apk

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.report.PushDistributer

.stability.AlarmReciver

com.alipay.notify.BroadcastActionReceiver

.UserIdShareProvider

Android Permissions

9896a6c6761b45c5a99a83f559f6a21c_JaffaCakes118