99bf0892ee0c2e3e7e2262f016a187aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
99bf0892ee0c2e3e7e2262f016a187aa_JaffaCakes118
Size 19.1MB
Sample240606-b619bafa65
SHA256 a3e759fcece21e51dcf408cfb95e4f3a3c46d76c0cf7a08d2067428ee17f62a7
MD5 99bf0892ee0c2e3e7e2262f016a187aa
SHA1 703e91aa3e360587c5d9f91308045c7a3b2c0d58
SHA512 0b3e5aeda2aaf6b599be7558b3fe8acde10aa35cc6d0f6364fed7fd4fa4379d6f6f01ba3d061c90ff78d4f63718359be6281b372ee92b6bd0047fe5669edad61
SSDEEP 393216:U3L3+Ek7ViriDtx5a4AbLrs3EDBqtZOewwQN1MMDWINhgNrJZuXL:U3L3Df0txxAbmEDBqtZOew7YMCvZy
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

99bf0892ee0c2e3e7e2262f016a187aa_JaffaCakes118

.apk 19.1MB

99bf0892ee0c2e3e7e2262f016a187aa_JaffaCakes118

SHA256 a3e759fcece21e51dcf408cfb95e4f3a3c46d76c0cf7a08d2067428ee17f62a7
MD5 99bf0892ee0c2e3e7e2262f016a187aa
SHA1 703e91aa3e360587c5d9f91308045c7a3b2c0d58
SHA512 0b3e5aeda2aaf6b599be7558b3fe8acde10aa35cc6d0f6364fed7fd4fa4379d6f6f01ba3d061c90ff78d4f63718359be6281b372ee92b6bd0047fe5669edad61
SSDEEP 393216:U3L3+Ek7ViriDtx5a4AbLrs3EDBqtZOewwQN1MMDWINhgNrJZuXL:U3L3Df0txxAbmEDBqtZOew7YMCvZy
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.wuzhaiyigou.users

com.xtwl.users.activitys.WelcomeAct

android.intent.action.MAIN android.intent.action.VIEW

com.xtwl.users.activitys.wxapi.WXEntryActivity

com.xtwl.users.activitys.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.xtwl.users.activitys.MainTabAct

com.xtwl.users.activitys.HomeSearchAct

com.xtwl.users.activitys.HomeSearchAct1

com.xtwl.users.activitys.HomeSearchResultAct

com.xtwl.users.activitys.BargainGroupInfoAct

com.xtwl.users.activitys.AllMemberAct

com.xtwl.users.activitys.BargainGroupAct

com.xtwl.users.activitys.WebViewAct

com.xtwl.users.activitys.ChangePassAct

com.xtwl.users.activitys.GlideAct

com.xtwl.users.activitys.PinTuanDetailAct

com.xtwl.users.activitys.PinTuanFeedBackAct

com.xtwl.users.activitys.PinTuanRefundAct

com.xtwl.users.activitys.PinTuanWriteAppriseAct

com.xtwl.users.activitys.LoginAct

com.xtwl.users.activitys.LoginByCodeAct

com.xtwl.users.activitys.ChangePhoneAct

com.xtwl.users.activitys.CheckPhoneAct

com.xtwl.users.activitys.NewPhoneAct

com.xtwl.users.activitys.RegisterAct

com.xtwl.users.activitys.AgreeXieYiAct

com.xtwl.users.activitys.ConfirmAddressAct

com.xtwl.users.activitys.CouponDescAct

com.xtwl.users.activitys.MyCouponAct

com.xtwl.users.activitys.HistoryCouponAct

com.xtwl.users.activitys.RunConfirmAddressAct

com.xtwl.users.activitys.RunConfirmAddressAct1

com.xtwl.users.activitys.ChooseAddressAct

com.xtwl.users.activitys.SearchAddressAct

com.xtwl.users.activitys.RunSearchAddressAct

com.xtwl.users.activitys.AddressListAct

com.xtwl.users.activitys.RunManageAddressAct

com.xtwl.users.activitys.RunAddAddressAct

com.xtwl.users.activitys.RunChooseAddressAct

com.xtwl.users.activitys.ScanActivity

com.xtwl.users.activitys.PinTuanOrderDetailAct

com.xtwl.users.activitys.AddAddressAct

com.xtwl.users.activitys.JifenExchangeAct

com.xtwl.users.activitys.UserInfoAct

com.xtwl.users.activitys.WShopAct

com.xtwl.users.activitys.PhotoGalleryAct

com.xtwl.users.activitys.PhotoSlideAct

com.xtwl.users.activitys.PhotoSlideActNew

com.xtwl.users.activitys.ShopPhotoSlideAct

com.xtwl.users.activitys.WOrderMainAct

com.xtwl.users.activitys.WMainAct

com.xtwl.users.activitys.WMainAct1

com.xtwl.users.activitys.WSearchAct

com.xtwl.users.activitys.WShopListAct

com.xtwl.users.activitys.WOrderDetailAct

com.xtwl.users.activitys.CommitOrderAct

com.xtwl.users.activitys.WCustomerServiceAct

com.xtwl.users.activitys.WApplyRefundAct

com.xtwl.users.activitys.WZXTKRefundAct

com.xtwl.users.activitys.WRefundDetailAct

com.xtwl.users.activitys.TGoodDetailAct

com.xtwl.users.activitys.TCashDetailAct

com.xtwl.users.activitys.TShopDetailAct

com.xtwl.users.activitys.TCommitOrderAct

com.xtwl.users.activitys.TPayOrderAct

com.xtwl.users.activitys.TPaySuccessAct

com.xtwl.users.activitys.UseMyCouponAct

com.xtwl.users.activitys.TAppriseListAct

com.xtwl.users.activitys.WOrderTrackAct

com.xtwl.users.activitys.MyAppriseAct

com.xtwl.users.activitys.MyCollectAct

com.xtwl.users.activitys.TOrderDetailAct

com.xtwl.users.activitys.CouponOrderDetailAct

com.xtwl.users.activitys.tuangou.TuanGouRefundAct

com.xtwl.users.activitys.tuangou.TMainAct

com.xtwl.users.activitys.tuangou.CouponListAct

com.xtwl.users.activitys.tuangou.TWriteAppriseAct

com.xtwl.users.activitys.tuangou.TAppriseSuccessAct

com.xtwl.users.activitys.WWriteAppriceAct

com.xtwl.users.activitys.WAppriseSuccessAct

com.xtwl.users.activitys.TShopListAct

com.xtwl.users.activitys.TSearchAct

com.xtwl.users.activitys.DispatchLocationActivity

com.xtwl.users.activitys.SettingAct

com.xtwl.users.activitys.WOrderPayAct

com.xtwl.users.activitys.WOrderPaySuccessAct

com.xtwl.users.activitys.MyMessageAct

com.xtwl.users.activitys.MyCashAct

com.xtwl.users.activitys.UseCashAct

com.xtwl.users.activitys.BargainGroupAllBuyingAct

com.xtwl.users.activitys.BargainGroupOrderSubmitAct

com.xtwl.users.activitys.BargainGroupShopInfoAct

com.xtwl.users.activitys.MessageListAct

com.xtwl.users.activitys.MessageDetailAct

com.xtwl.users.activitys.FeedBackAct

com.xtwl.users.activitys.RecommendAct

com.xtwl.users.activitys.SayDetailAct

com.xtwl.users.activitys.ReportAct

com.xtwl.users.activitys.MyJifenAct

com.xtwl.users.activitys.JifenDetailAct

com.xtwl.users.activitys.MySayListAct

com.xtwl.users.activitys.PublicSayAct

com.xtwl.users.activitys.SignAct

com.xtwl.users.activitys.NewMessageAct

com.xtwl.users.activitys.BbsUserDetailAct

com.xtwl.users.activitys.HomePageAct

com.xtwl.users.activitys.RunHomePageAct

com.xtwl.users.activitys.RunOrderListAct

com.xtwl.users.activitys.RunShopPriceAct

com.xtwl.users.activitys.RefundInfoAct

com.xtwl.users.activitys.CustomerServiceInfoAct

com.xtwl.users.activitys.RunOrderInfoAct

com.xtwl.users.activitys.ApplyCustomerServiceAct

com.xtwl.users.activitys.TotalShopCartAct

com.xtwl.users.activitys.WUseCouponAct

com.xtwl.users.fragments.pintuan.PintuanGoodsDetailAct

com.xtwl.users.activitys.SeeAllWaimaiSearchAct

com.xtwl.users.activitys.pintuan.PinTuanMainAct

com.xtwl.users.activitys.BargainGroupOrderDetailAct

com.xtwl.users.activitys.pintuan.PinTuanOrderSureAct

com.xtwl.users.activitys.pintuan.PinTuanCouponListAct

com.xtwl.users.activitys.pintuan.PinTuanShopDetailAct

com.xtwl.users.activitys.BargainGroupDetailAct

com.xtwl.users.activitys.pintuan.PintuanShopAllZzpListAct

com.xtwl.users.activitys.pintuan.PintuanAllCommentAct

com.xtwl.users.activitys.pintuan.PintuanGoodsAllZzpListAct

com.soundcloud.android.crop.CropImageActivity

com.darsh.multipleimageselect.activities.AlbumSelectActivity

com.darsh.multipleimageselect.activities.ImageSelectActivity

com.luck.picture.lib.PictureSelectorActivity

com.luck.picture.lib.PictureBaseActivity

com.luck.picture.lib.PicturePreviewActivity

com.luck.picture.lib.PictureVideoPlayActivity

com.luck.picture.lib.PictureExternalPreviewActivity

com.yalantis.ucrop.UCropActivity

com.yalantis.ucrop.PictureMultiCuttingActivity

com.luck.picture.lib.PicturePlayAudioActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

99bf0892ee0c2e3e7e2262f016a187aa_JaffaCakes118

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.CALL_PHONE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_SETTINGS

android.permission.WRITE_MEDIA_STORAGE

android.permission.RECORD_AUDIO

com.wuzhaiyigou.users.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CHANGE_NETWORK_STATE