9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118
Size 4.4MB
Sample240606-fsntaaab62
SHA256 f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0
MD5 9a04fa0ff306c68a73fab66a948a9076
SHA1 6d2cb1b467e4909541a06cdb72d202db3b9fd447
SHA512 f2152356d2a5f199080ff9928916c9d65a0713abf693b7edde36b2c4e7fe7f9b455e8e11df99792342eb945088ed5e8610c6df7ce4dfdb1b7a8266fa821a2183
SSDEEP 98304:XRIsnW35C8dll/6YqLdsvINMRA4llxk1PYnGiLbrHOIv6xqk:6aWUml/6rLC3RA4rnN8d
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118

.apk 4.4MB
flyw_d

.apk 300KB

9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118

SHA256 f6df58fa00f9913e97e5a26ed83ec1ce86207aee58e27f437f6140c3e09336e0
MD5 9a04fa0ff306c68a73fab66a948a9076
SHA1 6d2cb1b467e4909541a06cdb72d202db3b9fd447
SHA512 f2152356d2a5f199080ff9928916c9d65a0713abf693b7edde36b2c4e7fe7f9b455e8e11df99792342eb945088ed5e8610c6df7ce4dfdb1b7a8266fa821a2183
SSDEEP 98304:XRIsnW35C8dll/6YqLdsvINMRA4llxk1PYnGiLbrHOIv6xqk:6aWUml/6rLC3RA4rnN8d
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.secretlisa.spbeidanci

android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.READ_LOGS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_BOOT_COMPLETED android.permission.VIBRATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_FINE_LOCATION android.permission.BATTERY_STATS android.permission.READ_PHONE_STATE android.permission.RECEIVE_USER_PRESENT android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.SET_WALLPAPER android.permission.GET_TASKS com.android.launcher.permission.INSTALL_SHORTCUT android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE com.android.launcher.permission.INSTALL_SHORTCUT android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.GET_TASKS android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.GET_TASKS android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_COARSE_LOCATION

com.secretlisa.beidanci.ActivitySplash

android.intent.action.MAIN

com.secretlisa.beidanci.ActivityWelcome

com.secretlisa.beidanci.ActivityMain

com.secretlisa.beidanci.ActivityScreen

com.secretlisa.beidanci.ActivityLauncher

android.intent.action.MAIN

com.secretlisa.beidanci.ActivityAbout

com.secretlisa.beidanci.ActivitySelectDb

com.secretlisa.beidanci.ActivityHomeKey

com.secretlisa.beidanci.ActivityWords

com.secretlisa.beidanci.ActivityWordPlan

com.secretlisa.beidanci.ActivitySelectWallpaper

com.secretlisa.beidanci.ActivityWallpaperLib

com.secretlisa.beidanci.ActivityCropImage

com.secretlisa.beidanci.ActivityWordLearning

com.secretlisa.beidanci.ActivityWordNote

com.secretlisa.beidanci.ActivityShareAccount

com.secretlisa.beidanci.ActivitySettingMore

com.secretlisa.beidanci.ActivityNotifSetting

com.secretlisa.beidanci.ActivityShare

com.secretlisa.beidanci.ActivityWebViewInternal

com.secretlisa.beidanci.ActivityWebView

com.secretlisa.beidanci.ActivityLock

android.intent.action.CREATE_SHORTCUT

com.secretlisa.beidanci.ActivityReview

com.secretlisa.beidanci.ActivityFollow

com.secretlisa.beidanci.ActivityApps

com.secretlisa.beidanci.wxapi.WXEntryActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.umeng.socialize.view.CommentActivity

com.umeng.socialize.view.ShareActivity

com.umeng.socialize.view.CommentDetail

com.umeng.socialize.view.CommentDetailNoMap

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.plus.ImageActivity

com.tencent.connect.common.AssistActivity

com.fire.pare.flyw.activity.FlywActivity

com.fire.pare.guoc.WActivity

com.fire.pare.gups.DActivity

com.fire.pare.gups.LActivity

com.fire.pare.gups.HActivity

com.fire.pare.amoz.AmozAct

com.fire.pare.ambb.AmbbAct

android.intent.action.VIEW

Android Permissions

9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_FINE_LOCATION

android.permission.BATTERY_STATS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.SET_WALLPAPER

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

Sharing

General

Malware Config

Signatures

File Explorer

9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118

com.secretlisa.beidanci.ActivitySplash

com.secretlisa.beidanci.ActivityWelcome

com.secretlisa.beidanci.ActivityMain

com.secretlisa.beidanci.ActivityScreen

com.secretlisa.beidanci.ActivityLauncher

com.secretlisa.beidanci.ActivityAbout

com.secretlisa.beidanci.ActivitySelectDb

com.secretlisa.beidanci.ActivityHomeKey

com.secretlisa.beidanci.ActivityWords

com.secretlisa.beidanci.ActivityWordPlan

com.secretlisa.beidanci.ActivitySelectWallpaper

com.secretlisa.beidanci.ActivityWallpaperLib

com.secretlisa.beidanci.ActivityCropImage

com.secretlisa.beidanci.ActivityWordLearning

com.secretlisa.beidanci.ActivityWordNote

com.secretlisa.beidanci.ActivityShareAccount

com.secretlisa.beidanci.ActivitySettingMore

com.secretlisa.beidanci.ActivityNotifSetting

com.secretlisa.beidanci.ActivityShare

com.secretlisa.beidanci.ActivityWebViewInternal

com.secretlisa.beidanci.ActivityWebView

com.secretlisa.beidanci.ActivityLock

com.secretlisa.beidanci.ActivityReview

com.secretlisa.beidanci.ActivityFollow

com.secretlisa.beidanci.ActivityApps

com.secretlisa.beidanci.wxapi.WXEntryActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.umeng.socialize.view.CommentActivity

com.umeng.socialize.view.ShareActivity

com.umeng.socialize.view.CommentDetail

com.umeng.socialize.view.CommentDetailNoMap

com.tencent.tauth.AuthActivity

com.tencent.plus.ImageActivity

com.tencent.connect.common.AssistActivity

com.fire.pare.flyw.activity.FlywActivity

com.fire.pare.guoc.WActivity

com.fire.pare.gups.DActivity

com.fire.pare.gups.LActivity

com.fire.pare.gups.HActivity

com.fire.pare.amoz.AmozAct

com.fire.pare.ambb.AmbbAct

com.umeng.common.net.DownloadingService

com.secretlisa.beidanci.ServiceScreen

com.secretlisa.beidanci.ServiceUpdateCiku

com.secretlisa.beidanci.ServiceUpdateData

com.secretlisa.beidanci.ServiceDownload

com.umeng.common.net.DownloadingService

com.fire.pare.flyw.service.FlywService

com.fire.pare.guoc.WService

com.fire.pare.gups.OService

com.fire.pare.amoz.AmozSer

com.fire.pare.ambb.AmbbSer

com.secretlisa.beidanci.ReceiverScreen

com.secretlisa.beidanci.ReceiverNotif

com.secretlisa.beidanci.ReceiverDownloadComplete

com.fire.pare.flyw.receiver.FlywReceiver

com.fire.pare.ambb.AmbbRec

flyw_d

Android Permissions

9a04fa0ff306c68a73fab66a948a9076_JaffaCakes118