9b028217ba04ec39647a5c5188ca38f6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9b028217ba04ec39647a5c5188ca38f6_JaffaCakes118
Size 32.0MB
Sample240610-ryl3eszfjp
SHA256 b4c66aeabaffc06ac8d2b22fc828c6aaac60ac77ff265406a0b632f6181648d4
MD5 9b028217ba04ec39647a5c5188ca38f6
SHA1 fb1429b9529a614260e731b84fe46f4342059db1
SHA512 32921fecdb4c47ca786804c756e1d5e1a927694d041c92f339d465b48cb10a3d0ce26f01b006b4a3b015fc433a9bf448ae58ff6444ac6761af94f146091d296f
SSDEEP 786432:4kb/PMnEZdP2Mkp6CTQ/DAaXYRhhJ40mlY9AlY1cnPst5CRUE:4EMnEZpkpfUTYR7J40mlYuiXE
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

9b028217ba04ec39647a5c5188ca38f6_JaffaCakes118

.apk 32.0MB

9b028217ba04ec39647a5c5188ca38f6_JaffaCakes118

SHA256 b4c66aeabaffc06ac8d2b22fc828c6aaac60ac77ff265406a0b632f6181648d4
MD5 9b028217ba04ec39647a5c5188ca38f6
SHA1 fb1429b9529a614260e731b84fe46f4342059db1
SHA512 32921fecdb4c47ca786804c756e1d5e1a927694d041c92f339d465b48cb10a3d0ce26f01b006b4a3b015fc433a9bf448ae58ff6444ac6761af94f146091d296f
SSDEEP 786432:4kb/PMnEZdP2Mkp6CTQ/DAaXYRhhJ40mlY9AlY1cnPst5CRUE:4EMnEZpkpfUTYR7J40mlYuiXE
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.xsrm.news.dengzhou

com.dxrm.aijiyuan._activity._launcher.LauncherActivity

android.intent.action.MAIN

com.dxrm.aijiyuan._activity._main.MainActivity

com.dxrm.aijiyuan._activity._login.LoginActivity

com.dxrm.aijiyuan._activity._subscribe._user.UserHomepageActivity

com.dxrm.aijiyuan._activity._reset.ResetPwdActivity

com.dxrm.aijiyuan._activity._publish._text.PublishTextActivity

com.dxrm.aijiyuan._activity._news._video._comment.VideoComChiActivity

com.dxrm.aijiyuan._activity._news._video._player.VideoPlayActivity

com.dxrm.aijiyuan._activity._focus.FocusActivity

com.dxrm.aijiyuan._activity._influencer.InfluencerActivity

com.dxrm.aijiyuan._activity._shop._order.OrderActivity

com.dxrm.aijiyuan._activity._shop._address._list.AddressListActivity

com.dxrm.aijiyuan._activity._shop._address._new.NewAddressActivity

com.dxrm.aijiyuan._activity._shop._convert.ConvertSuccessActivity

com.dxrm.aijiyuan._activity._shop._convert.ConvertActivity

com.dxrm.aijiyuan._activity._shop._detail.GoodsDetailActivity

com.dxrm.aijiyuan._activity._shop.ShopActivity

com.dxrm.aijiyuan._activity._news._details.NewsDetailsActivity

com.dxrm.aijiyuan._activity._news._comment.CommentChildActivity

com.dxrm.aijiyuan._activity._sample.TestActivity

com.dxrm.aijiyuan._activity._news._video._record.VideoRecordActivity

com.dxrm.aijiyuan._activity._news._video._record.PlaybackActivity

com.dxrm.aijiyuan._activity._news._video._record.ChooseCoverActivity

com.dxrm.aijiyuan._activity._news._video._music.ChooseMusicActivity

com.dxrm.aijiyuan._activity._news._video._record._compose.VideoComposeActivity

com.dxrm.aijiyuan._activity._news._video._record._compose.VideoTrimActivity

com.dxrm.aijiyuan._activity._news._area.SpecialAreaActivity

com.dxrm.aijiyuan._activity._web.WebActivity

com.dxrm.aijiyuan._activity._community._activity._answer.AnswerActivity

com.dxrm.aijiyuan._activity._community._activity._answer._result.AnswerResultActivity

com.dxrm.aijiyuan._activity._community._askbar._Details.AskBarDetailsActivity

com.dxrm.aijiyuan._activity._politics._select.SelectDepartmentActivity

com.dxrm.aijiyuan._activity._subscribe._user1.UserHomepageActivity11

com.dxrm.aijiyuan._activity._subscribe._add.AddFocusActivity

com.dxrm.aijiyuan._activity._politics._department._detail.PoliticsDepartDetailActivity

com.dxrm.aijiyuan._activity._politics._tv._detail.PoliticsTvDetailActivity

com.dxrm.aijiyuan._activity._setting.SettingActivity

com.dxrm.aijiyuan._activity._about.AboutActivity

com.dxrm.aijiyuan._activity._feedback.FeedBackActivity

com.dxrm.aijiyuan._activity._collection.CollectionActivity

com.dxrm.aijiyuan._activity._personal.PersonalActivity

com.dxrm.aijiyuan._activity._login._bind.BindTelActivity

com.dxrm.aijiyuan._activity._personal._modification.ModificationActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.dxrm.aijiyuan.wxapi.WXEntryActivity

com.dxrm.aijiyuan._activity._live._tv._details.TVLiveDetailsActivity

com.dxrm.aijiyuan._activity._live._tv._details.TVLiveDetailsActivity1

com.dxrm.aijiyuan._activity._live._scene._details.SceneDetailsActivity

com.dxrm.aijiyuan._activity._live._broadcast._details.BroadcastLiveDetailsActivity

com.dxrm.aijiyuan._activity._community._activity._vote._detail.VoteDetailActivity

com.dxrm.aijiyuan._activity._community._activity._vote.VoteActivity

com.dxrm.aijiyuan._activity._news._rank.RankActivity

com.dxrm.aijiyuan._activity._search.SearchActivity

com.xsrm.news.liyuan.wxapi.WXEntryActivity

com.xsrm.news.yichuan.wxapi.WXEntryActivity

com.xsrm.news.wenxian.wxapi.WXEntryActivity

com.xsrm.news.boai.wxapi.WXEntryActivity

com.xsrm.news.pingdingshan.wxapi.WXEntryActivity

com.xsrm.news.jiaozuo.wxapi.WXEntryActivity

com.xsrm.news.ruzhou.wxapi.WXEntryActivity

com.xsrm.news.dancheng.wxapi.WXEntryActivity

com.xsrm.news.yexian.wxapi.WXEntryActivity

com.xsrm.news.jianan.wxapi.WXEntryActivity

com.xsrm.news.mianchi.wxapi.WXEntryActivity

com.xsrm.news.tanghe.wxapi.WXEntryActivity

com.xsrm.news.baofeng.wxapi.WXEntryActivity

com.xsrm.news.xinxian.wxapi.WXEntryActivity

com.xsrm.news.xixia.wxapi.WXEntryActivity

com.xsrm.news.xiangcheng.wxapi.WXEntryActivity

com.xsrm.news.fanxian.wxapi.WXEntryActivity

com.xsrm.news.huaxian.wxapi.WXEntryActivity

com.xsrm.news.ruyang.wxapi.WXEntryActivity

com.xsrm.news.qixian.wxapi.WXEntryActivity

com.xsrm.news.nanzhao.wxapi.WXEntryActivity

com.xsrm.news.linzhou.wxapi.WXEntryActivity

com.xsrm.news.linying.wxapi.WXEntryActivity

com.xsrm.news.qinyang.wxapi.WXEntryActivity

com.xsrm.news.xiuwu.wxapi.WXEntryActivity

com.xsrm.news.pingyu.wxapi.WXEntryActivity

com.xsrm.news.qingfeng.wxapi.WXEntryActivity

com.xsrm.news.wuzhi.wxapi.WXEntryActivity

com.xsrm.news.lankao.wxapi.WXEntryActivity

com.xsrm.news.fangcheng.wxapi.WXEntryActivity

com.xsrm.news.changge.wxapi.WXEntryActivity

com.xsrm.news.huaibin.wxapi.WXEntryActivity

com.xsrm.news.wugang.wxapi.WXEntryActivity

com.xsrm.news.huixian.wxapi.WXEntryActivity

com.xsrm.news.xunxian.wxapi.WXEntryActivity

com.xsrm.news.suixian.wxapi.WXEntryActivity

com.xsrm.news.tangyin.wxapi.WXEntryActivity

com.xsrm.news.minquan.wxapi.WXEntryActivity

com.xsrm.news.yuzhou.wxapi.WXEntryActivity

com.xsrm.news.zhecheng.wxapi.WXEntryActivity

com.xsrm.news.hb.qixian.wxapi.WXEntryActivity

com.xsrm.news.huaiyang.wxapi.WXEntryActivity

com.xsrm.news.luyi.wxapi.WXEntryActivity

com.xsrm.news.neihuang.wxapi.WXEntryActivity

com.xsrm.news.taiqian.wxapi.WXEntryActivity

com.xsrm.news.yanling.wxapi.WXEntryActivity

com.xsrm.news.yuanyang.wxapi.WXEntryActivity

com.xsrm.news.dengzhou.wxapi.WXEntryActivity

com.xsrm.news.lingbao.wxapi.WXEntryActivity

com.xsrm.news.nanle.wxapi.WXEntryActivity

com.xsrm.news.shangcheng.wxapi.WXEntryActivity

com.xsrm.news.wuyang.wxapi.WXEntryActivity

com.xsrm.news.yongcheng.wxapi.WXEntryActivity

com.xsrm.news.tongxu.wxapi.WXEntryActivity

com.xsrm.news.zhenping.wxapi.WXEntryActivity

com.xsrm.news.anyang.wxapi.WXEntryActivity

com.xsrm.news.xinan.wxapi.WXEntryActivity

com.xsrm.news.dengfeng.wxapi.WXEntryActivity

com.xsrm.news.xinmi.wxapi.WXEntryActivity

com.xsrm.news.xinzheng.wxapi.WXEntryActivity

com.xsrm.news.xingyang.wxapi.WXEntryActivity

com.xsrm.news.zhongmu.wxapi.WXEntryActivity

com.xsrm.news.gongyi.wxapi.WXEntryActivity

com.luck.picture.lib.PictureSelectorActivity

com.luck.picture.lib.PicturePreviewActivity

com.luck.picture.lib.PictureVideoPlayActivity

com.luck.picture.lib.PictureExternalPreviewActivity

com.yalantis.ucrop.UCropActivity

com.yalantis.ucrop.PictureMultiCuttingActivity

com.luck.picture.lib.PicturePlayAudioActivity

com.yanzhenjie.permission.bridge.BridgeActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.service.JNotifyActivity

cn.jpush.android.intent.JNotifyActivity

Android Permissions

9b028217ba04ec39647a5c5188ca38f6_JaffaCakes118

Permissions

android.permission.RECEIVE_USER_PRESENT

android.permission.ACCESS_BACKGROUND_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BROADCAST_STICKY

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.UPDATE_DEVICE_STATS

android.permission.CAMERA

android.permission.ACCESS_NETWORK_STATE

android.permission.FLASHLIGHT

com.xsrm.news.dengzhou.permission.JPUSH_MESSAGE