9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

General

Target
9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118
Size 24.9MB
Sample240611-1fc68sserm
SHA256 b8f49ed083bd90165fc4f2567b95c9a9df5ff9acf2e502da9c418961bc9b7872
MD5 9f9b22e61ec08ec2c9b1ebb240a98815
SHA1 99fc8c6f2f0a5c8575107caa9b3e3ecedd27d313
SHA512 3f839e216c434878dce3edebed33716071a6493945f76d4875d6b8adba2a7cdc8cc571a7cbbf9884d79b985e7b0d74e5f69726f5e9b0945ceedd6e3cd9edbae5
SSDEEP 393216:XcIKz8/DowC5bkY1rNMSsBGvH29tyyumwbQ60FSi95MaMEihqJ+p12Apbr:1/sXJrsG/My9c/MaMEKqJ+2ApH
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

.apk 24.9MB
sdk_wukong.zip

.apk 7.4MB

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

SHA256 b8f49ed083bd90165fc4f2567b95c9a9df5ff9acf2e502da9c418961bc9b7872
MD5 9f9b22e61ec08ec2c9b1ebb240a98815
SHA1 99fc8c6f2f0a5c8575107caa9b3e3ecedd27d313
SHA512 3f839e216c434878dce3edebed33716071a6493945f76d4875d6b8adba2a7cdc8cc571a7cbbf9884d79b985e7b0d74e5f69726f5e9b0945ceedd6e3cd9edbae5
SSDEEP 393216:XcIKz8/DowC5bkY1rNMSsBGvH29tyyumwbQ60FSi95MaMEihqJ+p12Apbr:1/sXJrsG/My9c/MaMEKqJ+2ApH
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.ttwsz_360.tthd

android.permission.RECORD_AUDIO android.permission.SET_WALLPAPER_HINTS android.permission.SET_WALLPAPER android.permission.BATTERY_STATS android.permission.GET_PACKAGE_SIZE android.permission.GET_TASKS android.permission.RESTART_PACKAGES android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_LOGS android.permission.READ_SMS android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_WIFI_STATE android.permission.KILL_BACKGROUND_PROCESSES android.permission.ACCESS_FINE_LOCATION android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.CHANGE_CONFIGURATION com.android.launcher.permission.INSTALL_SHORTCUT android.permission.EXPAND_STATUS_BAR android.permission.WAKE_LOCK android.permission.INTERNET android.permission.SEND_SMS android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.READ_CONTACTS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.READ_EXTERNAL_STORAGE android.permission.RECEIVE_SMS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.RESTART_PACKAGES android.webkit.permission.PLUGIN android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.VIBRATE android.permission.MODIFY_AUDIO_SETTINGS android.permission.GET_ACCOUNTS android.permission.MANAGE_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.WRITE_SETTINGS android.permission.READ_SETTINGS android.permission.READ_LOGS android.permission.READ_LOGS

Android Permissions

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

Permissions

android.permission.RECORD_AUDIO

android.permission.SET_WALLPAPER_HINTS

android.permission.SET_WALLPAPER

android.permission.BATTERY_STATS

android.permission.GET_PACKAGE_SIZE

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_LOGS

android.permission.READ_SMS

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.CHANGE_CONFIGURATION

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.EXPAND_STATUS_BAR

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.SEND_SMS

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.READ_CONTACTS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.RESTART_PACKAGES

android.webkit.permission.PLUGIN

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.GET_ACCOUNTS

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

com.ipro.tthd.zjh.Zjh

com.qihoo.util.StartActivity

com.qihoo.util.appupdate.AppUpdateActivity

com.qihoo.util.CommonActivity

com.qihoo.ls.LsActivity

.analytics.WebviewAnalytic

.analytics.FragmentStack

.analytics.FragmentTabs

com.qihoo.gamecenter.sdk.activity.ContainerActivity

com.qihoopp.qcoinpay.QcoinActivity

com.alipay.sdk.app.H5PayActivity

com.iapppay.pay.channel.weixinpay.WeixinWapPayActivity

com.junnet.heepay.ui.activity.WelcomeActivity

com.junnet.heepay.ui.activity.WechatPaymentActivity

com.ipaynow.plugin.activity.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.qihoo.sdkplugging.host.HostProxyActivity

com.qihoo.psdk.app.QStatActivity

com.qihoo.updatesdk.lib.UpdateTipDialogActivity

com.qihoo.gameunionforsdk.SimpleWebView

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.qihoo.util.UpdateService

com.qihoo.util.QhJobService

com.qihoo.util.CommonService

com.qihoo.ls.SoService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.qihoo.appstore.updatelib.CheckUpdateService

com.qihoo.util.CommonReceiver

com.qihoo.psdk.local.QBootReceiver

com.qihoo.util.CommonProvider

sdk_wukong.zip

Sharing

General

Malware Config

Signatures

File Explorer

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118

com.ipro.tthd.zjh.Zjh

com.qihoo.util.StartActivity

com.qihoo.util.appupdate.AppUpdateActivity

com.qihoo.util.CommonActivity

com.qihoo.ls.LsActivity

.analytics.WebviewAnalytic

.analytics.FragmentStack

.analytics.FragmentTabs

com.qihoo.gamecenter.sdk.activity.ContainerActivity

com.qihoopp.qcoinpay.QcoinActivity

com.alipay.sdk.app.H5PayActivity

com.iapppay.pay.channel.weixinpay.WeixinWapPayActivity

com.junnet.heepay.ui.activity.WelcomeActivity

com.junnet.heepay.ui.activity.WechatPaymentActivity

com.ipaynow.plugin.activity.PayMethodActivity

com.ipaynow.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.qihoo.sdkplugging.host.HostProxyActivity

com.qihoo.psdk.app.QStatActivity

com.qihoo.updatesdk.lib.UpdateTipDialogActivity

com.qihoo.gameunionforsdk.SimpleWebView

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.qihoo.util.UpdateService

com.qihoo.util.QhJobService

com.qihoo.util.CommonService

com.qihoo.ls.SoService

com.qihoo.psdk.remote.QRemoteService

com.qihoo.psdk.local.QLocalService

com.qihoo.appstore.updatelib.CheckUpdateService

com.qihoo.util.CommonReceiver

com.qihoo.psdk.local.QBootReceiver

com.qihoo.util.CommonProvider

sdk_wukong.zip

Android Permissions

9f9b22e61ec08ec2c9b1ebb240a98815_JaffaCakes118