9fc9108dc2ea49db9a8a8542b2a042b1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9fc9108dc2ea49db9a8a8542b2a042b1_JaffaCakes118
Size 25.7MB
Sample240611-2mb37avcql
SHA256 6aa17f399a0ae76b08d560cf65cb14893b5bf1f3e44c61fca5ec884fecbbc882
MD5 9fc9108dc2ea49db9a8a8542b2a042b1
SHA1 24c548c9f69d66547224087714a0ded00ddb4dd8
SHA512 1b72ad65de1e3ff7b0aad031e9325e5b4371666c05f833460ca40e6c7eb2a1d4a472b06f76490864bb1b4dd622ab5cb56c5b0e0337c426f90c5d7be377027ee9
SSDEEP 786432:6Q8Z6KnP0RhgKvKj4KjExIWvU+LxG9Jr1CerlH04+s:6Q88awgKsBEjvPxSBBUq
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 26 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

9fc9108dc2ea49db9a8a8542b2a042b1_JaffaCakes118

.apk 25.7MB

9fc9108dc2ea49db9a8a8542b2a042b1_JaffaCakes118

SHA256 6aa17f399a0ae76b08d560cf65cb14893b5bf1f3e44c61fca5ec884fecbbc882
MD5 9fc9108dc2ea49db9a8a8542b2a042b1
SHA1 24c548c9f69d66547224087714a0ded00ddb4dd8
SHA512 1b72ad65de1e3ff7b0aad031e9325e5b4371666c05f833460ca40e6c7eb2a1d4a472b06f76490864bb1b4dd622ab5cb56c5b0e0337c426f90c5d7be377027ee9
SSDEEP 786432:6Q8Z6KnP0RhgKvKj4KjExIWvU+LxG9Jr1CerlH04+s:6Q88awgKsBEjvPxSBBUq
MD5 SHA1 SHA512 SSDEEP

com.dandelion.xunmiao

android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.GET_ACCOUNTS android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.INTERNET android.permission.READ_LOGS android.permission.CALL_PHONE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.GET_TASKS android.permission.INTERNET android.permission.BATTERY_STATS android.permission.BLUETOOTH android.permission.WRITE_SETTINGS android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_UPDATES android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.READ_CONTACTS android.permission.READ_CALL_LOG android.permission.READ_SMS android.permission.CHANGE_WIFI_STATE android.permission.RECEIVE_SMS android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_CONFIGURATION android.permission.WAKE_LOCK android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.BLUETOOTH_ADMIN android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.VIBRATE android.permission.FLASHLIGHT android.permission.RECEIVE_BOOT_COMPLETED com.dandelion.xunmiao.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.SYSTEM_ALERT_WINDOW android.permission.CHANGE_NETWORK_STATE

com.dandelion.xunmiao.MainActivity

com.dandelion.xunmiao.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.dandelion.xunmiao.GuideActivity

com.dandelion.xunmiao.auth.ui.LSAuthActivity

com.dandelion.xunmiao.auth.ui.LSAuthNameActivity

com.dandelion.xunmiao.auth.ui.LSAuthBindCardActivity

com.dandelion.xunmiao.auth.ui.LSAuthZhimaActivity

com.dandelion.xunmiao.auth.ui.LSBindCardListActivity

com.dandelion.xunmiao.auth.ui.LSAuthWaitingActivity

com.dandelion.xunmiao.auth.ui.LSAuthStatusActivity

com.dandelion.xunmiao.auth.ui.LSIndustryChooseActivity

com.dandelion.xunmiao.user.ui.LSMyBankListActivity

com.dandelion.xunmiao.user.ui.LSBoneListActivity

com.dandelion.xunmiao.bone.ui.LSBoneDetailActivity

com.dandelion.xunmiao.bone.ui.LSBoneDetailWhiteActivity

com.dandelion.xunmiao.user.ui.LSMyLimitListActivity

com.dandelion.xunmiao.user.ui.LSMyCouponListActivity

com.dandelion.xunmiao.bone.ui.LSUseCouponActivity

com.dandelion.xunmiao.user.ui.LSBalanceWithdrawActivity

com.dandelion.xunmiao.user.ui.LSSettingActivity

com.dandelion.xunmiao.user.ui.LSSetupPayPasswordActivity

com.dandelion.xunmiao.user.ui.LSPayPwdSecurityCodeActivity

com.dandelion.xunmiao.user.ui.LSPayPwdIdVerifyActivity

com.dandelion.xunmiao.bone.ui.LSBoneConfirmActivity

com.dandelion.xunmiao.bone.ui.GoodsMoreActivity

com.dandelion.xunmiao.bone.ui.LSBoneSuccessActivity

com.dandelion.xunmiao.bone.ui.LSRepayConfirmActivity

com.moxie.client.MainActivity

com.dandelion.xunmiao.bone.ui.LSRenewalActivity

com.dandelion.xunmiao.bone.ui.DeferredRecordActivity

com.dandelion.xunmiao.GuideShowActivity

com.dandelion.xunmiao.bone.ui.DeferredDetailActivity

com.dandelion.xunmiao.bone.ui.RepaymentListActivity

com.dandelion.xunmiao.bone.ui.BoneRepaymentDetailActivity

com.dandelion.xunmiao.bone.ui.CashOverdueListActivity

com.dandelion.xunmiao.user.ui.LSMsgDetailListActivity

com.dandelion.xunmiao.user.ui.LSFeedbackActivity

com.dandelion.xunmiao.user.ui.LSVersionActivity

com.dandelion.xunmiao.brand.ui.LSBrandPayActivity

com.dandelion.xunmiao.bone.ui.LSAliShortPayActivity

com.dandelion.xunmiao.wxapi.WXEntryActivity

com.dandelion.xunmiao.bone.ui.LSAliInputPayActivity

com.dandelion.xunmiao.bone.ui.LSPaySuccessActivity

com.dandelion.xunmiao.bone.ui.LSRepayErrorActivity

com.dandelion.xunmiao.order.ui.AddressListActivity

com.dandelion.xunmiao.order.ui.AddressManagerActivity

com.dandelion.xunmiao.auth.ui.LSAuthCompanyActivity

com.dandelion.xunmiao.order.ui.LogisticsDetailActivity

com.dandelion.xunmiao.auth.ui.LSAuthResultActivity

com.dandelion.xunmiao.order.ui.GoodsOrderListActivity

com.dandelion.xunmiao.order.ui.GoodsOrderDetailActivity

com.dandelion.xunmiao.order.ui.RefundApplyActivity

com.dandelion.xunmiao.order.ui.RefundDetailActivity

com.dandelion.xunmiao.bone.ui.LSBillsActivity

com.dandelion.xunmiao.bone.ui.LSBillsHistoryActivity

com.dandelion.xunmiao.bone.ui.LSBillsDetailActivity

com.dandelion.xunmiao.auth.ui.UrgentPeopleActivity

com.dandelion.xunmiao.auth.ui.UrgentContactActivity

com.dandelion.xunmiao.web.HTML5WebView

com.dandelion.xunmiao.mall.ui.MallCategoryActivity

com.dandelion.xunmiao.mall.ui.MallGoodsDetailActivity

com.dandelion.xunmiao.mall.ui.OrderComfirmActivity

com.dandelion.xunmiao.mall.ui.PayDetailActivity

com.dandelion.xunmiao.mall.ui.AfterPayActivity

com.dandelion.xunmiao.web.MyH5WebView

com.dandelion.xunmiao.mall.ui.RechargeActivity

com.dandelion.xunmiao.mall.ui.RechargePayDetailActivity

com.dandelion.xunmiao.user.ui.LSLoginNewActivity

com.dandelion.xunmiao.user.ui.LSMyAuthActivity

com.dandelion.xunmiao.bone.ui.AgreementPayActivity

com.dandelion.xunmiao.ForcesLoginActivity

com.framework.core.activity.HTML5WebView

com.framework.core.clip.ClipHeaderActivity

com.framework.core.activity.YoursActivity

com.example.libyitu.idcard_captor.SampleIdcardCaptorActivity

com.example.libyitu.liveness.SampleLivenessActivity

com.umeng.socialize.media.WBShareCallBackActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.example.libshare.wxapi.WXEntryActivity

me.nereo.multi_image_selector.MultiImageSelectorActivity

me.weyye.hipermission.PermissionActivity

me.weyye.hipermission.grantor.PermissionActivity

com.yeepay.cashierandroid.PaymentActivity

com.yeepay.cashierandroid.YeepayView

com.yeepay.cashierandroid.YPCashierEntry

com.megvii.idcardlib.IDCardScanActivity

com.megvii.livenesslib.LivenessActivity

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.oliveapp.face.idcardcaptorsdk.IDCardCaptorTestAsync.TestActivity

com.oliveapp.face.livenessdetectorsdk.SessionManagerAsync.TestActivity

com.oliveapp.face.livenessdetectionviewsdk.TestActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

9fc9108dc2ea49db9a8a8542b2a042b1_JaffaCakes118

Permissions

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.BATTERY_STATS

android.permission.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_UPDATES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_CONTACTS

android.permission.READ_CALL_LOG

android.permission.READ_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BLUETOOTH_ADMIN

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.RECEIVE_BOOT_COMPLETED