9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118
Size 16.2MB
Sample240611-elfnnathqn
SHA256 796e10a2f302405382e7b7d80481e99ec68df22a3ca6032ea4c299f49ac4d75e
MD5 9ced8bbb8b2d68276f3fc7e4ed3b5293
SHA1 1610a16cd2df931112230e0e6cad201ffd7a860f
SHA512 04061e77783e2d92f727b8a5e963a4953e01b4003fba66ba46e8bda43757b78db7c19deb5367651b6900e895f06deb2c07c0c88f806ab8235954a7555fff8c8d
SSDEEP 393216:OrienRqvF2Q5texE2RSn5TSKgio47eEKOT/ArhtvafNpagcA:OOeclnexE2RSRSKv7MOjArnKoA
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 25 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118

.apk 16.2MB

9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118

SHA256 796e10a2f302405382e7b7d80481e99ec68df22a3ca6032ea4c299f49ac4d75e
MD5 9ced8bbb8b2d68276f3fc7e4ed3b5293
SHA1 1610a16cd2df931112230e0e6cad201ffd7a860f
SHA512 04061e77783e2d92f727b8a5e963a4953e01b4003fba66ba46e8bda43757b78db7c19deb5367651b6900e895f06deb2c07c0c88f806ab8235954a7555fff8c8d
SSDEEP 393216:OrienRqvF2Q5texE2RSn5TSKgio47eEKOT/ArhtvafNpagcA:OOeclnexE2RSRSKv7MOjArnKoA
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.dhf.miaomiaodai

android.permission.GET_ACCOUNTS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.CAMERA android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE com.dhf.maimailoan.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.CALL_PHONE android.permission.MANAGE_ACCOUNTS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_SMS android.permission.READ_SMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_FINE_LOCATION

com.dhf.miaomiaodai.viewmodel.splash.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.dhf.miaomiaodai.viewmodel.GuideActivity

com.dhf.miaomiaodai.viewmodel.idinformation.IdInformationActivity

com.dhf.miaomiaodai.viewmodel.idcertification.IdCertificationActivity

com.dhf.miaomiaodai.viewmodel.PictureUploadActivity

com.dhf.miaomiaodai.viewmodel.main.MainActivity

com.dhf.miaomiaodai.viewmodel.loan.LoanActivity

com.dhf.miaomiaodai.viewmodel.repay.RepayActivity

com.dhf.miaomiaodai.viewmodel.mycenter.MyCenter

com.dhf.miaomiaodai.viewmodel.AboutMmdActivity

com.dhf.miaomiaodai.viewmodel.register.RegisterActivity

com.dhf.miaomiaodai.viewmodel.login.LoginActivity

com.dhf.miaomiaodai.viewmodel.forgetpassword.ForgetPwdActivity

com.dhf.miaomiaodai.viewmodel.maimaiborrow.MaiMaiBorrowActivity

com.dhf.miaomiaodai.viewmodel.certificationmain.CertificationMainActivity

com.dhf.miaomiaodai.viewmodel.emergencycontact.EmergencyContactActivity

com.dhf.miaomiaodai.viewmodel.phonecertification.PhoneCertificationActivity

com.dhf.miaomiaodai.viewmodel.loanresult.LoanResultActivity

com.dhf.miaomiaodai.viewmodel.changepassword.ChangePasswordActivity

com.dhf.miaomiaodai.viewmodel.persondata.PersonDataActivity

com.dhf.miaomiaodai.viewmodel.setting.SettingActivity

com.dhf.miaomiaodai.viewmodel.feedback.FeedbackActivity

com.dhf.miaomiaodai.viewmodel.bankcard.BankCardActivity

com.dhf.miaomiaodai.viewmodel.bindbankcard.BindBankCardActivity

com.dhf.miaomiaodai.viewmodel.zhima.ZhiMaCertificateActivity

com.dhf.miaomiaodai.viewmodel.certificateresult.CertificationResultActivity

com.dhf.miaomiaodai.viewmodel.zhimaauth.WebViewActivity

com.dhf.miaomiaodai.viewmodel.active.ActiveActivity

com.dhf.miaomiaodai.viewmodel.coupon.CouponNewActivity

com.dhf.miaomiaodai.viewmodel.myloan.MyloanActivity

com.dhf.miaomiaodai.wxapi.WXEntryActivity

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AssistActivity

com.umeng.socialize.media.WBShareCallBackActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.yintong.secure.activity.BaseActivity

me.nereo.multi_image_selector.MultiImageSelectorActivity

Android Permissions

9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118

Permissions

android.permission.GET_ACCOUNTS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

com.dhf.maimailoan.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

Sharing

General

Malware Config

Signatures

File Explorer

9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118

com.dhf.miaomiaodai.viewmodel.splash.SplashActivity

com.dhf.miaomiaodai.viewmodel.GuideActivity

com.dhf.miaomiaodai.viewmodel.idinformation.IdInformationActivity

com.dhf.miaomiaodai.viewmodel.idcertification.IdCertificationActivity

com.dhf.miaomiaodai.viewmodel.PictureUploadActivity

com.dhf.miaomiaodai.viewmodel.main.MainActivity

com.dhf.miaomiaodai.viewmodel.loan.LoanActivity

com.dhf.miaomiaodai.viewmodel.repay.RepayActivity

com.dhf.miaomiaodai.viewmodel.mycenter.MyCenter

com.dhf.miaomiaodai.viewmodel.AboutMmdActivity

com.dhf.miaomiaodai.viewmodel.register.RegisterActivity

com.dhf.miaomiaodai.viewmodel.login.LoginActivity

com.dhf.miaomiaodai.viewmodel.forgetpassword.ForgetPwdActivity

com.dhf.miaomiaodai.viewmodel.maimaiborrow.MaiMaiBorrowActivity

com.dhf.miaomiaodai.viewmodel.certificationmain.CertificationMainActivity

com.dhf.miaomiaodai.viewmodel.emergencycontact.EmergencyContactActivity

com.dhf.miaomiaodai.viewmodel.phonecertification.PhoneCertificationActivity

com.dhf.miaomiaodai.viewmodel.loanresult.LoanResultActivity

com.dhf.miaomiaodai.viewmodel.changepassword.ChangePasswordActivity

com.dhf.miaomiaodai.viewmodel.persondata.PersonDataActivity

com.dhf.miaomiaodai.viewmodel.setting.SettingActivity

com.dhf.miaomiaodai.viewmodel.feedback.FeedbackActivity

com.dhf.miaomiaodai.viewmodel.bankcard.BankCardActivity

com.dhf.miaomiaodai.viewmodel.bindbankcard.BindBankCardActivity

com.dhf.miaomiaodai.viewmodel.zhima.ZhiMaCertificateActivity

com.dhf.miaomiaodai.viewmodel.certificateresult.CertificationResultActivity

com.dhf.miaomiaodai.viewmodel.zhimaauth.WebViewActivity

com.dhf.miaomiaodai.viewmodel.active.ActiveActivity

com.dhf.miaomiaodai.viewmodel.coupon.CouponNewActivity

com.dhf.miaomiaodai.viewmodel.myloan.MyloanActivity

com.dhf.miaomiaodai.wxapi.WXEntryActivity

com.umeng.qq.tencent.AuthActivity

com.umeng.qq.tencent.AssistActivity

com.umeng.socialize.media.WBShareCallBackActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.yintong.secure.activity.BaseActivity

me.nereo.multi_image_selector.MultiImageSelectorActivity

com.yintong.secure.service.PayService

com.baidu.location.f

android.support.v4.content.FileProvider

Android Permissions

9ced8bbb8b2d68276f3fc7e4ed3b5293_JaffaCakes118