9d5ac293b5625f875c59766862dd6e53_JaffaCakes118

General

Target

9d5ac293b5625f875c59766862dd6e53_JaffaCakes118
Size

3.2MB
MD5

9d5ac293b5625f875c59766862dd6e53
SHA1

1df375fba9b7648625d67d52d2d997d029abe380
SHA256

2652fc6cfeab25da8a45951fe4c6a3c498bb83bcb6b15c5dd1fe04e1ad4035f5
SHA512

5b8210229d827a5ae43a20fb591978fb97a7b5dce49ef789219ed31297b5ce0b3230974472e3f6909cecdede194155a9284e8d4ec2e3a359ff8476a45e865054
SSDEEP

49152:Z/sgxGMwvEbGOnsCDQheqY6X62D6wEmX/S6xB8VbINbgkAgJrDGgm8kn0LPUVmup:gMwvEqOs9rYw6wEmX/JyVbIa3VVrp

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

9d5ac293b5625f875c59766862dd6e53_JaffaCakes118
.apk android

com.pansi.msg

.ui.ConversationList

Activities

.ui.ConversationList

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MAIN

.ui.ComposeMessageActivity

android.intent.action.VIEW

.ui.CustomerInteractionActivity

android.intent.action.VIEW

.ui.PansiPluginThreadActivity

android.intent.action.VIEW

.ui.GroupMessageActivity

android.intent.action.VIEW

.ui.ComposerActivity

android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.VIEW
android.intent.action.SENDTO
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE
android.intent.action.VIEW

.ui.ManageSimMessages

android.intent.action.VIEW

.ui.ConfirmRateLimitActivity

com.android.mms.RATE_LIMIT_SURPASSED

.ui.SearchActivity

android.intent.action.SEARCH

.ui.PickContactsActivity

com.pansi.msg.PICK_CONTACTS
com.pansi.msg.PICK_CONTACTS_INFO

.ui.PickContactInfoActivity

com.pansi.msg.PICK_CONTACTS_INFO

.ui.ViewSmsActivity

android.intent.action.VIEW

.ui.ViewMmsActivity

android.intent.action.VIEW

.ui.LabelMessageListActivity

android.intent.action.MAIN

.ui.TemplateListActivity

android.intent.action.MAIN

.ui.PhraseListActivity

android.intent.action.MAIN

.ui.ScheduleMessageListActivity

android.intent.action.MAIN

.ui.SmsAppWidgetConfigure

android.appwidget.action.APPWIDGET_CONFIGURE

.ui.MrBeanUpgradeMsgActivity

android.intent.action.VIEW

Permissions

android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CALL_PHONE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.SEND_SMS
android.permission.VIBRATE
android.permission.INTERNET
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.CHANGE_NETWORK_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INSTALL_DRM
android.permission.BIND_APPWIDGET
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD
android.permission.WAKE_LOCK
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.GET_ACCOUNTS

Receivers

.transaction.PushReceiver

android.provider.Telephony.WAP_PUSH_RECEIVED

.transaction.MmsSystemEventReceiver

android.intent.action.CONTENT_CHANGED
android.intent.action.BOOT_COMPLETED
com.pansi.msg.action.AUTO_BACKUP
android.intent.action.LOCALE_CHANGED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE
android.intent.action.EXTERNAL_APPLICATIONS_UNAVAILABLE
android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_EJECT

.transaction.PrivilegedSmsReceiver

android.provider.Telephony.SMS_RECEIVED

.transaction.SmsReceiver

android.intent.action.BOOT_COMPLETED
com.pansi.msg.transaction.MESSAGE_SENT
android.intent.action.SEND_MESSAGE

.transaction.SentScheduleReceiver

com.pansi.msg.timing.TIMING_MESSAGE_SEND_COMPLETED_ACTION

.transaction.ZoneTimeChangedReceiver

android.intent.action.TIMEZONE_CHANGED
android.intent.action.TIME_SET

.transaction.MessageStatusReceiver

com.android.mms.transaction.MessageStatusReceiver.MESSAGE_STATUS_RECEIVED

.transaction.SimFullReceiver

android.provider.Telephony.SIM_FULL

.transaction.SmsRejectedReceiver

android.provider.Telephony.SMS_REJECTED

.transaction.SmsAppWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.transaction.SmsDeskWidgetProvider

com.pansi.msg.action.new
com.pansi.msg.action.widget.click
android.appwidget.action.APPWIDGET_UPDATE

Services

.common.NotificationService

com.pansi.msg.start_mms_notification_service
com.pansi.msg.start_mr_bean_msg_notification_service

.common.SmsObserverService

com.pansi.msg.start_sms_observer_service

.provider.ProviderService

com.pansi.msg.start_provider_service

.ui.InitDbService

com.pansi.msg.ui.init_db_service

.cloud.service.XmppClientService

com.pansi.msg.cloud.intent.action.ACTION_REGISTER
com.pansi.msg.cloud.intent.action.ACTION_XMPP_LOGIN
com.pansi.msg.cloud.intent.action.ACTION_GET_CHANNELS
com.pansi.msg.cloud.intent.action.ACTION_GET_CHANNEL_ITEMS
com.pansi.msg.cloud.intent.action.ACTION_XMPP_LOGOFF
com.pansi.msg.cloud.intent.action.ACTION_UPDATE
com.pansi.msg.cloud.intent.action.ACTION_CHK_NEW_THEMES
com.pansi.msg.cloud.intent.action.ACTION_REQ_REL_TYPE

Android Permissions

9d5ac293b5625f875c59766862dd6e53_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CALL_PHONE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.INTERNET

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INSTALL_DRM

android.permission.BIND_APPWIDGET

android.permission.GET_TASKS

android.permission.DISABLE_KEYGUARD

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.GET_ACCOUNTS

Sharing

General

Malware Config

Signatures

Files

com.pansi.msg

.ui.ConversationList

Activities

.ui.ConversationList

.ui.ComposeMessageActivity

.ui.CustomerInteractionActivity

.ui.PansiPluginThreadActivity

.ui.GroupMessageActivity

.ui.ComposerActivity

.ui.ManageSimMessages

.ui.ConfirmRateLimitActivity

.ui.SearchActivity

.ui.PickContactsActivity

.ui.PickContactInfoActivity

.ui.ViewSmsActivity

.ui.ViewMmsActivity

.ui.LabelMessageListActivity

.ui.TemplateListActivity

.ui.PhraseListActivity

.ui.ScheduleMessageListActivity

.ui.SmsAppWidgetConfigure

.ui.MrBeanUpgradeMsgActivity

Permissions

Receivers

.transaction.PushReceiver

.transaction.MmsSystemEventReceiver

.transaction.PrivilegedSmsReceiver

.transaction.SmsReceiver

.transaction.SentScheduleReceiver

.transaction.ZoneTimeChangedReceiver

.transaction.MessageStatusReceiver

.transaction.SimFullReceiver

.transaction.SmsRejectedReceiver

.transaction.SmsAppWidgetProvider

.transaction.SmsDeskWidgetProvider

Services

.common.NotificationService

.common.SmsObserverService

.provider.ProviderService

.ui.InitDbService

.cloud.service.XmppClientService

Android Permissions

9d5ac293b5625f875c59766862dd6e53_JaffaCakes118