9ea1cf94bd342522c51bedc78e750892_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
9ea1cf94bd342522c51bedc78e750892_JaffaCakes118
Size 17.4MB
Sample240611-ssb6ps1gnc
SHA256 e7cd97f579025a56eb2916855e7faea2a22ba8e692d9493009aa71affa6d676a
MD5 9ea1cf94bd342522c51bedc78e750892
SHA1 11c32247764a64e97a784646fb669c8915d8d9f5
SHA512 1a3d432bf298f0674ec4f676a5e1e0070baf487472a9368c0f54e5e3c6571582864f11c5c5be5d5f0f09e70ddae3afa731be5851a3250af54cb443b2e8447b55
SSDEEP 393216:EYyd010e4sTG/+tlsDfyCmM04lApBvk3WA8gAkKJtUx8qyF+j7w/GHLPEph:Ezd0JGWMfydsapBsFA1qxuO7w/gPEph
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 20 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to add voicemails into the system.	com.android.voicemail.permission.ADD_VOICEMAIL
Allows an application to record audio.	android.permission.RECORD_AUDIO

File Explorer

9ea1cf94bd342522c51bedc78e750892_JaffaCakes118

.apk 17.4MB
BesttonePay.apk

.apk 1.5MB

9ea1cf94bd342522c51bedc78e750892_JaffaCakes118

SHA256 e7cd97f579025a56eb2916855e7faea2a22ba8e692d9493009aa71affa6d676a
MD5 9ea1cf94bd342522c51bedc78e750892
SHA1 11c32247764a64e97a784646fb669c8915d8d9f5
SHA512 1a3d432bf298f0674ec4f676a5e1e0070baf487472a9368c0f54e5e3c6571582864f11c5c5be5d5f0f09e70ddae3afa731be5851a3250af54cb443b2e8447b55
SSDEEP 393216:EYyd010e4sTG/+tlsDfyCmM04lApBvk3WA8gAkKJtUx8qyF+j7w/GHLPEph:Ezd0JGWMfydsapBsFA1qxuO7w/gPEph
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.besttone.hall

android.permission.CAMERA com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.INSTALL_SHORTCUT android.permission.KILL_BACKGROUND_PROCESSES android.permission.DISABLE_KEYGUARD android.permission.GET_TASKS android.permission.READ_CALL_LOG android.permission.WRITE_CALL_LOG android.permission.PROCESS_OUTGOING_CALLS android.permission.READ_CONTACTS android.permission.WRITE_CONTACTS android.permission.CALL_PHONE android.permission.READ_PHONE_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.SYSTEM_OVERLAY_WINDOW android.permission.GET_ACCOUNTS android.permission.USE_CREDENTIALS android.permission.MANAGE_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.ACCESS_WIFI_STATE android.permission.BROADCAST_STICKY android.permission.WRITE_SETTINGS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.READ_LOGS android.permission.MODIFY_AUDIO_SETTINGS android.permission.INTERNET android.permission.ACCESS_COARSE_UPDATES android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_CONFIGURATION android.permission.ACCESS_DOWNLOAD_MANAGER android.permission.READ_SYNC_STATS android.permission.READ_SYNC_SETTINGS android.permission.WRITE_SYNC_SETTINGS android.permission.READ_PROFILE android.permission.READ_SMS android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.RECEIVE_SMS android.permission.RECEIVE_BOOT_COMPLETED android.permission.READ_EXTERNAL_STORAGE com.google.android.googleapps.permission.GOOGLE_AUTH.mail com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.voicemail.permission.ADD_VOICEMAIL com.android.voicemail.permission.READ_WRITE_ALL_VOICEMAIL android.permission.CLEAR_APP_CACHE android.permission.RESTART_PACKAGES android.permission.RECEIVE_USER_PRESENT android.permission.RECORD_AUDIO android.permission.BAIDU_LOCATION_SERVICE android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.INTERACT_ACROSS_USERS_FULL android.permission.REORDER_TASKS android.permission.SET_WALLPAPER com.android.alarm.permission.SET_ALARM android.permission.FLASHLIGHT android.permission.MODIFY_AUDIO_SETTINGS android.permission.SET_DEBUG_APP android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.BROADCAST_PACKAGE_REPLACED

com.besttone.hall.activity.MainActivity

android.intent.action.MAIN android.intent.action.VIEW

com.besttone.hall.activity.LoginActivity

com.besttone.hall.activity.BottomActivity

android.intent.action.DIAL android.intent.action.VIEW android.intent.action.CALL_BUTTON android.intent.action.DIAL com.android.phone.action.RECENT_CALLS

com.besttone.hall.madeinchina.activity.YellowPageActivity

android.intent.action.VIEW

com.besttone.hall.madeinchina.activity.ProductDirectoryActivity

com.besttone.hall.madeinchina.activity.SearchResultActivity

com.besttone.hall.madeinchina.activity.CompanySearchActivity

com.besttone.hall.madeinchina.activity.WebviewActivity

com.besttone.hall.madeinchina.activity.ProductDetailsActivity

com.besttone.hall.madeinchina.activity.DetailAddressWebActivity

com.besttone.hall.madeinchina.activity.MicWebActivity

com.besttone.hall.activity.ContactsDetailActivity

com.besttone.hall.activity.CurrencyPayResultActivity

besttone.recievepaybackwebpay

com.besttone.hall.cinema.activity.MemberResultActivity

besttone.memberpaybackweb

com.besttone.hall.activity.StockDetailActivity

com.besttone.hall.activity.GroupManagerActivity

com.besttone.hall.activity.BaseWebActivity

com.besttone.hall.activity.WebActivity

com.besttone.hall.activity.LaberWebActivity

com.besttone.hall.activity.CitySelectActivity

com.besttone.hall.activity.CollectionActivity

com.besttone.hall.activity.AllFavoriteActivity

com.besttone.hall.activity.PrivilegeTicketActivity

com.besttone.hall.activity.NotepadActivity

com.besttone.hall.activity.EditorNotepadActivity

com.besttone.hall.activity.MissedCallActivity

com.besttone.hall.activity.OpenMissedCallActivity

com.besttone.hall.activity.FlightTicketActivity

com.besttone.hall.activity.SetupOfflineDbActivity

com.besttone.hall.activity.SetupVoiceRecognActivity

com.besttone.hall.activity.DialSingleHandSettingsActivity

com.besttone.hall.activity.DialGestureSettingsActivity

com.besttone.hall.activity.EditDialGestureActivity

com.besttone.hall.activity.PasswordModifyActivity

com.besttone.hall.activity.RetrievePasswordActivity

com.besttone.hall.activity.SetupActivity

com.besttone.hall.activity.SetupCallActivity

com.besttone.hall.activity.SetupPushActivity

com.besttone.hall.activity.KeywordSearchActivity

com.besttone.hall.activity.FreeCallActivity

com.besttone.hall.activity.RegisterActivity

com.besttone.hall.activity.GuideActivity

android.intent.action.VIEW

com.besttone.hall.activity.ADActivity

com.besttone.hall.activity.OldCommunicationAssPackageActivity

com.besttone.hall.activity.NewCommunicationAssPackageActivity

com.besttone.hall.activity.HarassmentActivity

com.besttone.hall.activity.PersonalBlackNumberActivity

com.besttone.hall.activity.SubcategoriesPageListActivity

com.besttone.hall.activity.CustomMarkActivity

com.besttone.hall.activity.PersonDetailActivity

com.besttone.hall.activity.ContactSelectActivity

com.besttone.hall.activity.ContactSearchActivity

com.besttone.hall.wxapi.WXEntryActivity

com.besttone.hall.yxapi.YXEntryActivity

cn.com.chinatelecom.account.lib.AuthorizeActivity

cn.com.chinatelecom.account.lib.WebViewActivity

com.besttone.hall.order.activity.OrderHomeActivitys

com.besttone.hall.order.activity.OrderCinemaDetail

com.besttone.hall.order.activity.VirtualProductDetailActivity

com.besttone.hall.order.activity.OrderGoodsDetail

com.besttone.hall.order.activity.OrderMoveCarDetail

com.besttone.hall.order.activity.OrderEvaluateActivity

com.besttone.hall.order.activity.OrderExpressDetailActivity

com.besttone.hall.order.activity.OrderTicketDetailActivity

com.besttone.hall.order.activity.ExpressSelectedStatus

com.besttone.hall.order.activity.OrderWebDetailActivity

com.besttone.hall.directory.activity.ShopListActivity

com.besttone.hall.directory.activity.GDShopListAct

android.intent.action.VIEW

com.besttone.hall.directory.activity.SearchListActivity

com.besttone.hall.directory.activity.NewHybriDetailActivity

com.besttone.hall.directory.activity.NewHybridListActivity

com.besttone.hall.directory.activity.HomePageActivity

android.intent.action.VIEW

com.besttone.hall.directory.activity.AllTypePageActivity

com.besttone.hall.directory.activity.MinYellowPagerActivity

android.intent.action.VIEW

com.besttone.hall.registration.activity.RegistrationHomeActivity

android.intent.action.VIEW

com.besttone.hall.registration.activity.RegistrationOnLineHomeActivity

android.intent.action.VIEW

com.besttone.hall.registration.activity.RegistrationSelectCityActivity

com.besttone.hall.registration.activity.RegistrationSelectProvinceActivity

com.besttone.hall.registration.activity.RegistrationSelectHospitalActivity

com.besttone.hall.registration.activity.RegistrationSelectDepartmentsActivity

com.besttone.hall.registration.activity.RegistrationSelectDoctorActivity

com.besttone.hall.registration.activity.RegistrationDoctorActivity

com.besttone.hall.registration.activity.RegistrationResourceActivity

com.besttone.hall.registration.activity.RegistrationSelectPatientsActivity

com.besttone.hall.registration.activity.RegistrationDiagnosisCardDetailActivity

com.besttone.hall.registration.activity.RegistrationWriteOnLineInforActivity

com.besttone.hall.registration.activity.RegistrationInformationConfirmation

com.besttone.hall.registration.activity.RegistrationOnLineBuyResultActivity

besttone.recievepaybackregistrationonline

com.besttone.hall.registration.activity.RegistrationPatientsListActivity

com.besttone.hall.registration.activity.RegistrationPatientsDetailsActivity

com.besttone.hall.registration.activity.RegistrationDiagnosisCardListActivity

com.besttone.hall.registration.activity.RegistrationOnLineOrderActivity

com.besttone.hall.registration.activity.RegistrationMyCollectionActivity

com.besttone.hall.registration.activity.RegistrationPersonalCenterActivity

com.besttone.hall.registration.activity.RegistrationMyRemindActivity

com.besttone.hall.registration.activity.RegistrationOnLineOrderDetailActivity

com.besttone.hall.registration.activity.RegistrationOnLineOrderCancelActivity

com.besttone.hall.registration.activity.RegistrationMemberActivity

com.besttone.hall.registration.activity.RegistrationMemberVipDetailActivity

com.besttone.hall.registration.activity.RegistrationBuyMemberResultActivity

besttone.recievepaybackregistrationmember

com.besttone.hall.registration.activity.RegistrationAttentionActivity

com.besttone.hall.registration.activity.RegistrationPayActivity

com.besttone.hall.registration.activity.RegistrationMyMemberOrderListActivity

com.besttone.hall.registration.activity.RegistrationMemberOrderDetailActivity

com.besttone.hall.registration.activity.RegistrationMakeAppointmentsActivity

com.besttone.hall.registration.activity.RegistrationWebActivity

com.besttone.hall.express.activity.HomeActivity

android.intent.action.VIEW

com.besttone.hall.express.activity.ComparePriceActivity

com.besttone.hall.express.activity.SelectCompany

com.besttone.hall.express.activity.CreateOrderActivity

com.besttone.hall.express.activity.HistoryAddressActivity

com.besttone.hall.express.activity.CreateOrderSucceedActivity

com.besttone.hall.express.activity.QueryResultActivity

com.besttone.hall.express.activity.SelectCityActivity

com.besttone.hall.express.zxingscan.activity.MipcaActivityCapture

com.besttone.hall.ticket.activity.TicketHomeActivity

android.intent.action.VIEW

com.besttone.hall.ticket.activity.TicketSearchActivity

com.besttone.hall.ticket.activity.TicketConfirmOrderActivity

com.besttone.hall.ticket.activity.TicketCityScenicSpotActivity

com.besttone.hall.ticket.activity.TicketScenicDetailsActivity

com.besttone.hall.ticket.activity.TicketLookMapActivity

com.besttone.hall.ticket.activity.TicketWriteOrderActivity

com.besttone.hall.ticket.activity.TicketSuccessResultActivity

com.besttone.hall.ticket.activity.TicketSelectContactsActivity

com.besttone.hall.ticket.activity.TicketContactsDetailsActivity

com.besttone.hall.ticket.activity.TicketScenicDescriptionActivity

com.besttone.hall.ticket.activity.TicketGetPayUrlActivity

com.besttone.hall.ticket.activity.SelectCouponActivity

com.besttone.hall.ticket.activity.TicketWebActivity

com.besttone.hall.cinema.activity.CinemaHomeActivity

android.intent.action.VIEW

com.besttone.hall.cinema.activity.SelectCinemaActivity

com.besttone.hall.cinema.activity.SearchCinemaActivity

com.besttone.hall.cinema.activity.SelectSeatActivity

com.besttone.hall.cinema.activity.SelectScreeningActivity

android.intent.action.VIEW

com.besttone.hall.cinema.activity.ConfirmOrderActivity

com.besttone.hall.cinema.activity.PayActivity

com.besttone.hall.cinema.activity.PayResultActivity

besttone.recievepayback

com.besttone.hall.cinema.activity.CinemaWebActivity

com.besttone.hall.cinema.activity.CinemaDetailActivity

com.besttone.hall.cinema.video.JCFullScreenActivity

com.besttone.hall.cinema.activity.MovieDetailActivity

com.besttone.hall.cinema.activity.CinemaCitySelectActivity

com.raiyi.ui.activity.ZTMainActivity

com.raiyi.ui.activity.SimpleContainerActivity

com.raiyi.webview.WebSiteActivity

com.raiyi.ui.activity.ProductListDetailActivity

com.raiyi.ui.activity.ProductListMainActivity

com.raiyi.ui.activity.FloatAddAty1

com.raiyi.ui.activity.FlowInfoSetActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.besttone.hall.intercept.activity.InterceptActivity

com.besttone.hall.member.activity.MemberMainActivity

com.besttone.hall.member.activity.GainTongbaoActivity

com.besttone.hall.member.activity.AllGradePrerogativeActivity

com.besttone.hall.member.activity.PrerogativeDetailsActivity

com.besttone.hall.member.activity.TongbaoRecordActivity

com.besttone.hall.member.activity.MemberWebActivity

com.umeng.socialize.editorpage.ShareActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.besttone.hall.voice.activity.VoiceChatHomeActivity

BesttonePay.apk

SHA256 12b6176f17da9df5436f8edb3f43cead7ae08c24905e104cf2b1dca9d4b1b50e
MD5 e401e971205c8af6eb661e2bb990fb88
SHA1 6977af4224acb7e79d8826f8c67ea75be2528449
SHA512 7903325353eac8c5b6f877f8b7a3c35ff08eb85d0172bcc3f4d7e00cb8d91e3e879e2dea74f1f439811f71996663c167dd776ece1338aa32a1c987debc79b409
SSDEEP 24576:LfTN/BMzWKOhttQA0XMruMuFqwtnKaTATwCAYnJg7A0+fs8/kqrB4LCPkYgFVJ1J:L/lttjCv7dKFsCAtA0YsNLwkj3JYY
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.besttone.zhifu

Android Permissions

9ea1cf94bd342522c51bedc78e750892_JaffaCakes118

Permissions

android.permission.CAMERA

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.DISABLE_KEYGUARD

android.permission.GET_TASKS

android.permission.READ_CALL_LOG

android.permission.WRITE_CALL_LOG

android.permission.PROCESS_OUTGOING_CALLS

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.WRITE_SETTINGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.ACCESS_COARSE_UPDATES

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.READ_SYNC_STATS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.READ_PROFILE

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_EXTERNAL_STORAGE

com.google.android.googleapps.permission.GOOGLE_AUTH.mail

com.android.launcher.permission.UNINSTALL_SHORTCUT