a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

General

Target

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118
Size

14.4MB
MD5

a2d8b4867d0f5cee7b49824f89dba6de
SHA1

50cc7bc0adbfaad7d2ae3dd22e088fcb80479a08
SHA256

3b29e976d0dafd8a345b065ead443b565e53b7f36878c4c02dea55a0fd5d0142
SHA512

2d67e8e6b2a46d098545973f21c6553cceeca10b4624a84e359958467af7d5b258903f384c5af2a866fbd423bd3083528edc5ad265e0f6180ef83640e490d831
SSDEEP

393216:CXS1mRS7IY7JbZ9vJZhzcwucvSa6YHWKpBT5Oh5qYWRPK:hm3ib3JZhoce1KH5OhK0

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118
.apk android arch:arm

net.laizi.pk.tjsdy

.WelcomeActivity

Activities

.WelcomeActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.VIBRATE
android.permission.SEND_SMS
android.permission.WRITE_SMS
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.webkit.permission.PLUGIN
android.permission.CHANGE_NETWORK_STATE
android.permission.REORDER_TASKS
android.permission.RECEIVE_SMS
cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK
cn.swiftpass.wxpay.permission.MM_MESSAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
android.permission.FLASHLIGHT
xvtian.gai.receiver
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SYSTEM_OVERLAY_WINDOW
alipay_plugin_20120428msp.apk
.apk android

com.alipay.android.app

.Cashier

Activities

.Cashier

android.intent.action.MAIN

.Alerter

android.intent.action.MAIN

.Welcome

android.intent.action.MAIN

.Updater

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.ACCESS_COARSE_LOCATION
com.aliyun.xiaoyunmi.alipay

Receivers

.AlixReceiver

com.aliyun.xiaoyunmi.alipay_exit

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay
laizi_hall.apk
.apk android

com.laizi.hall

com.laizi.main.Main

Activities

com.laizi.main.Main

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.RESTART_PACKAGES
android.permission.SEND_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.DISABLE_KEYGUARD

Receivers

com.laizi.broadcast.InstallBroadCast

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

Android Permissions

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.READ_SMS

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.webkit.permission.PLUGIN

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

android.permission.RECEIVE_SMS

cn.swiftpass.wxpay.permission.MMOAUTH_CALLBACK

cn.swiftpass.wxpay.permission.MM_MESSAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.CAMERA

android.permission.FLASHLIGHT

xvtian.gai.receiver

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

Sharing

General

Malware Config

Signatures

Files

net.laizi.pk.tjsdy

.WelcomeActivity

Activities

.WelcomeActivity

Permissions

com.alipay.android.app

.Cashier

Activities

.Cashier

.Alerter

.Welcome

.Updater

Permissions

Receivers

.AlixReceiver

Services

.AlixService

com.laizi.hall

com.laizi.main.Main

Activities

com.laizi.main.Main

Permissions

Receivers

com.laizi.broadcast.InstallBroadCast

Android Permissions

a2d8b4867d0f5cee7b49824f89dba6de_JaffaCakes118