a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118
Size 9.5MB
Sample240612-vcrybswckj
SHA256 8f22844897d6536b85a6939755079b8ffd641800e715019614767d8157d5cbcb
MD5 a16679e6bf03d7eb2155d36cd401a73c
SHA1 4265331fbdbeed6aa528747214e0c8e73f8f1c50
SHA512 41f14e6099ce97ec95425a35c056162028fa5176333f4bcfc284c3c1a4d55090a374613830a4eaa21faa88a5f6dc5a2ecf63c1ac9f88be8c57bc66a3eebfa37c
SSDEEP 196608:NZaZQiqGq0QX+1kId7HG4UURN27eU54VaWwUI3HtM/6hYcXACOFy3:NZExqGq0QXk9Fm4UUREaU3JUI3HtMSae
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118

.apk 9.5MB
bdxadsdk.jar

.apk 176KB
gdtadv2.jar

.apk 230KB

a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118

SHA256 8f22844897d6536b85a6939755079b8ffd641800e715019614767d8157d5cbcb
MD5 a16679e6bf03d7eb2155d36cd401a73c
SHA1 4265331fbdbeed6aa528747214e0c8e73f8f1c50
SHA512 41f14e6099ce97ec95425a35c056162028fa5176333f4bcfc284c3c1a4d55090a374613830a4eaa21faa88a5f6dc5a2ecf63c1ac9f88be8c57bc66a3eebfa37c
SSDEEP 196608:NZaZQiqGq0QX+1kId7HG4UURN27eU54VaWwUI3HtM/6hYcXACOFy3:NZExqGq0QXk9Fm4UUREaU3JUI3HtMSae
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.maihan.tredian

android.permission.ACCESS_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.KILL_BACKGROUND_PROCESSES android.permission.READ_CONTACTS android.permission.ACCESS_WIFI_STATE android.permission.VIBRATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.MANAGE_USERS android.permission.WAKE_LOCK android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.PACKAGE_USAGE_STATS android.permission.BATTERY_STATS android.permision.BLUETOOTH android.permission.WRITE_SETTINGS android.permission.GET_TASKS android.permission.READ_CALL_LOG com.maihan.tredian.permission.MIPUSH_RECEIVE com.meizu.flyme.push.permission.RECEIVE com.maihan.tredian.push.permission.MESSAGE com.meizu.c2dm.permission.RECEIVE com.maihan.tredian.permission.C2D_MESSAGE android.permission.REQUEST_INSTALL_PACKAGES android.permission.BROADCAST_PACKAGE_CHANGED android.permission.BROADCAST_PACKAGE_REPLACED android.permission.RESTART_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.DISABLE_KEYGUARD android.permission.EXPAND_STATUS_BAR android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.ACCESS_DOWNLOAD_MANAGER com.maihan.tredian.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.CHANGE_WIFI_STATE android.permission.BLUETOOTH android.permission.BROADCAST_PACKAGE_ADDED android.permission.BROADCAST_PACKAGE_INSTALL android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.maihan.tredian.activity.WelcomeActivity

android.intent.action.MAIN android.intent.action.VIEW

com.maihan.tredian.activity.MainActivity

com.maihan.tredian.activity.VerifyPhoneActivity

com.maihan.tredian.activity.PhoneLoginActivity

com.maihan.tredian.activity.WithdrawActivity

com.maihan.tredian.activity.WithdrawRuleActivity

com.maihan.tredian.activity.DayIncomeActivity

com.maihan.tredian.activity.IncomeDetailActivity

com.maihan.tredian.activity.UserActivity

com.maihan.tredian.activity.CommWebviewActivity

com.maihan.tredian.activity.NewsDetailActivity

android.intent.action.VIEW

com.maihan.tredian.activity.CommentListActivity

com.maihan.tredian.activity.WithdrawRecordActivity

com.maihan.tredian.activity.SelectMouldActivity

com.maihan.tredian.activity.VideoPlayActivity

com.maihan.tredian.activity.LoginActivity

com.maihan.tredian.activity.ReplyListActivity

com.maihan.tredian.activity.AppGuideActivity

com.maihan.tredian.activity.VerifyIdentityActivity

com.maihan.tredian.activity.FirendsActivity

com.maihan.tredian.activity.MyCollectionActivity

com.maihan.tredian.activity.NewsCategoryActivity

com.maihan.tredian.activity.NoticeCenterActivity

com.maihan.tredian.activity.FeedBackActivity

com.maihan.tredian.activity.SettingActivity

com.maihan.tredian.activity.NewsReportActivity

com.maihan.tredian.activity.SearchActivity

com.maihan.tredian.wxapi.WXEntryActivity

com.baidu.mobads.AppActivity

com.baidu.mobad.feeds.FeedNativeListViewActivity

com.umeng.socialize.media.WBShareCallBackActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.umeng.qq.tencent.AuthActivity

android.intent.action.VIEW

com.umeng.qq.tencent.AssistActivity

com.qq.e.ads.ADActivity

com.huawei.android.pushagent.permission.PermissionsMgrActivity

com.maihan.madsdk.activity.AdWebviewActivity

com.maihan.madsdk.activity.MAdOptimizeActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$STDStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SGTKStub_02_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_00

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_01

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_02

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_03

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_04

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_05

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_06

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_07

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_08

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_09

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_00_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_01_T

com.tencent.tinker.loader.hotplug.ActivityStubs$SIStub_02_T

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.maihan.tredian.service.MyService

com.maihan.tredian.service.DataReportService

com.maihan.tredian.service.ForegroundService

com.maihan.tredian.floatwindow.FloatWindowService

com.maihan.tredian.util.TinkerResultService

com.qq.e.comm.DownloadService

com.xiaomi.push.service.XMPushService

com.xiaomi.push.service.XMJobService

com.xiaomi.mipush.sdk.PushMessageHandler

com.xiaomi.mipush.sdk.MessageHandleService

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.huawei.android.pushagent.PushService

com.taobao.accs.ChannelService

com.taobao.accs.intent.action.SERVICE com.taobao.accs.intent.action.ELECTION

com.taobao.accs.data.MsgDistributeService

com.taobao.accs.intent.action.RECEIVE

com.taobao.accs.ChannelService$KernelService

org.android.agoo.accs.AgooService

com.taobao.accs.intent.action.RECEIVE

com.umeng.message.UmengIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.XiaomiIntentService

org.agoo.android.intent.action.RECEIVE

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action com.umeng.message.enablecallback.action com.umeng.message.disablecallback.action com.umeng.message.message.handler.action

com.umeng.message.UmengDownloadResourceService

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER cn.jpush.android.intent.REPORT cn.jpush.android.intent.PushService cn.jpush.android.intent.PUSH_TIME

com.tencent.tinker.lib.service.TinkerPatchService

com.tencent.tinker.lib.service.TinkerPatchService$InnerService

com.tencent.tinker.lib.service.DefaultTinkerResultService

com.bytedance.sdk.openadsdk.service.TTDownloadService

com.bytedance.sdk.openadsdk.service.TTDownloadHandlerService

com.maihan.tredian.receiver.MyBroadcastReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_REMOVED

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.maihan.tredian.push.XiaomiMessegeReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.maihan.tredian.push.MeizuPushMsgReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

com.maihan.tredian.push.MyJpushMessageReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.maihan.tredian.push.MyJpushBroadcastReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.huawei.android.pushagent.PushEventReceiver

com.huawei.android.push.intent.REFRESH_PUSH_CHANNEL com.huawei.intent.action.PUSH com.huawei.intent.action.PUSH_ON com.huawei.android.push.PLUGIN android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

com.huawei.android.pushagent.PushBootReceiver

com.huawei.android.push.intent.REGISTER android.net.conn.CONNECTIVITY_CHANGE

com.huawei.android.pushagent.PushEventReceiver

com.maihan.tredian.push.HuaweiReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE com.huawei.android.push.plugin.RESPONSE android.service.notification.NotificationListenerService

com.maihan.madsdk.download.DownloadManagerReceiver

android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED android.intent.action.DOWNLOAD_COMPLETE

com.taobao.accs.EventReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_REMOVED android.intent.action.USER_PRESENT

com.taobao.accs.ServiceReceiver

com.taobao.accs.intent.action.COMMAND com.taobao.accs.intent.action.START_FROM_AGOO

com.taobao.agoo.AgooCommondReceiver

com.maihan.tredian.intent.action.COMMAND android.intent.action.PACKAGE_REMOVED

com.umeng.message.NotificationProxyBroadcastReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.maihan.madsdk.receiver.MhBroadcastReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REPLACED android.intent.action.PACKAGE_REMOVED

Android Permissions

a16679e6bf03d7eb2155d36cd401a73c_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.READ_CONTACTS

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MANAGE_USERS

android.permission.WAKE_LOCK

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.PACKAGE_USAGE_STATS

android.permission.BATTERY_STATS

android.permision.BLUETOOTH

android.permission.WRITE_SETTINGS

android.permission.GET_TASKS

android.permission.READ_CALL_LOG

com.maihan.tredian.permission.MIPUSH_RECEIVE

com.meizu.flyme.push.permission.RECEIVE

com.maihan.tredian.push.permission.MESSAGE

com.meizu.c2dm.permission.RECEIVE

com.maihan.tredian.permission.C2D_MESSAGE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.DISABLE_KEYGUARD

android.permission.EXPAND_STATUS_BAR

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.ACCESS_DOWNLOAD_MANAGER

com.maihan.tredian.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS