a6ab9c9f7db9a4cbd39b7531193c656f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a6ab9c9f7db9a4cbd39b7531193c656f_JaffaCakes118
Size 10.2MB
Sample240613-1ep5ea1bpb
SHA256 f3360f941d8b265eb129f8247f35c6b2296c15ef99ac29bee61ddbe20d3b03cf
MD5 a6ab9c9f7db9a4cbd39b7531193c656f
SHA1 654cd316e1f3f1f5eaa97f8dbc044fa8d8e9210d
SHA512 0e6008f36561cc5e832acd3f40b83be2744ca0eabedcfd6f37985b3b8955bacbd6505fc8e8c6dd868e8b46602b61a4e94cc54bc484df5c497c45b5a50226fb4d
SSDEEP 196608:0VXRHinfNvvVqFEQ8C0qnNEN/++aL0FpRif/H/ECg9FZ1bytCM:qXRHSxvVqFEQZFNEN/++ae81g9Fz2CM
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a6ab9c9f7db9a4cbd39b7531193c656f_JaffaCakes118

.apk 10.2MB
alipay_msp.apk

.apk 354KB
plugin-deploy.jar

.apk 206KB

a6ab9c9f7db9a4cbd39b7531193c656f_JaffaCakes118

SHA256 f3360f941d8b265eb129f8247f35c6b2296c15ef99ac29bee61ddbe20d3b03cf
MD5 a6ab9c9f7db9a4cbd39b7531193c656f
SHA1 654cd316e1f3f1f5eaa97f8dbc044fa8d8e9210d
SHA512 0e6008f36561cc5e832acd3f40b83be2744ca0eabedcfd6f37985b3b8955bacbd6505fc8e8c6dd868e8b46602b61a4e94cc54bc484df5c497c45b5a50226fb4d
SSDEEP 196608:0VXRHinfNvvVqFEQ8C0qnNEN/++aL0FpRif/H/ECg9FZ1bytCM:qXRHSxvVqFEQZFNEN/++ae81g9Fz2CM
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:x86

com.xinanquan.android.ui

.activity.WelcomeActivity

android.intent.action.MAIN

.activity.LoginActivity

.activity.MainActivity

.activity.EditInfoActivity

.activity.MessageShowActivity

.activity.NewsDetailActivity

.activity.CommentListActivity

.activity.ChatActivity

.activity.SendMsgActivity

.activity.ReceiveMsgActivity

.activity.SentMsgActivity

.activity.CollectMsgActivity

.activity.DeleteMsgActivity

.activity.ProotocolActivity

.activity.FileCodeActivity

.activity.ContactsActivity

.activity.JoinActivity

.activity.HelpJoinActivity

.activity.MessageDetailActivity

.activity.CommentActivity

.activity.MsgDetailActivity

.activity.ZhongXinActivity

.activity.SettingActivity

.activity.SendImageActivity

.activity.ChannelActivity

.activity.SettingOther

.activity.ArticlesImageActivity

.activity.EduRecordActivity

.activity.CollectListActivity

.activity.EventsActivity

.activity.ExamsActivity

.activity.PaperActivity

.activity.ExamResultActivity

.activity.EduSoundListActivity

.activity.HappyEduActivity

.activity.EduPlayActivity

.activity.EduModelActivity

.activity.EduColumnActivity

.activity.EduToolActivity

.activity.TotalTopicsActivity

.activity.LiteracyWordActivity

.activity.ExcerciseActivity

.activity.ExcerciseAllActivity

.activity.EventsRegistActivity

.activity.LauncherActivity

.activity.EduLoginActivity

.activity.UserInfoActivity

.activity.UpdateUserInfoActivity

.activity.EduCollectListActivity

.activity.EduRecordListActivity

.activity.VipDetailListActivity

.activity.UserIntegralDetailActivity

.activity.EditPasswordActivity

.activity.PurchaseActivity

.activity.EduDownListActivity

.activity.MyRecordActivity

.activity.HappyNewYearActivity

.activity.HappyNewYearActivityKHD

.activity.HappyNewYearKBActivity

.activity.SetPositionActivity

.activity.SuggestActiivity

.activity.InterpretationActivity

.activity.SearchResultActivity

.activity.LiteracyWordSearchActivity

.activity.LookPicActivity

.activity.PicActivity

.activity.SetPosDialogActivity

.activity.BookShopActivity

.activity.BookActivity

.activity.BookIndentActivity

.activity.LoveActivity

.activity.PicFreeActivity

com.alipay.android.app.sdk.WapPayActivity

.activity.CustomDialogActivity

com.xinanquan.android.reserch.activity.ZeroActivity

com.xinanquan.android.reserch.activity.FirstActivity

com.xinanquan.android.reserch.activity.SecondActivity

com.xinanquan.android.reserch.activity.ThirdActivity

cn.sharesdk.framework.ShareSDKUIShell

android.intent.action.VIEW

.wxapi.WXEntryActivity

.yxapi.YXEntryActivity

com.umeng.fb.ConversationActivity

com.umeng.fb.ContactActivity

com.xinanquan.android.ui.activity.ConflictActivity

com.baidu.android.pushservice.richmedia.MediaViewActivity

com.baidu.android.pushservice.richmedia.MediaListActivity

com.umeng.update.UpdateDialogActivity

alipay_msp.apk

SHA256 ee3c608fff51b313f4e0b3e542bedccb4d4db4c8eb44e63bf4be0d468e9ee117
MD5 89c04e1ebcd58eca6dd93211628ed0bc
SHA1 7d1e77ce25a635299704dbd95bd95c697572ea9d
SHA512 3dccaeff9906401855f3071c91012926d7e9250674ea0bb89606e4862223a8343fc7b9369afe4e50031d261b45437107c018f565da5615c49721c3bf1bf6ed01
SSDEEP 6144:cH8LfOo+BjGVN8TdW4zxgnm1Us3JuOK2vf5C8EcPK+WvyQcQ2fnq7:cHLxBiVN8pWggmlY25CLE8RcQ2fnq7
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.alipay.android.app

Android Permissions

a6ab9c9f7db9a4cbd39b7531193c656f_JaffaCakes118

Permissions

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.DISABLE_KEYGUARD

android.permission.RECORD_AUDIO

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_LOGS

android.permission.CALL_PHONE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS