a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118
Size 21.2MB
Sample240613-2qwa8stejf
SHA256 01be385f94e4d6be7a3860030aa5248a0cc0a77c2ee966fa1816250d3fe2a237
MD5 a6f677e2d4614f89aa98d910c93c348e
SHA1 74951280348599e0f2b7c11e25a17894801f58f6
SHA512 16b06612b25dbe64859d5cbf1a4eb14eae97c075df2740df1991022fbe4e10d3d73944347f4a13c12031672a1830531ba2e7ae2b371ac18aa54b26701bb046df
SSDEEP 393216:0MFOmFu7kHh8xJMP0wfS90o9ctBLG3VTn1wu/MLKgXVE58m0lvFUo4kPti:06M7kHh8xJRFF9c7Lyn3/MOav4kPQ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 28 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118

.apk 21.2MB

a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118

SHA256 01be385f94e4d6be7a3860030aa5248a0cc0a77c2ee966fa1816250d3fe2a237
MD5 a6f677e2d4614f89aa98d910c93c348e
SHA1 74951280348599e0f2b7c11e25a17894801f58f6
SHA512 16b06612b25dbe64859d5cbf1a4eb14eae97c075df2740df1991022fbe4e10d3d73944347f4a13c12031672a1830531ba2e7ae2b371ac18aa54b26701bb046df
SSDEEP 393216:0MFOmFu7kHh8xJMP0wfS90o9ctBLG3VTn1wu/MLKgXVE58m0lvFUo4kPti:06M7kHh8xJRFF9c7Lyn3/MOav4kPQ
MD5 SHA1 SHA512 SSDEEP

com.cqtimes.cqtnews

android.permission.WRITE_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.RECORD_AUDIO android.permission.MODIFY_AUDIO_SETTINGS android.permission.INTERNET android.permission.CALL_PHONE android.permission.WAKE_LOCK android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.WRITE_EXTERNAL_STORAGE android.permission.VIBRATE android.permission.GET_TASKS android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.MANAGE_ACCOUNTS android.permission.GET_ACCOUNTS android.permission.READ_EXTERNAL_STORAGE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.RECORD_AUDIO android.permission.WAKE_LOCK android.permission.CAMERA android.permission.FLASHLIGHT android.permission.READ_PHONE_STATE android.permission.SET_DEBUG_APP android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.RECORD_AUDIO android.permission.CAMERA android.permission.WAKE_LOCK android.permission.ACCESS_NETWORK_STATE android.permission.MODIFY_AUDIO_SETTINGS com.cqtimes.cqtnews.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE

com.cqtimes.cqtnews.ui.activity.StartActivity

android.intent.action.MAIN android.intent.action.VIEW

com.qihoo.util.CommonActivity

com.qihoo.ls.LsActivity

com.mob.tools.MobUIShell

android.intent.action.VIEW android.intent.action.VIEW com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.cqtimes.cqtnews.wxapi.WXEntryActivity

com.android.moblie.zmxy.antgroup.creditsdk.app.SDKActivity

com.cqtimes.cqtnews.ui.activity.MainActivity

com.cqtimes.cqtnews.ui.activity.UserInfoActivity

com.cqtimes.cqtnews.ui.activity.LoginActivity

com.cqtimes.cqtnews.ui.activity.WebViewActivity

com.cqtimes.cqtnews.ui.activity.RegisterActivity

com.cqtimes.cqtnews.ui.activity.SearchActivity

com.cqtimes.cqtnews.ui.activity.CommentListActivity

com.cqtimes.cqtnews.ui.activity.MyCommendActivity

com.cqtimes.cqtnews.ui.activity.ReadHistoryActivity

com.cqtimes.cqtnews.ui.activity.AboutActivity

com.cqtimes.cqtnews.ui.activity.MyUploadNewsActivity

com.cqtimes.cqtnews.ui.activity.ControlNewsHobbyActivity

com.cqtimes.cqtnews.ui.activity.PhoneActivity

com.cqtimes.cqtnews.ui.activity.PasswordActivity

com.cqtimes.cqtnews.ui.supports.permission.PermissionsActivity

com.cqtimes.cqtnews.ui.activity.InternetNewsActivity

com.cqtimes.cqtnews.ui.supports.qiniu.live.SWCodecCameraStreamingActivity

com.cqtimes.cqtnews.ui.supports.qiniu.live.StreamingBaseActivity

com.cqtimes.cqtnews.ui.supports.qiniu.player.LivePlayerActivity

com.cqtimes.cqtnews.ui.activity.SpecialReportActivity

com.cqtimes.cqtnews.ui.activity.MainUGCActivity

com.cqtimes.cqtnews.ui.activity.MyCollectActivity

com.cqtimes.cqtnews.ui.activity.SearchMoreActivity

com.cqtimes.cqtnews.ui.activity.WebProgressActivity

com.cqtimes.cqtnews.ui.widget.ninegridview.preview.ImagePreviewActivity

com.cqtimes.cqtnews.ui.activity.UploadActivity

mabeijianxi.camera.MediaRecorderActivity

com.cqtimes.cqtnews.ui.activity.SendSmallVideoActivity

com.cqtimes.cqtnews.ui.activity.UploadImageActivity

com.cqtimes.cqtnews.ui.activity.UploadMovieActivity

com.cqtimes.cqtnews.ui.activity.DiscoveryDetailActivity

com.cqtimes.cqtnews.ui.activity.UploadTextImageActivity

com.cqtimes.cqtnews.ui.activity.UserActivity

com.cqtimes.cqtnews.ui.activity.ReportActivity

com.cqtimes.cqtnews.ui.activity.UGCAllActivity

com.cqtimes.cqtnews.ui.activity.InviteFriendActivity

com.cqtimes.cqtnews.ui.activity.SearchUgcActivity

com.cqtimes.cqtnews.ui.activity.SettingActivity

com.cqtimes.zxing.activity.CaptureActivity

com.cqtimes.cqtnews.ui.activity.FeedBackActivity

com.cqtimes.cqtnews.ui.activity.ApproveActivity

com.cqtimes.cqtnews.ui.activity.ApprovePhoneActivity

com.cqtimes.cqtnews.ui.activity.MemberIDActivity

com.cqtimes.cqtnews.ui.activity.ApprovePhotoActivity

com.cqtimes.cqtnews.ui.activity.ApproveSuccessActivity

com.cqtimes.cqtnews.ui.activity.PassRecoverActivity

com.cqtimes.cqtnews.ui.activity.FindPasswordActivity

com.cqtimes.cqtnews.ui.activity.PersonalPageActivity

com.yancy.imageselector.ImageSelectorActivity

android.media.action.IMAGE_CAPTURE android.intent.category.DEFAULT

fm.jiecao.jcvideoplayer_lib.JCFullScreenActivity

Android Permissions

a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.READ_PHONE_STATE

android.permission.SET_DEBUG_APP

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

Sharing

General

Malware Config

Signatures

File Explorer

a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118

com.cqtimes.cqtnews.ui.activity.StartActivity

com.qihoo.util.CommonActivity

com.qihoo.ls.LsActivity

com.mob.tools.MobUIShell

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.cqtimes.cqtnews.wxapi.WXEntryActivity

com.android.moblie.zmxy.antgroup.creditsdk.app.SDKActivity

com.cqtimes.cqtnews.ui.activity.MainActivity

com.cqtimes.cqtnews.ui.activity.UserInfoActivity

com.cqtimes.cqtnews.ui.activity.LoginActivity

com.cqtimes.cqtnews.ui.activity.WebViewActivity

com.cqtimes.cqtnews.ui.activity.RegisterActivity

com.cqtimes.cqtnews.ui.activity.SearchActivity

com.cqtimes.cqtnews.ui.activity.CommentListActivity

com.cqtimes.cqtnews.ui.activity.MyCommendActivity

com.cqtimes.cqtnews.ui.activity.ReadHistoryActivity

com.cqtimes.cqtnews.ui.activity.AboutActivity

com.cqtimes.cqtnews.ui.activity.MyUploadNewsActivity

com.cqtimes.cqtnews.ui.activity.ControlNewsHobbyActivity

com.cqtimes.cqtnews.ui.activity.PhoneActivity

com.cqtimes.cqtnews.ui.activity.PasswordActivity

com.cqtimes.cqtnews.ui.supports.permission.PermissionsActivity

com.cqtimes.cqtnews.ui.activity.InternetNewsActivity

com.cqtimes.cqtnews.ui.supports.qiniu.live.SWCodecCameraStreamingActivity

com.cqtimes.cqtnews.ui.supports.qiniu.live.StreamingBaseActivity

com.cqtimes.cqtnews.ui.supports.qiniu.player.LivePlayerActivity

com.cqtimes.cqtnews.ui.activity.SpecialReportActivity

com.cqtimes.cqtnews.ui.activity.MainUGCActivity

com.cqtimes.cqtnews.ui.activity.MyCollectActivity

com.cqtimes.cqtnews.ui.activity.SearchMoreActivity

com.cqtimes.cqtnews.ui.activity.WebProgressActivity

com.cqtimes.cqtnews.ui.widget.ninegridview.preview.ImagePreviewActivity

com.cqtimes.cqtnews.ui.activity.UploadActivity

mabeijianxi.camera.MediaRecorderActivity

com.cqtimes.cqtnews.ui.activity.SendSmallVideoActivity

com.cqtimes.cqtnews.ui.activity.UploadImageActivity

com.cqtimes.cqtnews.ui.activity.UploadMovieActivity

com.cqtimes.cqtnews.ui.activity.DiscoveryDetailActivity

com.cqtimes.cqtnews.ui.activity.UploadTextImageActivity

com.cqtimes.cqtnews.ui.activity.UserActivity

com.cqtimes.cqtnews.ui.activity.ReportActivity

com.cqtimes.cqtnews.ui.activity.UGCAllActivity

com.cqtimes.cqtnews.ui.activity.InviteFriendActivity

com.cqtimes.cqtnews.ui.activity.SearchUgcActivity

com.cqtimes.cqtnews.ui.activity.SettingActivity

com.cqtimes.zxing.activity.CaptureActivity

com.cqtimes.cqtnews.ui.activity.FeedBackActivity

com.cqtimes.cqtnews.ui.activity.ApproveActivity

com.cqtimes.cqtnews.ui.activity.ApprovePhoneActivity

com.cqtimes.cqtnews.ui.activity.MemberIDActivity

com.cqtimes.cqtnews.ui.activity.ApprovePhotoActivity

com.cqtimes.cqtnews.ui.activity.ApproveSuccessActivity

com.cqtimes.cqtnews.ui.activity.PassRecoverActivity

com.cqtimes.cqtnews.ui.activity.FindPasswordActivity

com.cqtimes.cqtnews.ui.activity.PersonalPageActivity

com.yancy.imageselector.ImageSelectorActivity

fm.jiecao.jcvideoplayer_lib.JCFullScreenActivity

com.amap.api.location.APSService

com.qihoo.util.QhJobService

com.qihoo.util.CommonService

com.qihoo.ls.SoService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.qihoo.util.CommonReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.cqtimes.cqtnews.jpush.MyReceiver

com.cqtimes.cqtnews.receiver.NotificationDeleteReceiver

com.qihoo.util.CommonProvider

Android Permissions

a6f677e2d4614f89aa98d910c93c348e_JaffaCakes118