a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118
Size 28.4MB
Sample240613-agb3fswfpf
SHA256 5c47fe9b6834bfd013e68ca71d68ed92d2d53ebedf87f201440f00b7635ff90b
MD5 a3157ff675b835f48ba0b5c239d53eea
SHA1 4d12c0ea612ee185a259a8fa84bee1c7c4195e3b
SHA512 b769ca550ad46ce0e58513bfb96d52979311a8adaaabe42cd19c06b6ac7d8568f826036e1786804b4304147b64e314b976f84190283f901f3cf829b809ab5005
SSDEEP 786432:2JNF6y0HkI8JHseqZphsfsj0N1K6lp5b+N1K6lp5bYN1K6lp5bL:2DQHkI8J9qZAfswDuDEDn
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

File Explorer

a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118

.apk 28.4MB
oppo_game_service_201502.so

.apk 3.6MB
vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

.apk 4.2MB
vivounionsdk.res

.apk 29KB

a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118

SHA256 5c47fe9b6834bfd013e68ca71d68ed92d2d53ebedf87f201440f00b7635ff90b
MD5 a3157ff675b835f48ba0b5c239d53eea
SHA1 4d12c0ea612ee185a259a8fa84bee1c7c4195e3b
SHA512 b769ca550ad46ce0e58513bfb96d52979311a8adaaabe42cd19c06b6ac7d8568f826036e1786804b4304147b64e314b976f84190283f901f3cf829b809ab5005
SSDEEP 786432:2JNF6y0HkI8JHseqZphsfsj0N1K6lp5b+N1K6lp5bYN1K6lp5bL:2DQHkI8J9qZAfswDuDEDn
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.mnyxdmx.vivo

oppo_game_service_201502.so

SHA256 d5595b71588065719f335bf13866b982d9eb74be8a205000f338f9468b64dd94
MD5 2525eadb6c393c2e1a7e0ecdd74a4d4a
SHA1 b6689b2606203f0b51c8598c1d72078e2e5ebfc5
SHA512 b83fcd272f3f21d730a57f418430d10888dd107edd15103f89d76ed5b43d89b157ac4b282585465c6a5e86b1fd2c33be98aeb0e5157b2e625145b87670ce63a7
SSDEEP 98304:bNCeAQPvPRJl98b0qlYHjBCh5Kf3bRvj8qnfU2CUE6xRz3eA:bNCeVPRJfCZl+wLK1BURUE6xRz3eA
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:x86 arch:x64

com.nearme.game.service

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

SHA256 333ee74803ab4b114d6217250623869c751a00f4748c826c19ffcd7b29476195
MD5 3200674229ed57cf762fc3d8c5137b55
SHA1 0896d5f138545dc9ddbf0003518880d745c8fe0e
SHA512 31c96314a2b0d80ef3d6c04c0a6894b6a8ebff7e501fd48499ea0e12969ba4ac00cdd844caf839a16cdcffa5b51ee2f33af36a578dfd450c79c7e2bbc0c521ff
SSDEEP 98304:aQn4W5hESDzkY18DTTcDPPIKGPBhFI+sqFkSOO:aQ4W5hEIkg8DTTcDPPIK+HFknO
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.vivo.sdkplugin

Android Permissions

a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118

Permissions

vivo.game.permission.OPEN_JUMP_INTENTS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

a3157ff675b835f48ba0b5c239d53eea_JaffaCakes118

org.cocos2dx.cpp.AppActivity

com.vivo.unionsdk.ui.UnionActivity

oppo_game_service_201502.so

com.nearme.atlas.offlinepay.application.ui.activities.OppoOfflinePayHostActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.nearme.atlas.offlinepay.application.third.wxpayh5.WxWapPayTaskActivity

com.oneplus.accountsdk.auth.OPAuthorizeActivity

com.oppo.usercenter.opensdk.dialog.register.UserCenterOperateActivity

com.oppo.usercenter.opensdk.dialog.country.UCCountryCallingcodeSelectActivity

com.oppo.usercenter.opensdk.register.RegisterClauseActivity

com.oppo.usercenter.opensdk.setpsw.SetPswActivity

com.oppo.usercenter.opensdk.visitor.UcVisitorUpgradeActivity

com.oppo.usercenter.opensdk.realname.verified.UCRealNameVerifiedActivity

com.oppo.usercenter.opensdk.captcha.UCCaptchaVerifyActivity

com.oppo.usercenter.opensdk.captcha.UCCaptchaDialogActivity

com.oppo.usercenter.opensdk.dialog.web.LoadingWebActivity

com.oppo.usercenter.sdk.helper.UserCenterOperateReceiver

vivounionapk_v4.2.4.0_d74cb3a_201808271150_signed_aligned.vua

com.vivo.upgradelibrary.upmode.VivoUpgradeActivityDialog

com.vivo.sdkplugin.core.functions.permission.PermissionAlertActivity

com.vivo.sdkplugin.activity.LoginActivity

com.bbk.payment.PaymentActivity

com.bbkmobile.iqoo.payment.PaymentActivity

com.vivo.sdkplugin.core.compunctions.activity.UnionActivity

com.vivo.unionsdk.ui.UnionActivity

com.vivo.sdkplugin.wxapi.WXPayEntryActivity

com.vivo.sdkplugin.payment.qqpay.VivoQQPayResultActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.bbk.account.oauth.activity.AuthorizeActivity

com.vivo.plugin.aidl.LoginAccInfoService

com.vivo.sdkplugin.suspension.service.AssistService

com.vivo.sdkplugin.AccountAppWidgetProvider

com.vivo.upgradelibrary.utils.FileProvider

vivounionsdk.res

com.vivo.unionsdk.ui.UnionActivity