a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

General

Target
a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118
Size 7.0MB
Sample240613-lv39mstdng
SHA256 19c40ecbbcf06a6f8815d7f217aa256c3eccb063ee31552c42cc6f07a1925dbe
MD5 a4f1180bdcdc4baf0b0e772c6b95a524
SHA1 90589dee277a653603181b2a47312f02c9b849a2
SHA512 1c5742a535d366ddec94cc60600e565e68feb0cfcf543e5b736644bbf75661212ee90212375459a81e67d79e339bc5bbae9a50c4a373f966f82a0afd87eca7b4
SSDEEP 196608:UbIgAqfhdaWSf4frbflRAvoHMdlnS3hrVmi99:UbIgAUPSAf3wvUMeVwA9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

.apk 7.0MB

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

SHA256 19c40ecbbcf06a6f8815d7f217aa256c3eccb063ee31552c42cc6f07a1925dbe
MD5 a4f1180bdcdc4baf0b0e772c6b95a524
SHA1 90589dee277a653603181b2a47312f02c9b849a2
SHA512 1c5742a535d366ddec94cc60600e565e68feb0cfcf543e5b736644bbf75661212ee90212375459a81e67d79e339bc5bbae9a50c4a373f966f82a0afd87eca7b4
SSDEEP 196608:UbIgAqfhdaWSf4frbflRAvoHMdlnS3hrVmi99:UbIgAUPSAf3wvUMeVwA9
MD5 SHA1 SHA512 SSDEEP

com.fanao.guanshengdi

Android Permissions

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

com.fanyue.laohuangli.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.fanao.guanshengdi.permission.C2D_MESSAGE

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

com.fanao.bigfairy.activity.StartActivity

com.stub.stub01.Stub01

com.stub.stub01.Stub02

com.stub.stub02.Stub01

com.stub.stub05.Stub01

com.fanao.bigfairy.activity.GuangShenDiActivity

com.fanao.bigfairy.activity.DetailActivity

com.fanao.bigfairy.activity.WebViewActivity

com.fanao.bigfairy.activity.AboutActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.google.android.gms.common.api.GoogleApiActivity

com.stub.stub01.Stub03

com.stub.stub02.Stub02

com.stub.stub02.Stub03

com.stub.stub05.Stub02

com.fanao.bigfairy.service.DownloadService

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

com.stub.stub02.Stub05

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.stub.stub02.Stub04

android.support.v4.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

Sharing

General

Malware Config

Signatures

File Explorer

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118

com.fanao.bigfairy.activity.StartActivity

com.stub.stub01.Stub01

com.stub.stub01.Stub02

com.stub.stub02.Stub01

com.stub.stub05.Stub01

com.fanao.bigfairy.activity.GuangShenDiActivity

com.fanao.bigfairy.activity.DetailActivity

com.fanao.bigfairy.activity.WebViewActivity

com.fanao.bigfairy.activity.AboutActivity

com.google.android.gms.ads.AdActivity

com.google.android.gms.ads.purchase.InAppPurchaseActivity

com.google.android.gms.common.api.GoogleApiActivity

com.stub.stub01.Stub03

com.stub.stub02.Stub02

com.stub.stub02.Stub03

com.stub.stub05.Stub02

com.fanao.bigfairy.service.DownloadService

com.google.android.gms.measurement.AppMeasurementService

com.google.firebase.iid.FirebaseInstanceIdService

com.stub.stub02.Stub05

com.google.android.gms.measurement.AppMeasurementReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.firebase.iid.FirebaseInstanceIdInternalReceiver

com.stub.stub02.Stub04

android.support.v4.content.FileProvider

com.google.firebase.provider.FirebaseInitProvider

Android Permissions

a4f1180bdcdc4baf0b0e772c6b95a524_JaffaCakes118