a510fbec01ea5dfe69cc8bd329a615b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a510fbec01ea5dfe69cc8bd329a615b2_JaffaCakes118
Size 10.7MB
Sample240613-mfdacayekl
SHA256 4620b7c0b4056f911064cd7d28f885517954c70f54266495191bc08e4136459d
MD5 a510fbec01ea5dfe69cc8bd329a615b2
SHA1 5d8afebab1ade64e1b9f15867b160af959311311
SHA512 ac4aaaff570e56f7a7c6522ba59ef4e41d66f29971fba2745c79798238164af9425ab4777ea7110d73befd4c7af999db6dafbcfd14285c4134aaf78d9ae06f1a
SSDEEP 196608:iIfuoLiU815CM4m7XryUY1BFJTVR/SqOsI1AMvQ+4g1AEh1sQya4dk6bEEkxhVUK:iAuoLhuN4m771EBF1VR/S9sIXQ+4g1tV
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

a510fbec01ea5dfe69cc8bd329a615b2_JaffaCakes118

.apk 10.7MB

a510fbec01ea5dfe69cc8bd329a615b2_JaffaCakes118

SHA256 4620b7c0b4056f911064cd7d28f885517954c70f54266495191bc08e4136459d
MD5 a510fbec01ea5dfe69cc8bd329a615b2
SHA1 5d8afebab1ade64e1b9f15867b160af959311311
SHA512 ac4aaaff570e56f7a7c6522ba59ef4e41d66f29971fba2745c79798238164af9425ab4777ea7110d73befd4c7af999db6dafbcfd14285c4134aaf78d9ae06f1a
SSDEEP 196608:iIfuoLiU815CM4m7XryUY1BFJTVR/SqOsI1AMvQ+4g1AEh1sQya4dk6bEEkxhVUK:iAuoLhuN4m771EBF1VR/S9sIXQ+4g1tV
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.a657id60.app

com.ziye.mumulottery.acp.AcpActivity

com.ziye.mumulottery.MainActivity

android.intent.action.MAIN

com.ziye.mumulottery.fragment5.HomeActivity1

com.ziye.mumulottery.activity.LoginActivity

com.ziye.mumulottery.activity.LoginNoSingleActivity

com.ziye.mumulottery.activity.open.OpenCqsscActivity

com.ziye.mumulottery.activity.open.OpenTjsscActivity

com.ziye.mumulottery.activity.open.OpenXjsscActivity

com.ziye.mumulottery.activity.open.OpenTcpl3Activity

com.ziye.mumulottery.activity.open.OpenJspk10Activity

com.ziye.mumulottery.activity.open.OpenLfsscActivity

com.ziye.mumulottery.activity.open.OpenXy28Activity

com.ziye.mumulottery.activity.open.OpenKl8Activity

com.ziye.mumulottery.activity.open.OpenXyftActivity

com.ziye.mumulottery.activity.open.OpenBjpk10Activity

com.ziye.mumulottery.activity.open.OpenXyncActivity

com.ziye.mumulottery.activity.open.OpenSfsscActivity

com.ziye.mumulottery.activity.open.OpenKlsfActivity

com.ziye.mumulottery.activity.open.OpenFc3dActivity

com.ziye.mumulottery.activity.open.OpenLhcActivity

com.ziye.mumulottery.activity.mine.SessionInfoActivity

com.ziye.mumulottery.activity.mine.ZhanNeiXinActivity2

com.ziye.mumulottery.activity.mine.EditPasswordActivity

com.ziye.mumulottery.activity.WeiHuActivity

com.ziye.mumulottery.activity.mine.EditSessionInfoActivity

com.ziye.mumulottery.activity.mine.TouZhuJiLuActivity

com.ziye.mumulottery.activity.mine.YinHangKaActivity

com.ziye.mumulottery.activity.mine.ZiJinJiLuActivity

com.ziye.mumulottery.activity.WebViewActivity

com.ziye.mumulottery.activity.WebViewActivity2

com.ziye.mumulottery.activity.buy.klsf.BuyKlsfActivity

com.ziye.mumulottery.activity.buy.xy28.BuyXy28Activity

com.ziye.mumulottery.activity.buy.xync.BuyXyncActivity

com.ziye.mumulottery.activity.buy.bjkl8.BuyBjkl8Activity

com.ziye.mumulottery.activity.open.OpenFfsscActivity

com.ziye.mumulottery.activity.buy.fc3d.BuyFc3dActivity

com.ziye.mumulottery.activity.buy.tcpl3.BuyTcpl3Activity

com.ziye.mumulottery.activity.buy.xyft.BuyXyftActivity

com.ziye.mumulottery.activity.mine.agent.ProxyerActivity

com.ziye.mumulottery.activity.mine.agent.UserListActivity

com.ziye.mumulottery.activity.mine.agent.AddUserActivity

com.ziye.mumulottery.activity.mine.agent.CaiWuActivity

com.ziye.mumulottery.activity.mine.agent.LiuShuiActivity

com.ziye.mumulottery.activity.mine.agent.TeamBaoBiaoActivity

com.ziye.mumulottery.activity.mine.agent.TeamTouZhuActivity

com.ziye.mumulottery.activity.mine.agent.TeamYongjinActivity

com.ziye.mumulottery.activity.PublicMsgActivity

com.ziye.mumulottery.activity.mine.AddBankCardActivity

com.ziye.mumulottery.activity.ChaXunTJActivity

com.ziye.mumulottery.activity.mine.ChongZhiJiLuActivity

com.ziye.mumulottery.activity.mine.TiXianJiLuActivity

com.ziye.mumulottery.activity.mine.CardDoesActivity

com.ziye.mumulottery.activity.mine.BankCardDetailActivity

com.ziye.mumulottery.activity.ZhuDanDetailActivity

com.ziye.mumulottery.activity.YouHuiHuoDongActivity

com.ziye.mumulottery.activity.mine.TikuanActivity

com.ziye.mumulottery.activity.chongzhi.ChongzhiActivity

com.ziye.mumulottery.activity.chongzhi.wx.WxZhuanzhangActivity

com.ziye.mumulottery.activity.chongzhi.yhk.YhkZhuanzhangActivity

com.ziye.mumulottery.activity.chongzhi.cft.CftZhuanzhangActivity

com.ziye.mumulottery.activity.chongzhi.qq.QQZhuanzhangActivity

com.ziye.mumulottery.activity.chongzhi.zfb.ZfbZhuanzhangActivity

com.ziye.mumulottery.activity.chongzhi.WxZhifuActivity

com.ziye.mumulottery.activity.chongzhi.YinhangsActivity

com.ziye.mumulottery.activity.chongzhi.CzErweimaModeActivity

com.ziye.mumulottery.activity.TiKuanMingXiAcitivty

com.ziye.mumulottery.activity.buy.lhc.BuyLhcNewActivity

com.ziye.mumulottery.activity.buy.ahkl3.BuyAhkl3Activity

com.ziye.mumulottery.activity.open.OpenAhk3Activity

com.ziye.mumulottery.activity.buy.hbk3.BuyHbkl3Activity

com.ziye.mumulottery.activity.buy.jsk3.BuyJsk3Activity

com.ziye.mumulottery.activity.open.common.OpenJsk3Activity

com.ziye.mumulottery.activity.open.OpenHbk3Activity

com.ziye.mumulottery.activity.open.OpenSyxwActivity

com.ziye.mumulottery.activity.open.OpenSsqActivity

com.ziye.mumulottery.activity.YouHuiHuoDongDetailActivity

com.ziye.mumulottery.activity.open.OpenHightCqsscActivity

com.ziye.mumulottery.activity.open.OpenHightTjsscActivity

com.ziye.mumulottery.activity.open.OpenHightXjsscActivity

com.ziye.mumulottery.activity.open.OpenHightFfsscActivity

com.ziye.mumulottery.activity.open.OpenHightLfsscActivity

com.ziye.mumulottery.activity.open.OpenHightSfsscActivity

com.ziye.mumulottery.activity.open.OpenHightAhk3Activity

com.ziye.mumulottery.activity.open.OpenHightBjpk10Activity

com.ziye.mumulottery.activity.open.OpenHightHbk3Activity

com.ziye.mumulottery.activity.open.OpenHightKl8Activity

com.ziye.mumulottery.activity.open.OpenHightJspk10Activity

com.ziye.mumulottery.activity.open.OpenHightKlsfActivity

com.ziye.mumulottery.activity.open.OpenHightSyxwActivity

com.ziye.mumulottery.activity.open.OpenHightXy28Activity

com.ziye.mumulottery.activity.open.OpenHightXyftActivity

com.ziye.mumulottery.activity.open.OpenHightXyncActivity

com.ziye.mumulottery.activity.open.OpenLowFc3dActivity

com.ziye.mumulottery.activity.open.OpenLowLhcActivity

com.ziye.mumulottery.activity.open.OpenLowSsqActivity

com.ziye.mumulottery.activity.open.OpenWfsscActivity

com.ziye.mumulottery.activity.open.OpenLowTcpl3Activity

com.ziye.mumulottery.activity.mine.QukuanPasswordActivity

com.ziye.mumulottery.activity.buy.wfssc.BuyWfsscActivity

com.ziye.mumulottery.activity.ChaXunOpenActivity

com.ziye.mumulottery.activity.RegisterActivityNow

com.ziye.mumulottery.activity.mine.PreferentialActivity

com.ziye.mumulottery.activity.mine.YueyueActivity

com.ziye.mumulottery.activity.mine.QianDaoActivity

com.ziye.mumulottery.activity.mine.OneDayActivity

com.ziye.mumulottery.activity.ReminderActivity

com.ziye.mumulottery.activity.buy.cqssc.BuyCqsscActivity

com.ziye.mumulottery.offoicial_bet.cqssc.BuyOffoIcialCqsscActivity

com.ziye.mumulottery.activity.buy.xjssc.BuyXjsscActivity

com.ziye.mumulottery.offoicial_bet.xjssc.BuyOffoIcialXjsscActivity

com.ziye.mumulottery.activity.buy.tjssc.BuyTjsscActivity

com.ziye.mumulottery.offoicial_bet.tjssc.BuyOffoIcialTjsscActivity

com.ziye.mumulottery.activity.buy.ffssc.BuyFfsscActivity

com.ziye.mumulottery.offoicial_bet.ffssc.BuyOffoIcialFfsscActivity

com.ziye.mumulottery.offoicial_bet.efssc.BuyOffoIcialEfsscActivity

com.ziye.mumulottery.activity.buy.lfssc.BuyLfsscActivity

com.ziye.mumulottery.activity.buy.sfssc.BuySfsscActivity

com.ziye.mumulottery.offoicial_bet.sfssc.BuyOffoIcialSfsscActivity

com.ziye.mumulottery.activity.buy.bjpk102.BuyBjpk10Activity

com.ziye.mumulottery.offoicial_bet.bjpk10.BuyOffoIcialBjpk10Activity

com.ziye.mumulottery.activity.buy.jspk.BuyJspkActivity

com.ziye.mumulottery.offoicial_bet.jspk10.BuyOffoIcialJspk10Activity

com.ziye.mumulottery.offoicial_bet.syxw.BuyOffoIcialSyxwActivity

com.ziye.mumulottery.offoicial_bet.ssq.BuyOffoIcialSsqActivity

com.ziye.mumulottery.activity.buy.ssq.BuySsqActivity

com.ziye.mumulottery.WebAppActivity

com.ziye.mumulottery.activity.WxSaoMaActivity

com.ziye.mumulottery.activity.mine.ZNXDetailsActivity

com.ziye.mumulottery.fragment5.chartsFragment.FullscreenActivity

com.ziye.mumulottery.activity.MobanActivity

com.ziye.mumulottery.Main2Activity

com.ziye.mumulottery.Main3Activity

com.ziye.mumulottery.activity.ZouShiTuActivity

com.ziye.mumulottery.activity.WanFaShuoMingActivity

com.ziye.mumulottery.chongzhi.WxZhanZhang1Activity

com.ziye.mumulottery.chongzhi.WxZhanZhang2Activity

com.ziye.mumulottery.RegisterSucceedActivity

com.ziye.mumulottery.chongzhi.MoneyMenagerActivity

com.ziye.mumulottery.chongzhi.WeiXin4BackActivity

com.ziye.mumulottery.custom.JdDialog

com.ziye.mumulottery.custom.ZhifubaoDialog

com.ziye.mumulottery.Activity1111

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

Android Permissions

a510fbec01ea5dfe69cc8bd329a615b2_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.CALL_PHONE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_PHONE_STATE

com.a657id60.app.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS