a577c7f72912a517c531f122f191e35b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a577c7f72912a517c531f122f191e35b_JaffaCakes118
Size 24.0MB
Sample240613-pcpkbasclk
SHA256 9c54ebc28e6cca937eb2918d3f35fc05d798234078bd13086c9b976bd76ca28c
MD5 a577c7f72912a517c531f122f191e35b
SHA1 d1ca1de82bc4f188bc9a693dff3896c3edd6fb4d
SHA512 ee6fa2e6ec65782cfad5c4c8175414a695b730b8f3518a4d38b295a065088530f3bcc26069a40ac571f83a80dfab433a8c6b916f2cc8356d9fe39de12dd351cf
SSDEEP 393216:0QX+OZgV9qR4wHsvrLOe/DLP0LP1V3rHlbF3+c6+r2tF9YH37egf/dgFr91vt:0WnZgVQ7HsvrLOe/DLPwPDzv38F9iLTY
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

a577c7f72912a517c531f122f191e35b_JaffaCakes118

.apk 24.0MB

a577c7f72912a517c531f122f191e35b_JaffaCakes118

SHA256 9c54ebc28e6cca937eb2918d3f35fc05d798234078bd13086c9b976bd76ca28c
MD5 a577c7f72912a517c531f122f191e35b
SHA1 d1ca1de82bc4f188bc9a693dff3896c3edd6fb4d
SHA512 ee6fa2e6ec65782cfad5c4c8175414a695b730b8f3518a4d38b295a065088530f3bcc26069a40ac571f83a80dfab433a8c6b916f2cc8356d9fe39de12dd351cf
SSDEEP 393216:0QX+OZgV9qR4wHsvrLOe/DLP0LP1V3rHlbF3+c6+r2tF9YH37egf/dgFr91vt:0WnZgVQ7HsvrLOe/DLPwPDzv38F9iLTY
MD5 SHA1 SHA512 SSDEEP

com.xgbuy.xg

com.xgbuy.xg.activities.MainActivity_

com.stub.plugin.Stub01

com.xgbuy.xg.activities.RegisterActivity_

com.xgbuy.xg.activities.LoginActivity_

com.xgbuy.xg.activities.FastAndPwdLoginActivity_

com.xgbuy.xg.activities.PresellActivity_

com.xgbuy.xg.activities.ForgetPasswordActivity_

com.xgbuy.xg.activities.ResetPasswordActivity_

com.xgbuy.xg.activities.AboutusActivity_

com.xgbuy.xg.activities.SettingActivity_

com.xgbuy.xg.activities.PersonalSettingActivity_

com.xgbuy.xg.activities.SuperVIPActivity_

com.xgbuy.xg.activities.ChangePhoneActivity_

com.xgbuy.xg.activities.ChangePwdActivity_

com.xgbuy.xg.activities.FeedbackActivity_

com.xgbuy.xg.activities.AddAdressActivity_

com.xgbuy.xg.activities.AfterServerActivity_

me.iwf.photopicker.PhotoPickerActivity

me.iwf.photopicker.PhotoPagerActivity

com.xgbuy.xg.activities.RefundApplyActivity_

com.xgbuy.xg.activities.EditRefundActivity_

com.xgbuy.xg.activities.ComplainActivity_

com.xgbuy.xg.activities.ComplainQARActivity_

com.xgbuy.xg.activities.NewUserShareActivity_

com.xgbuy.xg.activities.WebActivity_

cn.sharesdk.tencent.qq.ReceiveActivity

android.intent.action.VIEW

com.mob.tools.MobUIShell

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.xgbuy.xg.wxapi.WXEntryActivity

com.xgbuy.xg.wxapi.WXPayEntryActivity

com.xgbuy.xg.activities.UpdatePageActivity_

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.xgbuy.xg.activities.PermissionsActivity

com.xgbuy.xg.activities.MyOrderActivity_

com.xgbuy.xg.activities.BindPhoneActivity_

com.xgbuy.xg.activities.FlashActivity_

android.intent.action.MAIN

com.xgbuy.xg.activities.JupshReceiveActivity_

android.intent.action.VIEW android.intent.action.VIEW

com.xgbuy.xg.activities.HuaweiReceiveActivity_

android.intent.action.VIEW

com.xgbuy.xg.activities.OppoReceiveActivity_

com.xgbuy.xg.activities.OrderDetailActivity_

com.xgbuy.xg.activities.ShowPhotoAcitivity_

com.xgbuy.xg.activities.SureOrderActivity_

com.xgbuy.xg.activities.MessageActivity_

com.xgbuy.xg.activities.LoginNewActivity_

com.xgbuy.xg.activities.SettingPasswordActivity_

com.xgbuy.xg.activities.TestMemoryActivity_

com.xgbuy.xg.activities.ShareAppActivity_

cn.xiaoneng.activity.ChatActivity

cn.xiaoneng.activity.LeaveMsgActivity

cn.xiaoneng.activity.ShowCameraActivity

cn.xiaoneng.activity.ShowAlbumActivity

cn.xiaoneng.activity.ValuationActivity

cn.xiaoneng.activity.ShowPictureActivity

cn.xiaoneng.activity.XNExplorerActivity

cn.xiaoneng.video.VideoPreviewActivity

cn.xiaoneng.video.RecordVideoActivity

cn.xiaoneng.video.XNVideoPlayer

com.xgbuy.xg.activities.TestChatActivity

com.xgbuy.xg.activities.PlatformInterventionActivity_

com.xgbuy.xg.activities.InterventionDetailActivity_

com.xgbuy.xg.activities.MoreConsultContentActivity_

com.xgbuy.xg.activities.LiuYanActivity_

com.xgbuy.xg.activities.AddCommentActivity_

com.xgbuy.xg.activities.MyCommentActivity_

com.xgbuy.xg.activities.AppendCommentActivity_

com.xgbuy.xg.activities.LuckAdrwActivity_

com.xgbuy.xg.activities.ShowHtmlJsonActivity_

com.xgbuy.xg.activities.DepositSureOrderActivity_

com.xgbuy.xg.activities.FragmentShowActivity_

com.xgbuy.xg.activities.RuleActivity_

com.xgbuy.xg.activities.RuleListActivity_

com.xgbuy.xg.activities.TaobaokeActivity_

com.xgbuy.xg.activities.AliTaokeWebViewProxyActivity_

com.xgbuy.xg.activities.UserSafeActivity_

com.xgbuy.xg.activities.CancleUserActivity_

com.xgbuy.xg.activities.CancleConditionActivity_

com.xgbuy.xg.activities.CancleUserResultAcitivty_

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.xgbuy.xg.activities.TaoBaoKeGoodsDetailActivity_

com.xgbuy.xg.activities.MyCenterCustomerServiceActivity_

com.xgbuy.xg.activities.MyCenterGoShoppingActivity_

com.xgbuy.xg.activities.MyCenterPlatformRuleActivity_

com.xgbuy.xg.activities.MechatActivity_

com.xgbuy.xg.activities.ShoppingcarActivity_

com.xgbuy.xg.activities.ProductDetailActivity_

com.xgbuy.xg.activities.CollectActivity_

com.xgbuy.xg.activities.MechatInfoActivity_

com.xgbuy.xg.activities.TrailerItemActivity_

com.xgbuy.xg.activities.MechatSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoSearchActivity_

com.xgbuy.xg.activities.HomeTaobaoListActivity_

com.xgbuy.xg.activities.VerifyPhoneActivity_

com.xgbuy.xg.activities.VerifyWxinActivity_

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.huawei.hms.activity.BridgeActivity

com.vivo.push.sdk.LinkProxyClientActivity

com.alibaba.baichuan.trade.biz.auth.AlibcAuthActivity

com.alibaba.baichuan.android.trade.ui.AlibcWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.baichuan.android.trade.ui.AlibcBackActivity

android.intent.action.VIEW

com.ali.auth.third.ui.webview.BaseWebViewActivity

com.ali.auth.third.ui.LoginWebViewActivity

com.ali.auth.third.ui.LoginActivity

com.ali.auth.third.accountlink.ui.BindResultActivity

com.ali.auth.third.accountlink.ui.UnbindWebViewActivity

com.ali.auth.third.ui.QrLoginConfirmActivity

com.ali.auth.third.ui.QrLoginActivity

com.alibaba.alibclinkpartner.ui.ALPWebviewActivity

com.alibaba.alibclinkpartner.ui.ALPCallbackActivity

com.alibaba.alibclinkpartner.ui.ALPEntranceActivity

com.alibaba.intent.action.GETWAY

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

com.stub.plugin.Stub03

com.xgbuy.xg.receivers.MyReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.xgbuy.xg.receivers.TagandAliasReceiver

cn.jpush.android.intent.RECEIVE_MESSAGE

com.xgbuy.xg.receivers.NetWorkChangReceiver

android.net.conn.CONNECTIVITY_CHANGE android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

cn.jpush.android.service.PluginXiaomiPlatformsReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

cn.jpush.android.service.PluginHuaweiPlatformsReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

cn.jpush.android.service.PluginMeizuPlatformsReceiver

com.meizu.flyme.push.intent.MESSAGE com.meizu.flyme.push.intent.REGISTER.FEEDBACK com.meizu.flyme.push.intent.UNREGISTER.FEEDBACK com.meizu.c2dm.intent.REGISTRATION com.meizu.c2dm.intent.RECEIVE

cn.jpush.android.service.PluginVivoMessageReceiver

com.vivo.pushclient.action.RECEIVE

Android Permissions

a577c7f72912a517c531f122f191e35b_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.INTERNET

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_LOGS

android.permission.CHANGE_NETWORK_STATE

android.permission.NFC

org.simalliance.openmobileapi.SMARTCARD

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.VIBRATE

com.xgbuy.xg.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.xgbuy.xg.permission.MIPUSH_RECEIVE

com.meizu.c2dm.permission.RECEIVE

com.xgbuy.xg.permission.C2D_MESSAGE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.RUN_INSTRUMENTATION

android.permission.READ_SETTINGS

android.permission.CHANGE_CONFIGURATION