a5830587d4873b74a9b8b98762194520_JaffaCakes118

General

Target
a5830587d4873b74a9b8b98762194520_JaffaCakes118
Size 435KB
Sample240613-pkbcnasepq
SHA256 dfd4bdadfb301e1a6901dd4f5aa59f021662c13c06d10b1e9f8360ac04a60779
MD5 a5830587d4873b74a9b8b98762194520
SHA1 5ba33a6a5dc2cf29b0a1313dfe10c04601226e01
SHA512 3178cf7863f5a155052f10acbfda1995822f4c788b1ad1eee6ebf64150f5205d437c2e970ede7b60d6263e87fcb2f705032f0cba0cf3e6a3176f80a714686731
SSDEEP 6144:hqm2Iafoq3mrf61V6fpL0tIAhs8E+SSwfO85l+rUY9OEGwsZ4+Ri0c/NL6Ftv8XZ:B61Z1+Ahs8uSwW00bMe+Ri0c/MFtEXZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

a5830587d4873b74a9b8b98762194520_JaffaCakes118

.apk 435KB

a5830587d4873b74a9b8b98762194520_JaffaCakes118

SHA256 dfd4bdadfb301e1a6901dd4f5aa59f021662c13c06d10b1e9f8360ac04a60779
MD5 a5830587d4873b74a9b8b98762194520
SHA1 5ba33a6a5dc2cf29b0a1313dfe10c04601226e01
SHA512 3178cf7863f5a155052f10acbfda1995822f4c788b1ad1eee6ebf64150f5205d437c2e970ede7b60d6263e87fcb2f705032f0cba0cf3e6a3176f80a714686731
SSDEEP 6144:hqm2Iafoq3mrf61V6fpL0tIAhs8E+SSwfO85l+rUY9OEGwsZ4+Ri0c/NL6Ftv8XZ:B61Z1+Ahs8uSwW00bMe+Ri0c/MFtEXZ
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.yxxinglin.xzid419785

Android Permissions

a5830587d4873b74a9b8b98762194520_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.DISABLE_KEYGUARD

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.WRITE_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RESTART_PACKAGES

com.android.launcher.permission.READ_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.GET_TASKS

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERACT_ACROSS_USERS_FULL

a5830587d4873b74a9b8b98762194520_JaffaCakes118

com.oozhushou.activity.WelcomeActivity

com.oozhushou.activity.MainActivity

com.oozhushou.activity.WebViewActivity

com.oozhushou.activity.MoreActivity

com.oozhushou.activity.AboutActivity

com.oozhushou.activity.FeedbackActivity

com.oozhushou.activity.MyGameActivity

com.oozhushou.activity.PluginActivity

com.oozhushou.activity.ToolsActivity

com.oozhushou.activity.HistoryListActivity

com.oozhushou.activity.HistoryDetailActivity

com.oozhushou.activity.AppOrPlgDetailActivity

com.oozhushou.activity.CommonPluginCfgActivity

com.oozhushou.HHLoaderService2

com.oozhushou.HHLoaderService

com.oozhushou.eventreceiver.DownloadAllVerReceiver

com.oozhushou.eventreceiver.ApkInstallOrUnInstallReceiver

Sharing

General

Malware Config

Signatures

File Explorer

a5830587d4873b74a9b8b98762194520_JaffaCakes118

com.oozhushou.activity.WelcomeActivity

com.oozhushou.activity.MainActivity

com.oozhushou.activity.WebViewActivity

com.oozhushou.activity.MoreActivity

com.oozhushou.activity.AboutActivity

com.oozhushou.activity.FeedbackActivity

com.oozhushou.activity.MyGameActivity

com.oozhushou.activity.PluginActivity

com.oozhushou.activity.ToolsActivity

com.oozhushou.activity.HistoryListActivity

com.oozhushou.activity.HistoryDetailActivity

com.oozhushou.activity.AppOrPlgDetailActivity

com.oozhushou.activity.CommonPluginCfgActivity

com.oozhushou.HHLoaderService2

com.oozhushou.HHLoaderService

com.oozhushou.eventreceiver.DownloadAllVerReceiver

com.oozhushou.eventreceiver.ApkInstallOrUnInstallReceiver

Android Permissions

a5830587d4873b74a9b8b98762194520_JaffaCakes118