a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118
Size 30.6MB
Sample240613-qfl42azfmc
SHA256 19e1fd0b845ea534caf0b3c8a603fa8c1fb0881e9f242e7118b1de605970e06c
MD5 a5b6c7004b2b217f08af4250e28af0f4
SHA1 206120b7a6beba5f7b745833ed8cff5f28511cc7
SHA512 ccdab910ce6394d8e68ddf7515f02f30b6d2da5f600e3bc29c1d1923b7ba93ec9b04b69028ef708990dcd060b560551e608dbce41c5c5442d0963d5d2177a4a8
SSDEEP 786432:2K69FyhO8ogopb0TkFI8TZooYC7znkTkjW1eZUvdj93hWHkLGmT:2Pn6lFkF9dlYC7zi6W1eZUfgEr
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

File Explorer

a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118

.apk 30.6MB

a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118

SHA256 19e1fd0b845ea534caf0b3c8a603fa8c1fb0881e9f242e7118b1de605970e06c
MD5 a5b6c7004b2b217f08af4250e28af0f4
SHA1 206120b7a6beba5f7b745833ed8cff5f28511cc7
SHA512 ccdab910ce6394d8e68ddf7515f02f30b6d2da5f600e3bc29c1d1923b7ba93ec9b04b69028ef708990dcd060b560551e608dbce41c5c5442d0963d5d2177a4a8
SSDEEP 786432:2K69FyhO8ogopb0TkFI8TZooYC7znkTkjW1eZUvdj93hWHkLGmT:2Pn6lFkF9dlYC7zi6W1eZUfgEr
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.wisdomgarden.trpc

com.wisdomgarden.trpc.MainActivity

android.intent.action.MAIN

com.wg.tronclass.activities.VideoPlayerActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.google.zxing.client.android.CaptureActivity

com.google.zxing.client.android.encode.EncodeActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.ipaulpro.afilechooser.FileChooserActivity

android.intent.action.GET_CONTENT

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.sina.weibo.sdk.register.mobile.MobileRegisterActivity

com.sina.weibo.sdk.register.mobile.SelectCountryActivity

org.zy.yuancheng.weibo.YCWeiboShareCallback

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXEntryActivity

android.intent.action.VIEW

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

android.intent.action.VIEW

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

Android Permissions

a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CHANGE_WIFI_STATE

android.permission.RECORD_VIDEO

android.permission.CAMERA

android.permission.FLASHLIGHT

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.VIBRATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.wisdomgarden.trpc.permission.JPUSH_MESSAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WAKE_LOCK

Sharing

General

Malware Config

Signatures

File Explorer

a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118

com.wisdomgarden.trpc.MainActivity

com.wg.tronclass.activities.VideoPlayerActivity

com.tencent.tauth.AuthActivity

com.google.zxing.client.android.CaptureActivity

com.google.zxing.client.android.encode.EncodeActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.ipaulpro.afilechooser.FileChooserActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.tencent.connect.common.AssistActivity

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.sina.weibo.sdk.register.mobile.MobileRegisterActivity

com.sina.weibo.sdk.register.mobile.SelectCountryActivity

org.zy.yuancheng.weibo.YCWeiboShareCallback

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

com.wisdomgarden.trpc.wxapi.WXEntryActivity

com.wisdomgarden.trpc.wxapi.WXPayEntryActivity

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PopWinActivity

com.baidu.location.f

com.sina.weibo.sdk.net.DownloadService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.PushReceiver

cn.jiguang.cordova.push.MyReceiver

cn.jpush.android.service.AlarmReceiver

com.crypho.localstorage.LocalStorageProvider

com.crashlytics.android.CrashlyticsInitProvider

Android Permissions

a5b6c7004b2b217f08af4250e28af0f4_JaffaCakes118