a6018ff9527e22cd2effbc12aaa51601_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a6018ff9527e22cd2effbc12aaa51601_JaffaCakes118
Size 30.6MB
Sample240613-rq4bqsseqd
SHA256 b2686dc9279e5309c40650883eea736ffee276d3bbdee2b4a0684e03c9dbe962
MD5 a6018ff9527e22cd2effbc12aaa51601
SHA1 373822e640b9db96f95b68e63d2e0e1b5584fe3e
SHA512 1d7e7389746790957e897d8f912bf50e09b6ea4b2840d846012dbf644b9f93c9a5b9fad6a25b0bd13234bbfae77eab3a314b79fd733e36e6d2548ce038de2f12
SSDEEP 786432:IJrXor1cnP2FPQV8gwhB0TssLRsV5gnh6z0GhH767dH:uk22hQO7ULOVanhnaHW9
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 15 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

File Explorer

a6018ff9527e22cd2effbc12aaa51601_JaffaCakes118

.apk 30.6MB

a6018ff9527e22cd2effbc12aaa51601_JaffaCakes118

SHA256 b2686dc9279e5309c40650883eea736ffee276d3bbdee2b4a0684e03c9dbe962
MD5 a6018ff9527e22cd2effbc12aaa51601
SHA1 373822e640b9db96f95b68e63d2e0e1b5584fe3e
SHA512 1d7e7389746790957e897d8f912bf50e09b6ea4b2840d846012dbf644b9f93c9a5b9fad6a25b0bd13234bbfae77eab3a314b79fd733e36e6d2548ce038de2f12
SSDEEP 786432:IJrXor1cnP2FPQV8gwhB0TssLRsV5gnh6z0GhH767dH:uk22hQO7ULOVanhnaHW9
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

com.fg_shaoke

com.fg_shaoke.ui.activity.MainActivity

com.fg_shaoke.ui.activity.GuidePagesActivity

android.intent.action.MAIN android.intent.action.VIEW

com.fg_shaoke.ui.activity.WebViewActivity

com.fg_shaoke.ui.activity.ScanActivity

com.fg_shaoke.ui.activity.activity.ActivityListActivity

com.fg_shaoke.ui.activity.activity.ActivityDetailActivity

com.fg_shaoke.ui.activity.login.LoginActivity

com.fg_shaoke.ui.activity.course.CourseDetailActivity

com.fg_shaoke.ui.activity.activity.ActivityEnrollActivity

com.fg_shaoke.ui.activity.activity.ActivityAllEnrollActivity

com.fg_shaoke.ui.activity.activity.ActivityAllReplyActivity

com.fg_shaoke.ui.activity.organization.OrganizationRedPacketActivity

com.fg_shaoke.ui.activity.train.SelectRedPacketListActivity

com.fg_shaoke.ui.activity.match.MatchListActivity

com.fg_shaoke.ui.activity.train.TrainActivity

com.fg_shaoke.ui.activity.mine.MyCommentsListActivity

com.fg_shaoke.ui.activity.mine.MyRedPacketActivity

com.fg_shaoke.ui.activity.match.MatchInfoActivity

com.fg_shaoke.ui.activity.activity.ActiveOrderListActivity

com.fg_shaoke.ui.activity.train.TrainBusinessListActivity

com.fg_shaoke.ui.activity.family.MyFamilyListActivity

com.fg_shaoke.ui.activity.family.AddParentActivity

com.fg_shaoke.ui.activity.train.TrainBusinessDetailActivity

com.fg_shaoke.ui.activity.train.TrainTeacherListActivity

com.fg_shaoke.ui.activity.train.TrainCourseListActivity

com.fg_shaoke.ui.activity.train.TrainCourseDetailActivity

com.fg_shaoke.ui.activity.train.TrainCommendListActivity

com.fg_shaoke.ui.activity.match.MatchEntryActivity

com.fg_shaoke.ui.activity.family.AddChildrenActivity

com.fg_shaoke.ui.activity.mine.MyWalletActivity

com.fg_shaoke.ui.activity.match.MatchOrderListActivity

com.fg_shaoke.ui.activity.train.OrgCourseOrderListActivity

com.fg_shaoke.ui.activity.match.MatchOrderInfoActivity

com.fg_shaoke.ui.activity.mine.NicknameActivity

com.fg_shaoke.ui.activity.train.TrainCourseEnrollActivity

com.fg_shaoke.ui.activity.train.TrainCourseOrderDetailActivity

com.fg_shaoke.ui.activity.train.TrainAllClassifyActivity

com.fg_shaoke.ui.activity.match.MatchMoreReplyListActivity

com.fg_shaoke.ui.activity.mine.MyCollectionActivity

com.fg_shaoke.ui.activity.train.TrainAdBusinessListActivity

com.fg_shaoke.ui.activity.AgainMatisseActivity

com.fg_shaoke.ui.activity.activity.ContentViewActivity

com.fg_shaoke.ui.activity.activity.ContentTabViewActivity

com.fg_shaoke.ui.activity.match.MatchAdmissionTicketActivity

com.fg_shaoke.ui.activity.mine.SignatureActivity

com.fg_shaoke.ui.activity.ClipImageActivity

com.fg_shaoke.ui.activity.community.CommunityRecordActivity

com.fg_shaoke.ui.activity.community.ComminitySearchActivity

com.fg_shaoke.ui.activity.mine.CommunityPersonalCenterActivity

com.fg_shaoke.ui.activity.community.CommunityOriginalDetailActivity

com.fg_shaoke.ui.activity.community.CommunityRetWeetDetailActivity

com.fg_shaoke.ui.activity.community.AllReplyActivity

com.fg_shaoke.ui.activity.community.TorwardActivity

com.fg_shaoke.ui.activity.seting.SeetingActivity

com.fg_shaoke.ui.activity.seting.PersonalInformationActivity

com.fg_shaoke.ui.activity.activity.ConversationActivity

android.intent.action.VIEW

com.fg_shaoke.wxapi.WXPayEntryActivity

com.fg_shaoke.wxapi.OrderPayActivity

com.fg_shaoke.wxapi.WXEntryActivity

com.fg_shaoke.ui.activity.activity.ActivityOrderInfoActivity

com.fg_shaoke.ui.activity.activity.SelectActivitySceneActivity

com.fg_shaoke.ui.activity.community.AddTopicActivity

com.fg_shaoke.ui.activity.community.AddLocationActivity

com.fg_shaoke.ui.activity.community.SubmitDynamicActivity

com.fg_shaoke.ui.activity.community.SubmitArticleActivity

com.fg_shaoke.ui.activity.community.ArticleDetailsActivity

com.fg_shaoke.ui.activity.match.MatchPlanActivity

com.fg_shaoke.ui.activity.match.SelectMatchSceneActivity

com.fg_shaoke.ui.activity.H5RouseActivity

com.fg_shaoke.ui.activity.train.TrainBusinessInfoActivity

com.fg_shaoke.ui.activity.mine.MyFollowListActivity

com.fg_shaoke.ui.activity.mine.MyCommuntiyCollecitonActivity

com.fg_shaoke.ui.activity.refund.RefundDetailsActivity

com.fg_shaoke.ui.activity.refund.RefundReasonActivity

com.huawei.hms.activity.BridgeActivity

com.huawei.android.hms.agent.common.HMSAgentActivity

com.fg_shaoke.ui.activity.map.MapActivity

com.fg_shaoke.ui.activity.message.MessageDetailsActivity

com.fg_shaoke.ui.activity.image.ImagePagerActivity

io.rong.imkit.plugin.location.AMapLocationActivity

io.rong.imkit.plugin.location.AMapLocationActivity2D

io.rong.imkit.plugin.location.AMapPreviewActivity

io.rong.imkit.plugin.location.AMapPreviewActivity2D

io.rong.imkit.plugin.location.AMapRealTimeActivity

io.rong.imkit.plugin.location.AMapRealTimeActivity2D

io.rong.imkit.plugin.location.SearchLocationActivity

io.rong.imkit.plugin.image.PictureSelectorActivity

io.rong.imkit.plugin.image.PicturePreviewActivity

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.widget.provider.TakingPicturesActivity

io.rong.imkit.activity.PicturePagerActivity

io.rong.imkit.intent.action.picturepagerview

io.rong.imkit.mention.MemberMentionedActivity

io.rong.imkit.activity.FileManagerActivity

io.rong.imkit.activity.FileListActivity

io.rong.imkit.activity.FilePreviewActivity

io.rong.imkit.intent.action.openfile

io.rong.imkit.activity.CSLeaveMessageActivity

com.SuperKotlin.pictureviewer.ImagePagerActivity

com.soundcloud.android.crop.CropImageActivity

com.darsh.multipleimageselect.activities.AlbumSelectActivity

com.darsh.multipleimageselect.activities.ImageSelectActivity

com.github.dfqin.grantor.PermissionActivity

com.zhihu.matisse.ui.MatisseActivity

com.zhihu.matisse.internal.ui.AlbumPreviewActivity

com.zhihu.matisse.internal.ui.SelectedPreviewActivity

com.just.agentweb.ActionActivity

cn.jpush.android.ui.PopWinActivity

cn.jpush.android.ui.PushActivity

com.fg_shaoke.receiver.JPushReceiver

cn.jpush.android.intent.REGISTRATION cn.jpush.android.intent.MESSAGE_RECEIVED cn.jpush.android.intent.NOTIFICATION_RECEIVED cn.jpush.android.intent.NOTIFICATION_OPENED cn.jpush.android.intent.CONNECTION

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

io.rong.push.platform.mi.MiMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE com.xiaomi.mipush.MESSAGE_ARRIVED com.xiaomi.mipush.ERROR

com.fg_shaoke.receiver.RongMessageReceiver

io.rong.push.intent.MESSAGE_ARRIVED io.rong.push.intent.MESSAGE_CLICKED io.rong.push.intent.THIRD_PARTY_PUSH_STATE

io.rong.push.platform.hms.HMSReceiver

com.huawei.android.push.intent.REGISTRATION com.huawei.android.push.intent.RECEIVE com.huawei.android.push.intent.CLICK com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

io.rong.imlib.ConnectChangeReceiver

io.rong.imlib.HeartbeatReceiver

io.rong.push.rongpush.PushReceiver

io.rong.push.intent.action.HEART_BEAT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

cn.jpush.android.service.PushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY android.intent.action.USER_PRESENT android.net.conn.CONNECTIVITY_CHANGE android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED

cn.jpush.android.service.AlarmReceiver

Android Permissions

a6018ff9527e22cd2effbc12aaa51601_JaffaCakes118

Permissions

android.permission.READ_LOGS

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.CAMERA

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CALL_PHONE

android.permission.FLASHLIGHT

android.permission.RECORD_AUDIO

android.permission.RECORD_VIDEO

android.permission.WAKE_LOCK

com.fg_shaoke.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SETTINGS

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

com.fg_shaoke.permission.MIPUSH_RECEIVE

com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_AUDIO_SETTINGS