abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118
Size 9.2MB
Sample240614-2cndgasdln
SHA256 0645e802edf9fe53abac0763a36d5ef15dc65647b7705be8660b753e92e1474e
MD5 abc17a9f74487c0d0f56999d511f0c8e
SHA1 9891ce6b802858230aa5876ff62eeec10b2d6881
SHA512 3bb359709fc0f84d106959c693165f60c7d4b8005177043739805447c49f5ce0a782baedcd563f18dfbccf22bd9d5a0991667ca2e604990f854e141b83391986
SSDEEP 196608:tGgTg5Wn5W0WpWsWp2OH1W8v/sC/rO9pXN0rF:8gU5S5rSNu2OH1lXsw2p6R
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 45 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA

File Explorer

abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118

.apk 9.2MB
49gamebox.apk

.apk 2.0MB

abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118

SHA256 0645e802edf9fe53abac0763a36d5ef15dc65647b7705be8660b753e92e1474e
MD5 abc17a9f74487c0d0f56999d511f0c8e
SHA1 9891ce6b802858230aa5876ff62eeec10b2d6881
SHA512 3bb359709fc0f84d106959c693165f60c7d4b8005177043739805447c49f5ce0a782baedcd563f18dfbccf22bd9d5a0991667ca2e604990f854e141b83391986
SSDEEP 196608:tGgTg5Wn5W0WpWsWp2OH1W8v/sC/rO9pXN0rF:8gU5S5rSNu2OH1lXsw2p6R
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.sj49jdxy.com

android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.GET_TASKS android.permission.SYSTEM_ALERT_WINDOW android.permission.SEND_SMS android.permission.VIBRATE android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNET android.permission.CALL_PHONE android.permission.SEND_SMS android.permission.READ_SMS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.REORDER_TASKS android.permission.READ_PHONE_STATE android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_NETWORK_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.READ_LOGS android.permission.WAKE_LOCK android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_SMS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.CALL_PHONE android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.REORDER_TASKS android.permission.RECEIVE_BOOT_COMPLETED android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE org.simalliance.openmobileapi.SMARTCARD android.permission.NFC android.permission.GET_TASKS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.READ_CALL_LOG android.permission.READ_CONTACTS android.permission.READ_SMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.BLUETOOTH android.permission.CAMERA android.permission.SYSTEM_ALERT_WINDOW android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_SMS android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.CALL_PHONE android.permission.SEND_SMS android.permission.WRITE_SMS android.permission.GET_TASKS android.permission.REORDER_TASKS android.permission.RECEIVE_BOOT_COMPLETED android.permission.CHANGE_NETWORK_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.INTERNET android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE org.simalliance.openmobileapi.SMARTCARD android.permission.NFC android.permission.GET_TASKS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.READ_CALL_LOG android.permission.READ_CONTACTS android.permission.READ_SMS android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.BLUETOOTH android.permission.CAMERA

49gamebox.apk

SHA256 c9221fe59a9b2639b839f7aab9191c9964f8bf723f612ab8970f1d4cb2dbbc43
MD5 7089d84112a732cf488c3b356c1fd6be
SHA1 a804f49f1a1fbc64bd39f9a5740c44b143b38b01
SHA512 3435452c4461a147bb6e07ee34439cb671f5b527bc114c46e8251aaba3e3073eed8feb24d85bdecf71e7199dc80efcc7ab7183114809d1f3daf6ce96e005d6ba
SSDEEP 49152:Pgeldmgm9rUgeziu4SNplsX5X8peyg57HES:PgeP3geVNX05spTgVkS
MD5 SHA1 SHA512 SSDEEP

android arch:x86 arch:mips arch:arm

com.sijiu.gamebox

Android Permissions

abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SEND_SMS

android.permission.VIBRATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_LOGS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_SMS

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CALL_PHONE

android.permission.SEND_SMS

android.permission.WRITE_SMS

android.permission.GET_TASKS

android.permission.REORDER_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERNET

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

abc17a9f74487c0d0f56999d511f0c8e_JaffaCakes118

com.h5.activity.FlashActivity

com.h5.activity.MainActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.vsofo.vpaysmszf.MActivity_vpaysmszf

com.sijiu7.component.LoginAcivity

com.sijiu7.component.PaymentActivity

com.sijiu7.component.UserActicity

com.sijiu.blend.component.LoginAcivity

com.sijiu.blend.component.BlendPluginActivity

com.sijiu.blend.component.UserActicity

com.sijiu.rh.component.NoticeActivity

com.switfpass.pay.activity.QQWapPayWebView

com.ipaynow.wechatpay.plugin.inner_plugin.wechat_plugin.activity.WeChatNotifyActivity

com.unionpay.uppay.PayActivity

com.unionpay.UPPayWapActivity

com.joyspay.pay.PayActivity

com.sijiu7.component.FloatViewService

com.sijiu.blend.component.FloatViewService

com.joyspay.pay.YywhfNotifyService

com.joyspay.pay.DownloadService

49gamebox.apk

com.sijiu.gamebox.activity.WelcomeActivity

com.sijiu.gamebox.MainActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.sijiu.gamebox.wxapi.WXEntryActivity

com.sijiu.gamebox.wxapi.WXPayEntryActivity

com.sijiu.gamebox.activity.LoginActivity

com.sijiu.gamebox.activity.ShortCutActivity

sj.tj.dl.engine.SdkActivity

com.tao.engine.download.DlService

sj.tj.dl.engine.SdkService

com.sj.guidesdk.sdk.GuideService

com.tencent.mid.api.MidProvider