aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

General

Target
aa9649c2a6631af7dff133c5068669e4_JaffaCakes118
Size 26.0MB
Sample240614-tkatca1fkk
SHA256 a62db5be627862026153b9a393a176c8fa060dff132134dde8dc195854f18fc6
MD5 aa9649c2a6631af7dff133c5068669e4
SHA1 fa4de8f44540bac0f358b4fc70cc10054f292091
SHA512 101f5e443a389a2c73aa80f710151173641c96f23de90a3a3571a7eaf9ca92b915635de7ea3e6fb7d276a6bf00cd1826d14271dcef322dc8d2ed66c4b42c366b
SSDEEP 393216:23DSHEkITI9aF5sPpNslSPK2UOlew/sVtOp8trJ8gMkORkIS+qB7Y52C:23DSHZ25UAZolg7dBOA4V
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 7 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

File Explorer

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

.apk 26.0MB
blmvoice_for_assets.jar

.apk 239KB

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

SHA256 a62db5be627862026153b9a393a176c8fa060dff132134dde8dc195854f18fc6
MD5 aa9649c2a6631af7dff133c5068669e4
SHA1 fa4de8f44540bac0f358b4fc70cc10054f292091
SHA512 101f5e443a389a2c73aa80f710151173641c96f23de90a3a3571a7eaf9ca92b915635de7ea3e6fb7d276a6bf00cd1826d14271dcef322dc8d2ed66c4b42c366b
SSDEEP 393216:23DSHEkITI9aF5sPpNslSPK2UOlew/sVtOp8trJ8gMkORkIS+qB7Y52C:23DSHZ25UAZolg7dBOA4V
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.changsha.dumiqipai

Android Permissions

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

Permissions

android.permission.VIBRATE

android.permission.INTERNET

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RESTART_PACKAGES

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RECORD_AUDIO

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

.wxapi.WXEntryActivity

org.cocos2dx.javascript.AppActivity

com.pg.im.sdk.lib.VioceService

blmvoice_for_assets.jar

Sharing

General

Malware Config

Signatures

File Explorer

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118

.wxapi.WXEntryActivity

org.cocos2dx.javascript.AppActivity

com.pg.im.sdk.lib.VioceService

blmvoice_for_assets.jar

Android Permissions

aa9649c2a6631af7dff133c5068669e4_JaffaCakes118