General

  • Target

    aac19e47f5f50df1950a9c49b997d601_JaffaCakes118

  • Size

    31.4MB

  • MD5

    aac19e47f5f50df1950a9c49b997d601

  • SHA1

    848a1dbc63f4215172fb4706fd7dd3eba3e97761

  • SHA256

    1fd9811ee3647fe50ceee8f98cabdcdcdb768b0f0fb122f75ff827507cd4e000

  • SHA512

    cb42868ebbc6220790c940ec953e7fb3e7a1e828cc8fd22d4ef7e11940ad11b71c9fd2e623779dcd0e9948f4bc44a654b01f75399f12a4393fa2fb6129c69be3

  • SSDEEP

    786432:eca/7Y/3m2MGRi6rbmGdbVHCkMxsUX/dazg3wtx591NdUYqmvjnsa:eL/7Y/d73PPdbMxBXIzg3Ivb4TmjP

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 12 IoCs

Files

  • aac19e47f5f50df1950a9c49b997d601_JaffaCakes118
    .apk android arch:arm

    com.xunlei.cloud

    com.xunlei.downloadprovider.launch.LaunchActivity


  • __xadsdk__remote__final__.jar
    .apk android
  • bdxadsdk.jar
    .apk android
  • gdtadv2.jar
    .apk android arch:arm arch:arm64

Android Permissions

aac19e47f5f50df1950a9c49b997d601_JaffaCakes118

Permissions

com.xiaomi.permission.AUTH_SERVICE

android.permission.GET_ACCOUNTS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.browser.permission.READ_HISTORY_BOOKMARKS

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.miui.mihome2.permission.READ_SETTINGS

com.miui.mihome2.permission.WRITE_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

android.permission.READ_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SYSTEM_OVERLAY_WINDOW

android.permission.CAMERA

android.permission.RESTART_PACKAGES

android.permission.GET_TASKS

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_COARSE_LOCATION

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.ACCESS_FINE_LOCATION

android.permission.BATTERY_STATS

android.permission.PACKAGE_USAGE_STATS

android.permission.DISABLE_KEYGUARD

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.READ_EXTERNAL_STORAGE

android.permission.EXPAND_STATUS_BAR

android.permission.INTERACT_ACROSS_USERS

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED