ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118
Size 29.7MB
Sample240614-zfcd9syerr
SHA256 92d1d4e2e92048e71d630c17d795a378a0d4567e6e4221db86c2cf58c2ebb93d
MD5 ab5a7c76b65d2c44ce197377630616b0
SHA1 a849fbe68c8104a0d2788d0d0e9d1701c436aa2c
SHA512 e5eace2e06b940e622f9bd303b571744a796ee59ed1bfc12a39684fbb7644cbf585f82b0de41aae1935bd73edf45b286da5a4336091ab1ec1a9692f07cc25407
SSDEEP 786432:SlWF2wQ3n2MPaJ2pOWlUvXWez2ylEpAVCC0KAYq2AJX:OBn2MiJ2pOWSvXWe6GE3C0KtDE
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

File Explorer

ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118

.apk 29.7MB
AdServer.apk

.apk 1.1MB
analytics_core.apk

.apk 159KB
bdxadsdk.jar

.apk 437KB
gdtadv2.jar

.apk 622KB

ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118

SHA256 92d1d4e2e92048e71d630c17d795a378a0d4567e6e4221db86c2cf58c2ebb93d
MD5 ab5a7c76b65d2c44ce197377630616b0
SHA1 a849fbe68c8104a0d2788d0d0e9d1701c436aa2c
SHA512 e5eace2e06b940e622f9bd303b571744a796ee59ed1bfc12a39684fbb7644cbf585f82b0de41aae1935bd73edf45b286da5a4336091ab1ec1a9692f07cc25407
SSDEEP 786432:SlWF2wQ3n2MPaJ2pOWlUvXWez2ylEpAVCC0KAYq2AJX:OBn2MiJ2pOWSvXWe6GE3C0KtDE
MD5 SHA1 SHA512 SSDEEP

android arch:arm

dopool.player

android.permission.READ_PHONE_STATE android.permission.CALL_PHONE android.permission.PROCESS_OUTGOING_CALLS android.permission.CAMERA android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.READ_SMS android.permission.SEND_SMS android.permission.WRITE_CONTACTS android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR android.permission.RECORD_AUDIO android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.KILL_BACKGROUND_PROCESSES android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.REQUEST_INSTALL_PACKAGES android.permission.CHANGE_WIFI_STATE android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.FOREGROUND_SERVICE android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.GET_TASKS android.permission.MODIFY_AUDIO_SETTINGS com.android.launcher.permission.READ_SETTINGS android.permission.WAKE_LOCK android.permission.VIBRATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECEIVE_USER_PRESENT android.permission.CHANGE_NETWORK_STATE android.permission.DISABLE_KEYGUARD android.permission.SYSTEM_ALERT_WINDOW android.permission.INSTALL_SHORTCUT android.permission.UNINSTALL_SHORTCUT android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.CHANGE_CONFIGURATION android.permission.WRITE_SETTINGS android.permission.PACKAGE_USAGE_STATS android.permission.BATTERY_STATS android.permission.MANAGE_USERS android.permission.READ_LOGS getui.permission.GetuiService.dopool.player dopool.player.permission.MIPUSH_RECEIVE com.android.launcher.permission.WRITE_SETTINGS android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

com.dopool.module_login.view.LoginActivity

com.cmic.sso.sdk.activity.OAuthActivity

com.cmic.sso.sdk.activity.BufferActivity

com.cmic.sso.sdk.activity.LoginAuthActivity

com.dopool.module_main.view.activity.MainActivity

com.dopool.module_my.view.activities.SwitchChannelActivity

com.dopool.module_my.view.activities.ReservationActivity

com.dopool.module_my.view.activities.FeedBackActivity

com.dopool.module_my.view.activities.VideoDownloadActivity

com.dopool.module_my.view.activities.FavoriteActivity

com.dopool.module_my.view.activities.PhoneBindActivity

com.dopool.module_my.view.activities.UserProfileActivity

com.dopool.module_my.view.activities.VideoHistoryActivity

com.dopool.module_my.view.activities.AboutActivity

com.dopool.module_my.view.activities.SettingActivity

com.dopool.module_my.view.activities.NetTestActivity

com.dopool.module_my.view.activities.UserProtocalActivity

com.dopool.module_splash.view.splash.activity.SplashActivity

android.intent.action.MAIN android.intent.action.VIEW

com.dopool.module_splash.view.splash.activity.Splash2Activity

com.dopool.module_splash.view.guide.activity.GuideActivity

com.dopool.module_home_page.view.channelsort.ChannelSortActivity

com.dopool.search.activities.SearchActivity

com.dopool.module_vip.view.activity.PurchaseVideoPackageActivity

com.dopool.module_vip.view.activity.PurchaseVipActivity

com.dopool.module_vip.view.activity.ExchangeVipActivity

com.dopool.module_play.play.donwloader.activities.DownloadResultActivity

com.dopool.module_play.play.donwloader.activities.DownloadActivity

com.dopool.module_play.play.dlna.activities.DLNAListActivity

com.dopool.module_play.play.view.PlayActivity

android.intent.action.VIEW

com.dopool.module_play.play.view.WebPlayActivity

com.dopool.module_play.play.view.activities.InputActivity

com.dopool.module_live.view.morestation.MoreTvStationDetailActivity

com.dopool.module_live.view.morestation.MoreTvStationListActivity

com.dopool.module_base_component.ui.activity.videolib.CommonVideoLibActivity

com.dopool.module_base_component.ui.activity.menupage.CommonPageActivity

com.dopool.module_base_component.ui.activity.webview.CommonWebviewActivity

com.umeng.socialize.media.WBShareCallBackActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

dopool.player.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

com.baidu.mobads.AppActivity

com.baidu.mobad.feeds.BaiduActivity

com.inmobi.rendering.InMobiAdActivity

com.qq.e.ads.ADActivity

com.qq.e.ads.PortraitADActivity

com.qq.e.ads.LandscapeADActivity

com.xiaomi.ad.AdActivity

com.lehoolive.ad.view.WebViewAdActivity

com.alipay.sdk.auth.AuthActivity

com.alipay.android.app.sdk.WapPayActivity

com.alipay.sdk.app.H5PayActivity

dopool.player.wxapi.WXPayEntryActivity

android.intent.action.VIEW

com.snmi.sdk_3.ac.HsActivity

app.intent.tag

com.sdkui.cn.smlibrary.ui.activity.ListenDetailListActivity

com.sdkui.cn.smlibrary.ui.activity.PlayShowActivity

com.sdkui.cn.smlibrary.ui.activity.ADDetailListActivity

com.snmi.sdk.SMADPage

com.snmi.sdk.PopADActivity

com.sdkui.cn.smlibrary.ui.activity.WebADActivity

com.sdkui.cn.smlibrary.ui.activity.TestActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

android.intent.action.VIEW

com.lehoolive.ad.debug.activities.AdConfigActivity

com.lehoolive.ad.debug.activities.DebugTransitionActivity

debug.debugTransitionActivity

com.baidu.mobads.production.rewardvideo.MobRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageActivity

com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity

com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity

com.bytedance.sdk.openadsdk.activity.TTDelegateActivity

com.ss.android.socialbase.appdownloader.view.DownloadSizeLimitActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.downloadlib.activity.TTDelegateActivity

com.duiba.tuia.sdk.AdActivity

fm.qingting.qtsdk.auth.QTAuthActivity

fm.qingting.qtsdk.pay.QTPayActivity

com.bugtags.library.BugtagsActivity

com.igexin.sdk.PushActivity

com.igexin.sdk.GActivity

com.dopool.module_base_component.service.push.pushplatform.PushGeTuiService

com.dopool.module_base_component.service.initdata.DataService

com.starschina.sdk.dlna.service.DLNAService

com.starschina.sdk.dlna.service.ClingUpnpService

com.inmobi.ads.ApkDownloader$ApkDownloadService

com.qq.e.comm.DownloadService

com.dopool.common.init.push.PushInitService

com.lehoolive.ad.debug.services.AdDebugService

com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService

com.ss.android.socialbase.downloader.notification.DownloadNotificationService

com.ss.android.socialbase.downloader.downloader.DownloadService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.ss.android.socialbase.downloader.impls.DownloadHandleService

com.ss.android.socialbase.appdownloader.DownloadHandlerService

com.duiba.tuia.sdk.TuiaService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

fm.qingting.qtsdk.play.QtPlayerService

com.bugtags.library.BugtagsService

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.liulishuo.filedownloader.services.FileDownloadService$SharedMainProcessService

com.liulishuo.filedownloader.services.FileDownloadService$SeparateProcessService

com.dopool.module_base_component.broadcast.PushBroadCastReceiver

intent.action.PUSH_DATA dopool.player.push.project

com.dopool.module_base_component.play.ReserveReceiver

dopool.player.reserve_4.0 dopool.player.reserve_received

com.inmobi.commons.core.utilities.uid.ImIdShareBroadCastReceiver

com.inmobi.share.id

com.snmi.sdk.download.DataDownLoadReceiver

android.intent.action.DOWNLOAD_COMPLETE

com.snmi.sdk.download.DataInstallReceiver

android.intent.action.PACKAGE_ADDED android.intent.action.PACKAGE_REMOVED android.intent.action.PACKAGE_REPLACED

com.ss.android.downloadlib.core.download.DownloadReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

com.bugtags.library.BugtagsReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.igexin.sdk.PushReceiver

android.intent.action.BOOT_COMPLETED android.net.conn.CONNECTIVITY_CHANGE android.intent.action.USER_PRESENT com.igexin.sdk.action.refreshls android.intent.action.MEDIA_MOUNTED android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

analytics_core.apk

SHA256 77060ad812f5e6e9e896c39bc548f8295238eaa9941e1986e8e024e7d2114309
MD5 d2e90bb505f20fc73baf25805b0273aa
SHA1 240fbbfda194a65761baed6f3546bc4c744a1850
SHA512 c2ef3f79b6cfb171b0904ff8138238cbf985344d91d6d9ec35472d14233d1b108cc0234259e8286cbb099747cc8d9d2f74c8c7394ab3a6dcfc2cc95e168c8c85
SSDEEP 3072:/vnDHScqJUCqi8p27PhJkqOjvxSWnNoPuKAaSWk8V4rpCPd7H7sl3eX0emR7KDD:7ScaCioePDaZdnNdFDJCPJoKvmtiD
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm

com.miui.analytics

Android Permissions

ab5a7c76b65d2c44ce197377630616b0_JaffaCakes118

Permissions

android.permission.READ_PHONE_STATE

android.permission.CALL_PHONE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.CAMERA

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.WRITE_CONTACTS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.RECORD_AUDIO

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.CHANGE_WIFI_STATE

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.FOREGROUND_SERVICE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.GET_TASKS

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_USER_PRESENT

android.permission.CHANGE_NETWORK_STATE

android.permission.DISABLE_KEYGUARD

android.permission.SYSTEM_ALERT_WINDOW

android.permission.INSTALL_SHORTCUT

android.permission.UNINSTALL_SHORTCUT

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.CHANGE_CONFIGURATION

android.permission.WRITE_SETTINGS

android.permission.PACKAGE_USAGE_STATS

android.permission.BATTERY_STATS

android.permission.MANAGE_USERS

android.permission.READ_LOGS

getui.permission.GetuiService.dopool.player

dopool.player.permission.MIPUSH_RECEIVE

com.android.launcher.permission.WRITE_SETTINGS

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION