ac8f0aeca0a584f4559b8601120d1aac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ac8f0aeca0a584f4559b8601120d1aac_JaffaCakes118
Size 12.8MB
Sample240615-cn9cmszbrp
SHA256 061fdfb94ff22f5582ac1a9a0df137ed06a1371f00e3598a2bd0891cadcac33f
MD5 ac8f0aeca0a584f4559b8601120d1aac
SHA1 173c6dcbf2eb702a476a68591f596f07a5e0d704
SHA512 a02e9a44e3b1217556f9834a2cc73ea6ba0b335575511d9ad529118dfff2ec34e9afb4cda8243a846c946e76a913add9e3f02f541eecb0c56df7fb6be323501a
SSDEEP 393216:SaiA/6ZN+25ANZhZLK+/QqnhGwBQTPah5j:tGNNANZhZP/PAwBEPan
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

File Explorer

ac8f0aeca0a584f4559b8601120d1aac_JaffaCakes118

.apk 12.8MB

ac8f0aeca0a584f4559b8601120d1aac_JaffaCakes118

SHA256 061fdfb94ff22f5582ac1a9a0df137ed06a1371f00e3598a2bd0891cadcac33f
MD5 ac8f0aeca0a584f4559b8601120d1aac
SHA1 173c6dcbf2eb702a476a68591f596f07a5e0d704
SHA512 a02e9a44e3b1217556f9834a2cc73ea6ba0b335575511d9ad529118dfff2ec34e9afb4cda8243a846c946e76a913add9e3f02f541eecb0c56df7fb6be323501a
SSDEEP 393216:SaiA/6ZN+25ANZhZLK+/QqnhGwBQTPah5j:tGNNANZhZP/PAwBEPan
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

org.unionapp.zgfzyr

com.activity.ActivityWelcome

android.intent.action.MAIN

org.unionapp.zgfzyr.MainActivity

com.activity.ActivityMainHome

com.activity.ActivityWeb

com.umeng.socialize.editorpage.ShareActivity

org.unionapp.zgfzyr.wxapi.WXEntryActivity

org.unionapp.zgfzyr.WBShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.connect.common.AssistActivity

cn.jpush.android.ui.PushActivity

org.unionapp.zgfzyr.wxapi.WXPayEntryActivity

com.activity.ActivityImageViewText

com.activity.ActivityTest

com.activity.ActivityLogin

com.activity.ActivityRegister

com.activity.ActivityForgetPassword

com.activity.ActivitySeek

com.activity.ActivityFriendCicleDetail

com.activity.ActivityFriendCiclePublish

com.activity.ActivityImageWebPerview

com.zxing.CaptureActivity

com.activity.ActivityImagePerview

com.activity.MultiImageSelectorActivity

com.activity.ActivityFriendCicleHistory

com.activity.ActivityInformationDetails

com.activity.ActivityImageSingleShow

com.activity.ActivityProductDetail

com.activity.ActivitySearch

com.activity.ActivitySearchEnter

com.activity.ActivityShopClassify

com.activity.ActivityMyCollect

com.activity.ActivityMyMessage

com.activity.ActivityCompany

com.activity.ActivityAddProductMessage

com.activity.ActivityCompanyIntroduce

com.activity.ActivityProductMessage

com.activity.ActivityCompanyContactMy

com.activity.ActivityCompanyIntroduceEdit

com.activity.ActivityProductManage

com.activity.ActivityInformationReply

com.activity.ActivityAddAskToBuy

com.activity.ActivitySelectionSort

com.activity.ActivityAboutApp

com.activity.ActivityFeedBack

com.activity.ActivityAppLetter

com.activity.ActivityProductRelease

com.activity.ActivityAskToBuy

com.activity.ActivityAskToBuyManage

com.activity.ActivityAddAskToBuyARelease

com.activity.ActivityAsToBuyDetail

com.activity.ActivityCompanyPhoto

com.activity.ActivityAskToBuyClassify

com.activity.ActivityClassifyProduct

com.activity.ActivityPersonData

com.activity.ActivitySecondaryClassify

com.activity.ActivityCompanyPhotoPerview

com.activity.ActivityApplyCompany

com.activity.mapactivity.ActivityOverlay

com.rongyun.ConversationListActivity

android.intent.action.VIEW

com.rongyun.ConversationActivity

android.intent.action.VIEW

com.activity.ActivitySetAddressMap

com.activity.ActivitySearchMap

com.activity.ActivityNewsMessage

com.activity.ActivityCircleMessage1

com.activity.ActivitySiteMessageDetail

com.activity.ActivityCategory

com.activity.ActivityUserAgreement

com.activity.ActivityOverlayMap

com.activity.ActivityAsktobuySelectionSort

com.activity.ActivityAdvertisement

com.zxing.ActivityString

com.activity.TestActivity

com.activity.ActivityInformations

com.activity.ActivityAddress

com.activity.ActivityAddressEdit

com.activity.ActivityOrder

com.activity.ActivityConfirmOrder

com.activity.ActivityApplySubmit

com.activity.ActivityLogistics

com.activity.ActivityOrderDetails

com.activity.ActivityInformationsDetails

com.activity.ActivityMywallet

com.activity.ActivityMyTopUp

com.activity.ActivityMyBill

com.activity.ActivityComment

com.activity.ActivityTimelimit

com.activity.ActivityGetCoupon

com.activity.ActivityMyCoupon

com.activity.ActivityHistoryCoupon

com.activity.ActivityMyCommission

com.activity.ActivityMyWithdrawal

com.activity.ActivityProductComment

com.activity.ActivityMyPaymentDetails

com.activity.ActivityMyAddAcount

com.activity.ActivityMySelectAccount

com.activity.ActivityMyWithdrawalsLosgs

com.activity.ActivityMySelectOpenAccount

com.activity.ActivityMyManageAccount

com.activity.ActivityAddStandards

com.activity.ActivityProductManageComment

com.activity.ActivityProductManageCommentReply

com.activity.ActivityProductManageCommentDetail

com.activity.ActivityProductManageCommentList

com.activity.ActivityProductManageNew

com.activity.ActivityProductManageGroupSetting

com.activity.ActivityProductManageGroupProductList

com.activity.ActivityProductManageSearch

com.activity.ActivityOrderManager

com.activity.ActivityOrderManageSearch

com.activity.ActivityOrderManageDetail

com.activity.ActivityOrderDelivery

com.activity.ActivityRefuseRefund

com.activity.ActivitySelectionRegion

com.activity.ActivityPcBackstage

com.activity.ActivityAddProduct

com.activity.ActivityShoppingCar

com.activity.ActivityMyConnection

com.activity.ActivityProductAttributeSet

com.activity.ActivitySelectCoupon

com.activity.ActivityCompanyAdd

com.activity.ActivityShopManagement

com.activity.ActivityMyShopWithdrawal

com.activity.ActivityAddProduCtselectCategory

com.activity.ActivityCompanyNew

com.activity.ActivityFriendCicle

com.activity.ActivityCouponManage

com.activity.ActivityAddNewCoupon

com.activity.ActivityCouponManageDetail

com.activity.ActivityMarketingActivity

com.activity.ActivityFreightTemplate

com.activity.ActivityAddFreightTemplate

com.activity.ActivityAddFreightTemplateSelestCourier

com.activity.ActivityAddActivityProduct

com.activity.ActivityProduct

com.activity.ActivityCategoryProduct

com.activity.ActivityClearCache

com.activity.ActivityAddProducts

com.activity.ActivityProductImageViewText

io.rong.imkit.activity.PictureSelectorActivity

io.rong.imkit.activity.PicturePreviewActivity

io.rong.imkit.tools.RongWebviewActivity

io.rong.imkit.intent.action.webview

io.rong.imkit.widget.provider.TakingPicturesActivity

io.rong.imkit.activity.PicturePagerActivity

Android Permissions

ac8f0aeca0a584f4559b8601120d1aac_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.WAKE_LOCK

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.WRITE_SETTINGS

org.unionapp.zgfzyr.permission.JPUSH_MESSAGE

android.permission.CALL_PHONE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.SET_DEBUG_APP

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

com.android.launcher.permission.READ_SETTINGS

android.permission.GET_TASKS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.VIBRATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CAMERA

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.SEND_SMS

android.permission.READ_CONTACTS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.PROCESS_OUTGOING_CALLS