af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

General

Target
af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118
Size 31.8MB
Sample240615-vs627ascjq
SHA256 e9d7ef3b4b3dca3ed96e8d07102b4bd0875379954ae61f14e2f3ae3684bb507d
MD5 af82fd00d312dee6c1c589f57e14c30b
SHA1 1624d1acee0ff14a11045d406ef8e21bb5d7d8ce
SHA512 cf606672ce4d7fe72e5c79be7b41653e1c056688627463627023797521793b451ce3928dcf32dd8df52b8bd9385389a20b5f5a3887fcecf515e72de00f39aca6
SSDEEP 786432:SRmz8UQf4U1klrkNwQusBQNliMSw7WX5gNHXf0i0CrOrY3zT0QFa/3EuEJJx:StBQUor4wQqlQwCatXfapk30QFa/OLx
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

File Explorer

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

.apk 31.8MB

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

SHA256 e9d7ef3b4b3dca3ed96e8d07102b4bd0875379954ae61f14e2f3ae3684bb507d
MD5 af82fd00d312dee6c1c589f57e14c30b
SHA1 1624d1acee0ff14a11045d406ef8e21bb5d7d8ce
SHA512 cf606672ce4d7fe72e5c79be7b41653e1c056688627463627023797521793b451ce3928dcf32dd8df52b8bd9385389a20b5f5a3887fcecf515e72de00f39aca6
SSDEEP 786432:SRmz8UQf4U1klrkNwQusBQNliMSw7WX5gNHXf0i0CrOrY3zT0QFa/3EuEJJx:StBQUor4wQqlQwCatXfapk30QFa/OLx
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:mips64 arch:mips arch:x86 arch:x64

com.linglingyi.lly

Android Permissions

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.RECORD_AUDIO

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.INTERNET

android.permission.CALL_PHONE

android.permission.VIBRATE

android.permission.CAMERA

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

com.linglingyi.lly.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.WRITE_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CHANGE_NETWORK_STATE

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

com.linglingyi.lly.MainActivity

com.linglingyi.lly.radio.PLAudioPlayerActivity

com.linglingyi.lly.AppLoadingActivity

com.linglingyi.lly.AppScrollActivity

com.linglingyi.lly.video.VideoActivity

com.linglingyi.lly.wxapi.WXEntryActivity

com.linglingyi.lly.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.yalantis.ucrop.UCropActivity

cn.jpush.android.ui.PushActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

cn.jpush.android.ui.PopWinActivity

com.linglingyi.latte.lly.utils.CheckNewVersionService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.DownloadService

com.linglingyi.lly.radio.service.RadioPlaybackService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.linglingyi.lly.push.PushReceiver

android.support.v4.content.FileProvider

Sharing

General

Malware Config

Signatures

File Explorer

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118

com.linglingyi.lly.MainActivity

com.linglingyi.lly.radio.PLAudioPlayerActivity

com.linglingyi.lly.AppLoadingActivity

com.linglingyi.lly.AppScrollActivity

com.linglingyi.lly.video.VideoActivity

com.linglingyi.lly.wxapi.WXEntryActivity

com.linglingyi.lly.wxapi.WXPayEntryActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.auth.AuthActivity

com.tencent.tauth.AuthActivity

com.tencent.connect.common.AssistActivity

com.yalantis.ucrop.UCropActivity

cn.jpush.android.ui.PushActivity

com.sina.weibo.sdk.web.WeiboSdkWebActivity

com.sina.weibo.sdk.share.WbShareTransActivity

com.sina.weibo.sdk.share.WbShareToStoryActivity

cn.jpush.android.ui.PopWinActivity

com.linglingyi.latte.lly.utils.CheckNewVersionService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

cn.jpush.android.service.DownloadService

com.linglingyi.lly.radio.service.RadioPlaybackService

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.linglingyi.lly.push.PushReceiver

android.support.v4.content.FileProvider

Android Permissions

af82fd00d312dee6c1c589f57e14c30b_JaffaCakes118