b3e9794bc717541c6a809f8ac9eefb76_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3e9794bc717541c6a809f8ac9eefb76_JaffaCakes118
Size

31.2MB
MD5

b3e9794bc717541c6a809f8ac9eefb76
SHA1

3a9e55514ec5f7185c07c4c704796bf655781603
SHA256

9e44769c0253e88c3fffcb66c0ea065085e8fce95867b1ea4cf1ebb8784c492f
SHA512

215459802138dc6f18d6f46ce52140a00820295b2468a60267c8a50b68549d22155140e56bb56eb8b8594312b059ad83e4eddaf8c31e202bfc65a9c914417031
SSDEEP

786432:A4PYzsH4nJjUYDY66Jx2vu1aNc0+bE4IVO5lzITpA:7k7jnDY6ewu0Ntp05O6

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

b3e9794bc717541c6a809f8ac9eefb76_JaffaCakes118
.apk android arch:arm arch:mips arch:x86

com.youku.phone

com.youku.phone.ActivityWelcome

Activities

com.youku.phone.ActivityWelcome

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.youku.ui.activity.HomePageActivity

com.youku.ui.activity.HomePageActivity

com.youku.ui.activity.LoginRegistCardViewDialogActivity

com.youku.ui.activity.LoginRegistCardViewDialogActivity

com.youku.ui.activity.DownloadPageActivity

android.intent.action.VIEW

com.youku.hd.subscribe.ui.HdSubscribeActivity

com.youku.action.HdSubscribe

com.youku.hd.subscribe.ui.SubscribeMainActivity

com.youku.action.Subscribe

com.soku.searchsdk.activity.SearchResultActivity

android.intent.action.SEARCH

com.soku.searchsdk.activity.SearchActivity

android.intent.action.SEARCH

com.youku.ui.activity.DetailActivity

com.youku.action.YOUKUDETAIL
android.intent.action.VIEW

com.youku.ui.activity.RecommandActivity

com.youku.ui.activity.RecommandActivity

com.youku.ui.activity.WebViewActivity

com.youku.action.YoukuWebview

com.zijunlin.zxing.CaptureActivity

com.youku.action.QRCODE

com.youku.gamecenter.GameCenterHomeActivity

android.intent.action.VIEW

com.youku.gamecenter.GameDetailsActivity

android.intent.action.VIEW

com.youku.gamecenter.GamePresentDetailsActivity

com.youku.gamecenter.GamePresentDetailsActivity

com.youku.alipay.activity.CallbackActivity

android.intent.action.VIEW

com.alibaba.sdk.android.trade.ui.TradeWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.alibaba.sdk.android.trade.ui.NativeTaobaoClientActivity

android.intent.action.VIEW

com.alipay.mobile.command.trigger.WebViewTrigger

android.intent.action.VIEW

com.youku.phone.collection.activity.MyCollectionsActivity

android.intent.action.VIEW

com.youku.livesdk.LiveListActivity

com.youku.livesdk.LiveListActivity

com.youku.livesdk.LivePlayActivity

com.youku.livesdk.LivePlayActivity
android.intent.action.VIEW

com.youku.uplayerdemo.ZpdLiveActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.youku.subscribechat.SubscribeChat

android.intent.action.VIEW

com.soku.searchsdk.activity.PersonDirectMoreActivity

com.soku.searchsdk.activity.PersonDirectMoreActivity

com.soku.searchsdk.activity.BigWordDirectMoreActivity

com.soku.searchsdk.activity.BigWordDirectMoreActivity

com.soku.searchsdk.activity.ProgramBigWordMoreActivity

com.soku.searchsdk.activity.ProgramBigWordMoreActivity

com.alimama.mobile.sdk.shell.TaeLoginWebView

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

com.youku.userchannel.ShowUserChannel

android.intent.action.VIEW

com.youku.upload.activity.MyUploadVideoPageActivity

android.intent.action.SEND
android.intent.action.VIEW
com.youku.intent.action.UPLOAD

com.youku.community.activity.CommunityActivity

com.youku.community.activity.CommunityActivity

com.youku.community.activity.CommunityHotListActivity

com.youku.community.activity.CommunityHotListActivity

com.youdo.view.DisplayWebView

com.youdo.xadsdk.DisplayWebview

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.RECORD_AUDIO
android.permission.FLASHLIGHT
android.permission.READ_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.READ_EXTERNAL_STORAGE
android.permission.BLUETOOTH
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
com.youku.phone.permission.MIPUSH_RECEIVE
android.permission.GET_ACCOUNTS
android.permission.WRITE_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.MANAGE_DOCUMENTS

Receivers

com.youku.service.download.DownloadReceiver

android.intent.action.DOWNLOAD_TRACKER

com.youku.gamecenter.outer.GamePlayersReceiver

com.youku.gamecenter.outer.action.GET_PACKAGE_VERSION

com.alibaba.sdk.android.hotpatch.HotPatchBroadcastReceiver

com.alibaba.sdk.android.hotpatch.action.HOT_PATCH

com.youku.gamecenter.GameInstallActionReceiver

com.youku.appcenter.action.LAUNCH_APP_INSTALL_ACTION

com.youku.service.push.PushReceiver

com.youku.android.pushsdk.action.MESSAGE

com.youku.pushsdk.receiver.YoukuMyPushServiceReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE

com.youku.pushsdk.receiver.YoukuAppActionReceiver

com.youku.pushsdk.pushservice.ALARM_TICK
com.youku.pushsdk.pushservice.ALARM_DATA_COLLECT

com.youku.phone.PackageChangeReceiver

android.intent.action.PACKAGE_ADDED

com.alipay.mobile.command.trigger.NotifyTrigger

com.alipay.mobile.command.NOTIFY

com.xiaomi.pushsdk.control.MIMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.youku.service.push.LocalPushReceiver

android.intent.action.BOOT_COMPLETED

com.youku.service.push.WakeUpReceiver

com.youku.android.pushsdk.action.WAKEUP_NORMAL
com.youku.android.pushsdk.action.WAKEUP_VALIDATE

com.youku.service.web.WebReceiver

com.youku.pushsdk.pushservice.ALARM_TICK
com.youku.android.pushsdk.action.WAKEUP_NORMAL
com.youku.android.pushsdk.action.WAKEUP_VALIDATE

com.youku.service.login.LoginReceiver

com.youku.action.LOGIN
com.youku.action.LOGOUT
com.youku.action.LOGIN_BIND

Services

org.openudid.OpenUDID_service

org.openudid.GETUDID

com.youku.pushsdk.service.PushService

com.youku.pushsdk.pushservice.START_PUSH_SERVICE
com.youku.pushsdk.pushservice.BASE_DATA
com.youku.pushsdk.pushservice.EVENT_DATA
com.youku.pushsdk.pushservice.ACTION_PUSH_SWITCH_CHANGE
com.youku.pushsdk.pushservice.ACTION_NET_CHANGE
com.youku.pushsdk.pushservice.ACTION_COLLECT_DATA
com.youku.pushsdk.pushservice.PUSH_STATE
com.youku.pushsdk.pushservice.FRIEND

com.youku.multiscreensdk.client.api.AutoSilenceSetupService

com.youku.multiscreensdk.start_sddp_search
com.youku.multiscreensdk.stop_sddp_search

com.alimama.mobile.sdk.shell.DownloadingService

com.alimama.mobile.sdk.download.action

com.youku.service.authentication.AuthenticatorService

android.accounts.AccountAuthenticator

com.youku.service.authentication.SyncService

android.content.SyncAdapter
CommonPlugin-2.6.apk
.apk android

com.taobao.munion.plugin.cm

com.taobao.newxp.view.UMDetail

Activities

com.taobao.tae.sdk.ui.TradeWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.CALL_PHONE

Services
FrameworkPlugin-2.5.apk
.apk android

com.example.bizplugin

Android Permissions

b3e9794bc717541c6a809f8ac9eefb76_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.GET_TASKS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.READ_EXTERNAL_STORAGE

android.permission.BLUETOOTH

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

com.youku.phone.permission.MIPUSH_RECEIVE

android.permission.GET_ACCOUNTS

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.MANAGE_DOCUMENTS

Sharing

General

Malware Config

Signatures

Files

com.youku.phone

com.youku.phone.ActivityWelcome

Activities

com.youku.phone.ActivityWelcome

com.youku.ui.activity.HomePageActivity

com.youku.ui.activity.LoginRegistCardViewDialogActivity

com.youku.ui.activity.DownloadPageActivity

com.youku.hd.subscribe.ui.HdSubscribeActivity

com.youku.hd.subscribe.ui.SubscribeMainActivity

com.soku.searchsdk.activity.SearchResultActivity

com.soku.searchsdk.activity.SearchActivity

com.youku.ui.activity.DetailActivity

com.youku.ui.activity.RecommandActivity

com.youku.ui.activity.WebViewActivity

com.zijunlin.zxing.CaptureActivity

com.youku.gamecenter.GameCenterHomeActivity

com.youku.gamecenter.GameDetailsActivity

com.youku.gamecenter.GamePresentDetailsActivity

com.youku.alipay.activity.CallbackActivity

com.alibaba.sdk.android.trade.ui.TradeWebViewActivity

com.alibaba.sdk.android.trade.ui.NativeTaobaoClientActivity

com.alipay.mobile.command.trigger.WebViewTrigger

com.youku.phone.collection.activity.MyCollectionsActivity

com.youku.livesdk.LiveListActivity

com.youku.livesdk.LivePlayActivity

com.youku.uplayerdemo.ZpdLiveActivity

com.youku.subscribechat.SubscribeChat

com.soku.searchsdk.activity.PersonDirectMoreActivity

com.soku.searchsdk.activity.BigWordDirectMoreActivity

com.soku.searchsdk.activity.ProgramBigWordMoreActivity

com.alimama.mobile.sdk.shell.TaeLoginWebView

com.youku.userchannel.ShowUserChannel

com.youku.upload.activity.MyUploadVideoPageActivity

com.youku.community.activity.CommunityActivity

com.youku.community.activity.CommunityHotListActivity

com.youdo.view.DisplayWebView

Permissions

Receivers

com.youku.service.download.DownloadReceiver

com.youku.gamecenter.outer.GamePlayersReceiver

com.alibaba.sdk.android.hotpatch.HotPatchBroadcastReceiver

com.youku.gamecenter.GameInstallActionReceiver

com.youku.service.push.PushReceiver

com.youku.pushsdk.receiver.YoukuMyPushServiceReceiver

com.youku.pushsdk.receiver.YoukuAppActionReceiver

com.youku.phone.PackageChangeReceiver

com.alipay.mobile.command.trigger.NotifyTrigger

com.xiaomi.pushsdk.control.MIMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.youku.service.push.LocalPushReceiver

com.youku.service.push.WakeUpReceiver

com.youku.service.web.WebReceiver

com.youku.service.login.LoginReceiver

Services

org.openudid.OpenUDID_service

com.youku.pushsdk.service.PushService

com.youku.multiscreensdk.client.api.AutoSilenceSetupService

com.alimama.mobile.sdk.shell.DownloadingService

com.youku.service.authentication.AuthenticatorService

com.youku.service.authentication.SyncService

com.taobao.munion.plugin.cm

com.taobao.newxp.view.UMDetail

Activities

com.taobao.tae.sdk.ui.TradeWebViewActivity

Permissions

Services

com.example.bizplugin

Android Permissions

b3e9794bc717541c6a809f8ac9eefb76_JaffaCakes118