b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

General

Target
b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118
Size 10.7MB
Sample240617-bbgana1brk
SHA256 c60c09e1dd770e38c778c9b058cbe9e76c64db27ed8acc50a149754da82bc851
MD5 b611a62b5554ba34a686d346b6fba7ce
SHA1 168dbf81a0fe96115573962728f4729ee692de9c
SHA512 337ee543a05246c85ad66350ad49d1b63d7c568408f6dc7c62f970a878f745e5b3c1252e4184f490f86f11961c54aeda4b29fc575b5c7dc593ca838b7a05c54f
SSDEEP 196608:3XOhek2aeJO0muZR1pZo5/XKZ4sIC0IvLKd9T5HBEqxChBkAC:3XOhek2a103Tm/1Yc1lBE8ChKAC
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

File Explorer

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

.apk 10.7MB

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

SHA256 c60c09e1dd770e38c778c9b058cbe9e76c64db27ed8acc50a149754da82bc851
MD5 b611a62b5554ba34a686d346b6fba7ce
SHA1 168dbf81a0fe96115573962728f4729ee692de9c
SHA512 337ee543a05246c85ad66350ad49d1b63d7c568408f6dc7c62f970a878f745e5b3c1252e4184f490f86f11961c54aeda4b29fc575b5c7dc593ca838b7a05c54f
SSDEEP 196608:3XOhek2aeJO0muZR1pZo5/XKZ4sIC0IvLKd9T5HBEqxChBkAC:3XOhek2a103Tm/1Yc1lBE8ChKAC
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.sky.xiaoqiang

Android Permissions

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

Permissions

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.ACCESS_COARSE_LOCATION

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

com.sky.xiaoqiang.Xiaoqiang

net.youmi.android.AdBrowser

cn.sharesdk.framework.ShareSDKUIShell

.wxapi.WXEntryActivity

com.ktplay.activity.GetPhotoActivity

net.umipay.android.UmipayBrowser

com.unionpay.uppay.PayActivityEx

com.unionpay.uppay.PayActivity

com.google.android.gms.ads.AdActivity

net.umipay.android.poll.Push_Poll_service

net.umipay.android.poll.SmsReceiverService

net.youmi.android.AdService

net.youmi.android.ExpService

net.umipay.android.poll.Push_Boot_Receiver

net.umipay.android.poll.Push_Alarm_Receiver

com.amazon.inapp.purchasing.ResponseReceiver

net.youmi.android.AdReceiver

net.youmi.android.offers.OffersReceiver

Sharing

General

Malware Config

Signatures

File Explorer

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118

com.sky.xiaoqiang.Xiaoqiang

net.youmi.android.AdBrowser

cn.sharesdk.framework.ShareSDKUIShell

.wxapi.WXEntryActivity

com.ktplay.activity.GetPhotoActivity

net.umipay.android.UmipayBrowser

com.unionpay.uppay.PayActivityEx

com.unionpay.uppay.PayActivity

com.google.android.gms.ads.AdActivity

net.umipay.android.poll.Push_Poll_service

net.umipay.android.poll.SmsReceiverService

net.youmi.android.AdService

net.youmi.android.ExpService

net.umipay.android.poll.Push_Boot_Receiver

net.umipay.android.poll.Push_Alarm_Receiver

com.amazon.inapp.purchasing.ResponseReceiver

net.youmi.android.AdReceiver

net.youmi.android.offers.OffersReceiver

Android Permissions

b611a62b5554ba34a686d346b6fba7ce_JaffaCakes118