b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

Reason

could not process APK: checksum verification failed

General

Target
b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118
Size 2.9MB
Sample240617-hxdvzstcmp
SHA256 9cb27a45cd414dd4016f25d49fcf1223027c150e06ea254151afdda9ed80a553
MD5 b74d99ebe9af2cf9cc0f84f47fddb815
SHA1 d081e4523b4f1eaa4fd2b07211b6b563745f5aaf
SHA512 6a6c899bafb2a76ef60085a6128918d28e17bd2469f649df5bcf7b0ac15ae1743e51765f9d976465064dc1e4342db8a55c0994f57cddf14cfad3e1c3fd35c926
SSDEEP 49152:yebEoRR/+UXgZNvxEDKJ84INrIQ7UDa6+We718RRvyyRvy0WrS:JEe+UsoKRINp+a6e18nJ0S
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

File Explorer

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

.apk 2.9MB
com.newpay.spsdk.smspay.zfmgsdk.apk

.apk 95KB
com.skymobi.pay.plugin.main_v10015.pl

.apk 59KB
com.skymobi.pay.plugin.recordupload_v10009.pl

.apk 39KB
com.skymobi.pay.plugin.smspay_v10039.pl

.apk 248KB
skymobi_pay_wxplugin.apk

.apk 33KB
unicom_resource.dat

.apk 64KB

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

SHA256 9cb27a45cd414dd4016f25d49fcf1223027c150e06ea254151afdda9ed80a553
MD5 b74d99ebe9af2cf9cc0f84f47fddb815
SHA1 d081e4523b4f1eaa4fd2b07211b6b563745f5aaf
SHA512 6a6c899bafb2a76ef60085a6128918d28e17bd2469f649df5bcf7b0ac15ae1743e51765f9d976465064dc1e4342db8a55c0994f57cddf14cfad3e1c3fd35c926
SSDEEP 49152:yebEoRR/+UXgZNvxEDKJ84INrIQ7UDa6+We718RRvyyRvy0WrS:JEe+UsoKRINp+a6e18nJ0S
MD5 SHA1 SHA512 SSDEEP

android arch:arm arch:x86

aaBbO.hQhmsK.DYWN

android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.READ_PHONE_STATE android.permission.ACCESS_NETWORK_STATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_WIFI_STATE android.permission.RECEIVE_BOOT_COMPLETED android.permission.VIBRATE android.permission.SEND_SMS android.permission.READ_SMS android.permission.WRITE_SMS android.permission.RECEIVE_SMS android.permission.CHANGE_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.GET_TASKS android.permission.WAKE_LOCK android.permission.READ_LOGS android.permission.WRITE_APN_SETTINGS android.permission.SYSTEM_ALERT_WINDOW android.permission.WRITE_SETTINGS android.permission.BLUETOOTH com.android.launcher.permission.INSTALL_SHORTCUT android.permission.RESTART_PACKAGES android.permission.GET_ACCOUNTS com.android.launcher.permission.READ_SETTINGS android.permission.DISABLE_KEYGUARD android.permission.RECEIVE_WAP_PUSH android.permission.READ_CONTACTS android.permission.CHANGE_CONFIGURATION android.permission.RUN_INSTRUMENTATION android.webkit.permission.PLUGIN com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher2.permission.WRITE_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.android.launcher3.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.WRITE_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.WRITE_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS org.adw.launcher_donut.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.sec.android.app.twlauncher.settings.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.tencent.qqlauncher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.android.mylauncher.permission.WRITE_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS com.lenovo.launcher.permission.READ_SETTINGS com.lenovo.launcher.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS telecom.mdesk.permission.READ_SETTINGS telecom.mdesk.permission.WRITE_SETTINGS dianxin.permission.ACCESS_LAUNCHER_DATA android.permission.REQUEST_INSTALL_PACKAGES android.permission.SYSTEM_ALERT_WINDOW android.permission.GET_TASKS android.permission.CALL_PHONE android.permission.WAKE_LOCK android.permission.DOWNLOAD_WITHOUT_NOTIFICATION android.permission.READ_CALL_LOG android.permission.READ_CONTACTS android.permission.CHANGE_CONFIGURATION android.permission.RUN_INSTRUMENTATION android.permission.UPDATE_APP_OPS_STATS

Android Permissions

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_SMS

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.GET_TASKS

android.permission.WAKE_LOCK

android.permission.READ_LOGS

android.permission.WRITE_APN_SETTINGS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

com.android.launcher.permission.READ_SETTINGS

android.permission.DISABLE_KEYGUARD

android.permission.RECEIVE_WAP_PUSH

android.permission.READ_CONTACTS

android.permission.CHANGE_CONFIGURATION

android.permission.RUN_INSTRUMENTATION

android.webkit.permission.PLUGIN

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.android.launcher2.permission.READ_SETTINGS

com.android.launcher2.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.qihoo360.launcher.permission.READ_SETTINGS

com.qihoo360.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

net.qihoo.launcher.permission.READ_SETTINGS

net.qihoo.launcher.permission.WRITE_SETTINGS

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

com.hpidpn.unvpvl.LoadActivity

com.hpidpn.unvpvl.ScrollableTabHost

com.hpidpn.unvpvl.SelectActivity

com.hpidpn.unvpvl.PlayVideoActivity

com.hpidpn.unvpvl.HejuActivity

com.yyiap.activity.PaymentActivity

com.ehoo.tasks.other.PayResultActivity

com.skymobi.pay.sdk.normal.zimon.EpsActivity

com.unicom.wostore.unipay.paysecurity.SecurityActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.PrePayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.NotifyActivity

com.unionpay.uppay.PayActivityEx

com.alipay.sdk.auth.AuthActivity

com.unionpay.uppay.PayActivity

com.switfpass.pay.activity.QQWapPayWebView

com.sdky.lyr.srvi.DrdSrvi

com.skpay.dk.TpService

com.hpidpn.unvpvl.SpService

com.yyiap.services.HttpIntentService

com.yyiap.services.PayServer

com.yy.safe.sdk.api.MyService

com.ehoo.sms.receiver.SMSReceiveService

com.skymobi.pay.sdk.normal.zimon.EpsService

com.skymobi.pay.sdk.normal.zimon.sms.PayCtrlService

com.skymobi.pay.sdk.normal.zimon.sms.SkyPayRemoteService

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

sdk.pay.TaskService

com.ehoo.sms.receiver.BootReceiver

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

sdk.pay.TaskReceiver

com.android.sdk.t3.XRReceiver

com.newpay.spsdk.smspay.zfmgsdk.apk

com.skymobi.pay.plugin.main_v10015.pl

com.skymobi.pay.plugin.recordupload_v10009.pl

com.skymobi.pay.plugin.smspay_v10039.pl

skymobi_pay_wxplugin.apk

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

unicom_resource.dat

Sharing

Errors

General

Malware Config

Signatures

File Explorer

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118

com.hpidpn.unvpvl.LoadActivity

com.hpidpn.unvpvl.ScrollableTabHost

com.hpidpn.unvpvl.SelectActivity

com.hpidpn.unvpvl.PlayVideoActivity

com.hpidpn.unvpvl.HejuActivity

com.yyiap.activity.PaymentActivity

com.ehoo.tasks.other.PayResultActivity

com.skymobi.pay.sdk.normal.zimon.EpsActivity

com.unicom.wostore.unipay.paysecurity.SecurityActivity

com.alipay.sdk.app.H5PayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.PrePayActivity

com.ipaynow.plugin.inner_plugin.prepay_plugin.activity.NotifyActivity

com.unionpay.uppay.PayActivityEx

com.alipay.sdk.auth.AuthActivity

com.unionpay.uppay.PayActivity

com.switfpass.pay.activity.QQWapPayWebView

com.sdky.lyr.srvi.DrdSrvi

com.skpay.dk.TpService

com.hpidpn.unvpvl.SpService

com.yyiap.services.HttpIntentService

com.yyiap.services.PayServer

com.yy.safe.sdk.api.MyService

com.ehoo.sms.receiver.SMSReceiveService

com.skymobi.pay.sdk.normal.zimon.EpsService

com.skymobi.pay.sdk.normal.zimon.sms.PayCtrlService

com.skymobi.pay.sdk.normal.zimon.sms.SkyPayRemoteService

com.unicom.wostore.unipay.paysecurity.SecurityServiceFramework

sdk.pay.TaskService

com.ehoo.sms.receiver.BootReceiver

com.skymobi.pay.sdk.normal.zimon.EpsReceiver

sdk.pay.TaskReceiver

com.android.sdk.t3.XRReceiver

com.newpay.spsdk.smspay.zfmgsdk.apk

com.skymobi.pay.plugin.main_v10015.pl

com.skymobi.pay.plugin.recordupload_v10009.pl

com.skymobi.pay.plugin.smspay_v10039.pl

skymobi_pay_wxplugin.apk

com.skymobi.pay.wxplugin.wxapi.WXPayEntryActivity

unicom_resource.dat

Android Permissions

b74d99ebe9af2cf9cc0f84f47fddb815_JaffaCakes118