b81e50fd2a08730a8f490e56eff9c1e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b81e50fd2a08730a8f490e56eff9c1e0_JaffaCakes118
Size

16.7MB
MD5

b81e50fd2a08730a8f490e56eff9c1e0
SHA1

6f7648d8fb8ee96f09d7cb54b25aff91a0240e8f
SHA256

a1b0b6057ad4b59f02be0478cd78f0c357a1dc17949a52956bcf101e5c6476ad
SHA512

309a0c9d0b6d4b954235eaa4478af3260584a8f25cb312694e3e5a30c39ad56d3b329dad4bf5e96333fc0d7c9fc8fa489c6d36c90ba63b3715ba159c0d0856df
SSDEEP

393216:xVeIx/oOjMms3WreD3ucIcHXCS3xpJyy/qGCk4pvkp3MfK:7eajdreD3u6RhpJTyGepS

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

b81e50fd2a08730a8f490e56eff9c1e0_JaffaCakes118
.apk android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.kanchufang.privatedoctor

com.kanchufang.privatedoctor.activities.StartActivity

Activities

cn.jpush.android.ui.PushActivity

cn.jpush.android.ui.PushActivity

com.kanchufang.privatedoctor.activities.StartActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.chat.impl.SupportChatActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.patient.article.EducationResourceActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.patient.article.ResourceCentreActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.main.MainActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.main.activity.event.normal.ScheduleEventAddActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.verify.commonverify.VerifyActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.patient.addpatient.AddPatientActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.main.activity.DoctorCirclePublishFormActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.setting.main.SettingActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.main.activity.event.calendar.CalendarScheduleEventActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.setting.privacy.SettingPrivacyActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.ClinicPlanActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.main.activity.event.followuptemplate.FollowUpTemplateAddActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.doctorcircle.DoctorCircleActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.doctor.add.main.DoctorFriendAddMainActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.doctor.add.serial.ViewDoctorInfoActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.chat.impl.FriendChatActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.chat.impl.GroupChatActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.doctor.publicaccount.PublicAccountActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.setting.trialservice.mode.TrialServiceModeActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.secret.secretintro.SecretIntroActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.common.invite.CommonInviteActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.referral.ReferralMainActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.main.activity.webcommon.doctorletter.ALetterToDoctorWebActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.common.articleshare.ShareFromWebActivity

android.intent.action.SEND

com.kanchufang.privatedoctor.activities.template.FollowUpVisitTemplateActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.template.mytemplate.MyFollowUpTemplateActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.doctor.fragment.allfriend.groupchat.DoctorFriendGroupChatActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.setting.trialservice.main.TrialServiceMainActivity

android.intent.action.VIEW

com.xingren.hippo.ui.controls.camera.CameraActivity

android.intent.action.com.xingren.hippo.cameras

com.kanchufang.privatedoctor.activities.me.MeActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.patient.chat.PatientChatActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.department.DepartCircleActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.department.DepartSettingPrivacyActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.department.DepartCirclePublishFormActivity

android.intent.action.VIEW

com.xingren.hippo.utils.WeiboShareActivity

com.sina.weibo.sdk.action.ACTION_SDK_REQ_ACTIVITY

com.kanchufang.privatedoctor.utd.UTDMainActivity

android.intent.action.VIEW

com.kanchufang.privatedoctor.activities.cert.AuthorizeActivity

android.intent.action.VIEW

Permissions

com.kanchufang.privatedoctor.permission.JPUSH_MESSAGE
android.permission.RECEIVE_USER_PRESENT
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.VIBRATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CALL_PHONE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.RECORD_AUDIO
android.permission.WRITE_SETTINGS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.CAMERA
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_CONTACTS
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_CONFIGURATION
android.permission.SEND_SMS
android.permission.RECEIVE_SMS

Receivers

com.kanchufang.privatedoctor.view.MyReceiver

cn.jpush.android.intent.MESSAGE_RECEIVED
cn.jpush.android.intent.NOTIFICATION_OPENED

cn.jpush.android.service.PushReceiver

com.kanchufang.privatedoctor.ignore

com.kanchufang.privatedoctor.receiver.CustomPushReceiver

cn.jpush.android.intent.NOTIFICATION_RECEIVED
cn.jpush.android.intent.NOTIFICATION_RECEIVED_PROXY
android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.kanchufang.privatedoctor.network.websocket.WSStatusReceiver

com.xingren.hippo.ACTION_WEBSOCKET_CONNECTION_UPDATE

com.kanchufang.privatedoctor.receiver.BootReceiver

android.intent.action.BOOT_COMPLETED

com.kanchufang.privatedoctor.receiver.NetWorkStateReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.kanchufang.privatedoctor.receiver.AlarmReceiver

com.kanchufang.ACTION_SERVICE_SYNC

com.kanchufang.privatedoctor.receiver.AlertReceiver

com.kanchufang.ACTION_ALERT

com.kanchufang.privatedoctor.receiver.DownloadCompleteReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.tencent.base.os.clock.AlarmClockReceiver

wns.heartbeat

Services

cn.jpush.android.service.PushService

cn.jpush.android.intent.REGISTER
cn.jpush.android.intent.REPORT
cn.jpush.android.intent.PushService
cn.jpush.android.intent.PUSH_TIME

com.kanchufang.privatedoctor.network.websocket.WebSocketService

com.kanchufang.privatedoctor.service.WebSocketService.ACTION_OPEN
com.kanchufang.privatedoctor.service.WebSocketService.ACTION_CLOSE
com.kanchufang.privatedoctor.service.WebSocketService.ACTION_SEND_HEART_BEAT

com.tencent.wns.service.WnsMain

com.tencent.wns.service.WnsMain

Android Permissions

b81e50fd2a08730a8f490e56eff9c1e0_JaffaCakes118

Permissions

com.kanchufang.privatedoctor.permission.JPUSH_MESSAGE

android.permission.RECEIVE_USER_PRESENT

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.VIBRATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CALL_PHONE

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.RECORD_AUDIO

android.permission.WRITE_SETTINGS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.CAMERA

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_CONFIGURATION

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

Sharing

General

Malware Config

Signatures

Files

com.kanchufang.privatedoctor

com.kanchufang.privatedoctor.activities.StartActivity

Activities

cn.jpush.android.ui.PushActivity

com.kanchufang.privatedoctor.activities.StartActivity

com.kanchufang.privatedoctor.activities.chat.impl.SupportChatActivity

com.kanchufang.privatedoctor.activities.patient.article.EducationResourceActivity

com.kanchufang.privatedoctor.activities.patient.article.ResourceCentreActivity

com.kanchufang.privatedoctor.activities.main.MainActivity

com.kanchufang.privatedoctor.main.activity.event.normal.ScheduleEventAddActivity

com.kanchufang.privatedoctor.activities.verify.commonverify.VerifyActivity

com.kanchufang.privatedoctor.activities.patient.addpatient.AddPatientActivity

com.kanchufang.privatedoctor.main.activity.DoctorCirclePublishFormActivity

com.kanchufang.privatedoctor.activities.setting.main.SettingActivity

com.kanchufang.privatedoctor.main.activity.event.calendar.CalendarScheduleEventActivity

com.kanchufang.privatedoctor.activities.setting.privacy.SettingPrivacyActivity

com.kanchufang.privatedoctor.activities.ClinicPlanActivity

com.kanchufang.privatedoctor.main.activity.event.followuptemplate.FollowUpTemplateAddActivity

com.kanchufang.privatedoctor.activities.doctorcircle.DoctorCircleActivity

com.kanchufang.privatedoctor.activities.doctor.add.main.DoctorFriendAddMainActivity

com.kanchufang.privatedoctor.activities.doctor.add.serial.ViewDoctorInfoActivity

com.kanchufang.privatedoctor.activities.chat.impl.FriendChatActivity

com.kanchufang.privatedoctor.activities.chat.impl.GroupChatActivity

com.kanchufang.privatedoctor.activities.doctor.publicaccount.PublicAccountActivity

com.kanchufang.privatedoctor.activities.setting.trialservice.mode.TrialServiceModeActivity

com.kanchufang.privatedoctor.activities.secret.secretintro.SecretIntroActivity

com.kanchufang.privatedoctor.activities.common.invite.CommonInviteActivity

com.kanchufang.privatedoctor.activities.referral.ReferralMainActivity

com.kanchufang.privatedoctor.main.activity.webcommon.doctorletter.ALetterToDoctorWebActivity

com.kanchufang.privatedoctor.activities.common.articleshare.ShareFromWebActivity

com.kanchufang.privatedoctor.activities.template.FollowUpVisitTemplateActivity

com.kanchufang.privatedoctor.activities.template.mytemplate.MyFollowUpTemplateActivity

com.kanchufang.privatedoctor.activities.doctor.fragment.allfriend.groupchat.DoctorFriendGroupChatActivity

com.kanchufang.privatedoctor.activities.setting.trialservice.main.TrialServiceMainActivity

com.xingren.hippo.ui.controls.camera.CameraActivity

com.kanchufang.privatedoctor.activities.me.MeActivity

com.kanchufang.privatedoctor.activities.patient.chat.PatientChatActivity

com.kanchufang.privatedoctor.activities.department.DepartCircleActivity

com.kanchufang.privatedoctor.activities.department.DepartSettingPrivacyActivity

com.kanchufang.privatedoctor.activities.department.DepartCirclePublishFormActivity

com.xingren.hippo.utils.WeiboShareActivity

com.kanchufang.privatedoctor.utd.UTDMainActivity

com.kanchufang.privatedoctor.activities.cert.AuthorizeActivity

Permissions

Receivers

com.kanchufang.privatedoctor.view.MyReceiver

cn.jpush.android.service.PushReceiver

com.kanchufang.privatedoctor.receiver.CustomPushReceiver

com.kanchufang.privatedoctor.network.websocket.WSStatusReceiver

com.kanchufang.privatedoctor.receiver.BootReceiver

com.kanchufang.privatedoctor.receiver.NetWorkStateReceiver

com.kanchufang.privatedoctor.receiver.AlarmReceiver

com.kanchufang.privatedoctor.receiver.AlertReceiver

com.kanchufang.privatedoctor.receiver.DownloadCompleteReceiver

com.tencent.base.os.clock.AlarmClockReceiver

Services

cn.jpush.android.service.PushService

com.kanchufang.privatedoctor.network.websocket.WebSocketService

com.tencent.wns.service.WnsMain

Android Permissions

b81e50fd2a08730a8f490e56eff9c1e0_JaffaCakes118