bba367a7b0717a629f10afaedda34708_JaffaCakes118

Sharing

Copy URL Twitter E-mail

Reason

could not process APK: zip: not a valid zip file

General

Target
bba367a7b0717a629f10afaedda34708_JaffaCakes118
Size 13.4MB
Sample240618-nctcts1cpg
SHA256 7ce1f44aa82ec9771593698b0415eb0e5dc5df6d3cc111f9cb50ce308eee9c1b
MD5 bba367a7b0717a629f10afaedda34708
SHA1 fc7e107212e3a9494d5061bb1647f6ea6ef90cae
SHA512 f69919bae3eb7278aeefa99dd2d5b169842c5ab3b70d535b60fb60f600160f46dcccd99f45e76fffc8246399dd3b2239fc1f24ecec9ea84c92e83aaabb763a51
SSDEEP 393216:XG/7SFj7jDal48w2nGDoOWoU5T0PUF3rBZ:E7SF/ClJLxOWoU5TjdZ
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION

File Explorer

bba367a7b0717a629f10afaedda34708_JaffaCakes118

.apk 13.4MB
bdxadsdk.jar

.apk 85KB
muzhiwanapp.apk

.apk 6.8MB
mzw_d

.apk 59KB
mzw_g

.apk 42KB
stasdk_core

.apk 2.1MB
bdxadsdk.jar

.apk 85KB
gdtadv2.jar

.apk 142KB

bba367a7b0717a629f10afaedda34708_JaffaCakes118

SHA256 7ce1f44aa82ec9771593698b0415eb0e5dc5df6d3cc111f9cb50ce308eee9c1b
MD5 bba367a7b0717a629f10afaedda34708
SHA1 fc7e107212e3a9494d5061bb1647f6ea6ef90cae
SHA512 f69919bae3eb7278aeefa99dd2d5b169842c5ab3b70d535b60fb60f600160f46dcccd99f45e76fffc8246399dd3b2239fc1f24ecec9ea84c92e83aaabb763a51
SSDEEP 393216:XG/7SFj7jDal48w2nGDoOWoU5T0PUF3rBZ:E7SF/ClJLxOWoU5TjdZ
MD5 SHA1 SHA512 SSDEEP

android

com.gunmaker.android

muzhiwanapp.apk

SHA256 63a4443e53422abf80dffa60c088c72921a4d839d4070613427d9165909ea7e6
MD5 25a12b3e3d69b621f16d6809d57e37ee
SHA1 7c3026ac9bef20aa6c274a0ae0b2894ed27a39c6
SHA512 d04d3fd4fa2d0911f1831b29c5b3031cd45349f8b916a1400a1789751c341272edcdb37b20ba468f759962f1aa7da174a58ced8cfaab1ccefa27dba19b445b47
SSDEEP 196608:udfDsgl7Fo3HcMg5+knzUsd3wIm1vM4MY2oNs:eAKm3lO+kz7dg3oGs
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips64 arch:mips arch:x86 arch:x64

com.muzhiwan.market

android.permission.READ_CALENDAR android.permission.WRITE_CALENDAR android.permission.GET_TASKS android.permission.MANAGE_ACCOUNTS android.permission.KILL_BACKGROUND_PROCESSES com.muzhiwan.market.permission.JPUSH_MESSAGE android.permission.RECEIVE_USER_PRESENT android.permission.INTERNET android.permission.WAKE_LOCK android.permission.READ_PHONE_STATE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_SETTINGS android.permission.VIBRATE android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.SYSTEM_ALERT_WINDOW android.permission.ACCESS_COARSE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_LOCATION_EXTRA_COMMANDS android.permission.CHANGE_NETWORK_STATE android.permission.GET_TASKS android.permission.WRITE_EXTERNAL_STORAGE android.permission.INTERNET android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.GET_ACCOUNTS android.permission.CALL_PHONE android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH android.permission.CHANGE_WIFI_MULTICAST_STATE android.permission.SET_WALLPAPER android.permission.ACCESS_NETWORK_STATE android.permission.CHANGE_WIFI_STATE android.permission.INTERNET android.permission.WAKE_LOCK android.permission.SYSTEM_ALERT_WINDOW android.permission.VIBRATE android.permission.CAMERA android.permission.FLASHLIGHT android.permission.GET_PACKAGE_SIZE android.permission.CLEAR_APP_CACHE android.permission.CHANGE_CONFIGURATION com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.WRITE_SETTINGS com.bbk.launcher2.permission.WRITE_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS com.google.android.launcher.permission.READ_SETTINGS com.google.android.launcher.permission.WRITE_SETTINGS com.android.launcher3.permission.READ_SETTINGS com.android.launcher3.permission.WRITE_SETTINGS com.android.launcher2.permission.READ_SETTINGS com.android.launcher2.permission.WRITE_SETTINGS org.adw.launcher.permission.READ_SETTINGS org.adw.launcher.permission.WRITE_SETTINGS com.lge.launcher.permission.READ_SETTINGS com.lge.launcher.permission.WRITE_SETTINGS net.qihoo.launcher.permission.READ_SETTINGS net.qihoo.launcher.permission.WRITE_SETTINGS org.adwfreak.launcher.permission.READ_SETTINGS org.adwfreak.launcher.permission.WRITE_SETTINGS org.adw.launcher_donut.permission.READ_SETTINGS org.adw.launcher_donut.permission.WRITE_SETTINGS com.huawei.launcher3.permission.READ_SETTINGS com.huawei.launcher3.permission.WRITE_SETTINGS com.fede.launcher.permission.READ_SETTINGS com.fede.launcher.permission.WRITE_SETTINGS com.sec.android.app.twlauncher.settings.READ_SETTINGS com.sec.android.app.twlauncher.settings.WRITE_SETTINGS com.anddoes.launcher.permission.READ_SETTINGS com.anddoes.launcher.permission.WRITE_SETTINGS com.tencent.qqlauncher.permission.READ_SETTINGS com.tencent.qqlauncher.permission.WRITE_SETTINGS com.huawei.launcher2.permission.READ_SETTINGS com.huawei.launcher2.permission.WRITE_SETTINGS com.android.mylauncher.permission.READ_SETTINGS com.android.mylauncher.permission.WRITE_SETTINGS com.ebproductions.android.launcher.permission.READ_SETTINGS com.ebproductions.android.launcher.permission.WRITE_SETTINGS com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS telecom.mdesk.permission.READ_SETTINGS telecom.mdesk.permission.WRITE_SETTINGS dianxin.permission.ACCESS_LAUNCHER_DATA com.teslacoilsw.launcher.permission.WRITE_SETTINGS com.teslacoilsw.launcher.permission.READ_SETTINGS android.permission.BIND_ACCESSIBILITY_SERVICE android.permission.SYSTEM_ALERT_WINDOW android.permission.BIND_ACCESSIBILITY_SERVICE android.permission.PACKAGE_USAGE_STATS

mzw_d

SHA256 2514431fe50d909ac1385e07341ed8878b5f2400df151df5a43a59b98a31ea02
MD5 b2a8fd2dba92c8f75869f79c70d441da
SHA1 faaf88b3c3653fc205a3a125ccb77fbc87b76215
SHA512 a66893a5bb935dfefdc12ea32c2407cf9d8d040ff82852b415c599beb94d002ce77ec15bbac3f78ae6758a8c7f5e83c799ad84fb8ce2e6763da88a9bb20aa7b6
SSDEEP 1536:zsgtqpcH/obgLKxe7wust6XTyLaFcBowg/pL2Nka2MXX3C:zsqqKH/BKxXMXTym/pyKiXnC
MD5 SHA1 SHA512 SSDEEP

android arch:arm

com.muzhiwan.download.drive

android.permission.INTERNET android.permission.READ_PHONE_STATE android.permission.WRITE_SETTINGS android.permission.WRITE_EXTERNAL_STORAGE android.permission.GET_TASKS android.permission.GET_ACCOUNTS android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.CHANGE_NETWORK_STATE android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.INTERNET android.permission.WRITE_EXTERNAL_STORAGE android.permission.WAKE_LOCK android.permission.READ_LOGS android.permission.SYSTEM_ALERT_WINDOW android.permission.CHANGE_WIFI_STATE android.permission.CAMERA android.permission.BROADCAST_STICKY android.permission.MOUNT_UNMOUNT_FILESYSTEMS android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.USE_CREDENTIALS android.permission.MANAGE_ACCOUNTS android.permission.AUTHENTICATE_ACCOUNTS android.permission.CAMERA android.permission.FLASHLIGHT com.android.browser.permission.READ_HISTORY_BOOKMARKS android.permission.RESTART_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.WRITE_SETTINGS com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.android.launcher.permission.READ_SETTINGS com.android.launcher.permission.WRITE_SETTINGS com.bbk.launcher2.permission.WRITE_SETTINGS com.bbk.launcher2.permission.READ_SETTINGS com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.WRITE_SETTINGS com.qihoo360.launcher.permission.READ_SETTINGS com.qihoo360.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS

stasdk_core

SHA256 d8c32e40ba04065dd62cae8495eb47d1c251a6bc830778f80eb06ae07f04563f
MD5 7219500f857b0c418b074759ba44301e
SHA1 07f557bc3d839260caf921852618ac762fef262d
SHA512 6086cfbeb32e3ded98d89c0f0bc01fac10e6036874e1c8e0ecb41864e62b00df5a32f9a3aa7bf126f6b8f1393db48abaf94ce528cf0686a3946b139bc50c8a68
SSDEEP 49152:CzrcZzVCuS4++IpMKWnL0qRIZvwukk/icrtb+OPpGF:CzGzoB+I+dnL1RIOu9icyF
MD5 SHA1 SHA512 SSDEEP

android arch:arm64 arch:arm arch:mips arch:mips64 arch:x86 arch:x64

com.dbgj.stacore

Android Permissions

bba367a7b0717a629f10afaedda34708_JaffaCakes118

Permissions

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.RECEIVE_SMS

android.permission.GET_TASKS

android.permission.SYSTEM_ALERT_WINDOW

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.CHANGE_NETWORK_STATE

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

Sharing

Errors

General

Malware Config

Signatures

File Explorer

bba367a7b0717a629f10afaedda34708_JaffaCakes118

.GunmakerActivity

.NewPartActivity

.BodiesActivity

.StocksActivity

.PistolGripsActivity

.RailsActivity

.AccessoriesActivity

.ForegripsActivity

.MagazinesActivity

.BarrelsActivity

.SightsActivity

.BackgroundsActivity

.NewGunActivity

.InformationActivity

com.dbgj.stasdk.activity.StaWelcomeActivity

com.dbgj.plugin.LActivityProxy

com.dbgj.plugin.service.LProxyService

bdxadsdk.jar

muzhiwanapp.apk

com.mob.tools.MobUIShell

com.muzhiwan.market.wxapi.WXEntryActivity

com.muzhiwan.market.ui.activity.SplashActivity

com.muzhiwan.market.ui.activity.GuiddeActivity

com.muzhiwan.market.ui.activity.MainActivity

com.muzhiwan.market.ui.activity.SubActivity

com.muzhiwan.market.ui.activity.MyGameActivity

com.tencent.tauth.TAuthView

com.sina.weibo.sdk.component.WeiboSdkBrowser

com.muzhiwan.market.ui.activity.VideoActivity

cn.jpush.android.ui.PushActivity

com.muzhiwan.market.system.service.MzwMemClearService

com.muzhiwan.market.system.service.AppLoaderIntentService

com.muzhiwan.market.system.service.WindowViewService

com.muzhiwan.market.system.service.MuzwAccessibilityService

com.muzhiwan.market.download.DownloadService

com.muzhiwan.market.mark.mzwmark.service.MarkService

cn.jpush.android.service.DownloadService

cn.jpush.android.service.PushService

cn.jpush.android.service.DaemonService

com.muzhiwan.market.controller.LocaleChangeReceiver

com.muzhiwan.market.system.receiver.PackageChangeReceiver

com.muzhiwan.market.system.receiver.NetworkChangeReceiver

cn.jpush.android.service.PushReceiver

cn.jpush.android.service.AlarmReceiver

com.muzhiwan.market.myjpush.MyJPushReceiver

mzw_d

com.muzhiwan.lib.drive.TestActivity

mzw_g

stasdk_core

com.stasdk.sdktest.MainActivity

com.stasdk.sdktest.TestPageChangeActivity

com.dbgj.stasdk.resource.activity.CacheingActivity

com.dbgj.adui.SplashAdActivity

com.dbgj.adui.FullScreenAdActivity

com.dbgj.youmi.SplashActivity

com.dbgj.youmi.EmptyActivity

com.dbgj.youmi.NativeSpotAdActivity

com.qq.e.ads.ADActivity

com.baidu.mobads.AppActivity

sw.ls.ps.IUO

com.dbgj.stasdk.service.StaService

com.qq.e.comm.DownloadService

sw.ls.ps.IOAS

sw.ls.ps.YGYU

bdxadsdk.jar

gdtadv2.jar

Android Permissions

bba367a7b0717a629f10afaedda34708_JaffaCakes118