2b0003c58f7498d209805e5a998766b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b0003c58f7498d209805e5a998766b5_JaffaCakes118
Size

22.7MB
MD5

2b0003c58f7498d209805e5a998766b5
SHA1

043110cacb2789410f74ec4663a07cd2c91d4b2b
SHA256

61716e0e911d1087407c383738f041317f2c9433541c61d44abbeb84500a14cd
SHA512

ed748152a42f590cccff9435df0d110ec1bc9902211b7091899138d846f753ec4b24fb0167eb3ae0dfb3a8f4bc58cf9012ace35a5e3f695d992bd03e224f3002
SSDEEP

393216:vzTfRnt4Wbdu4YlrK1iGwwxdDZmmC0QaYiPdR58SbA3ChcxaQhC7GZCCZYAdT/ZL:vptTbMDeYG9C0BhBTQhC7GlekTZOEL

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS

Files

2b0003c58f7498d209805e5a998766b5_JaffaCakes118
.apk android arch:arm

com.duokan.reader

com.duokan.reader.DkReaderActivity

Activities

com.duokan.reader.DkReaderActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
mi.quicksearch.intent.action.RETRIEVE

com.duokan.reader.ui.general.ServerSettingActivity

android.intent.action.VIEW

com.duokan.reader.DkPushActivity

com.duokan.reader.748ED6F8
com.duokan.reader.21337DA7
com.duokan.reader.BCDF212E
com.duokan.reader.3F0517EB
com.duokan.reader.58EBF0E6
com.duokan.reader.7E273086
com.duokan.reader.BD420C38
com.duokan.reader.17E8035B
com.duokan.reader.36DE8F7D
com.duokan.reader.713171D1
com.duokan.reader.0054FB5D
com.duokan.reader.E0E70907
com.duokan.reader.38CE29EF
com.duokan.reader.C78F8E13
com.duokan.reader.DA45DF81
com.duokan.reader.2D970DBF

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.xiaomi.payment.MiliCenterEntryActivity

com.xiaomi.action.VIEW_MILI_CENTER

com.xiaomi.payment.CommonEntryActivity

android.intent.action.VIEW

com.xiaomi.payment.QrEntryActivity

android.intent.action.VIEW

com.xiaomi.payment.DeductEntryActivity

com.xiaomi.action.DEDUCT

com.umpay.huafubao.dynamicload.DLProxyActivity

com.ryg.dynamicload.proxy.activity.VIEW

Permissions

com.duokan.reader.permission.MIPUSH_RECEIVE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.ACCESS_DOWNLOAD_MANAGER
com.xiaomi.vip.permission.SERVICE
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.MANAGE_USERS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.INTERNET
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.REORDER_TASKS
com.xiaomi.xmsf.permission.PAYMENT
android.permission.CAMERA
android.permission.GET_TASKS
android.permission.VIBRATE
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.CHANGE_NETWORK_STATE
com.xiaomi.passport.permission.PASSPORT_UI_CONTROLLER_SERVICE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.WRITE_SECURE_SETTINGS
com.xiaomi.permission.CLOUD_MANAGER

Receivers

com.duokan.reader.domain.account.SystemAccountLogoutReceiver

android.accounts.LOGIN_ACCOUNTS_POST_CHANGED

com.duokan.core.sys.MediaSessionManager.DkMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.duokan.reader.domain.cloud.push.DkPushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.xiaomi.assemble.control.HmsPushReceiver

com.huawei.android.push.intent.REGISTRATION
com.huawei.android.push.intent.RECEIVE
com.huawei.android.push.intent.CLICK
com.huawei.intent.action.PUSH_STATE

com.huawei.hms.support.api.push.PushEventReceiver

com.huawei.intent.action.PUSH

com.duokan.reader.domain.ad.AppInstallReceiver

android.intent.action.PACKAGE_INSTALL
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.duokan.reader.domain.ad.AppDownloadReceiver

com.xiaomi.market.DOWNLOAD_INSTALL_RESULT

com.mipay.account.AccountChangedReceiver

com.xiaomi.accounts.LOGIN_ACCOUNTS_POST_CHANGED
android.accounts.LOGIN_ACCOUNTS_POST_CHANGED

Services

com.duokan.reader.domain.cloud.push.DkPushService

com.xiaomi.xmsf.push.SCAN

com.duokan.reader.DkPushSDKService

com.duokan.reader.B59C777C
com.duokan.reader.4DE0E45F
com.duokan.reader.E133825C
com.duokan.reader.FAD62258
com.duokan.reader.3169CF54
com.duokan.reader.0236A2DE
com.duokan.reader.0089E776
com.duokan.reader.4C874B41
com.duokan.reader.CC8E9876
com.duokan.reader.E924B022
com.duokan.reader.96DE44E9
com.duokan.reader.C45DE8DD
com.duokan.reader.2349EB31
com.duokan.reader.AC882BF7
com.duokan.reader.2C1EF09C
com.duokan.reader.BA12C19F

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.accounts.AccountAuthenticator

com.xiaomi.payment.PaymentService

miuipub.intent.action.PAYMENT
analytics_core.apk
.apk android

com.miui.analytics

Permissions

android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.GET_ACCOUNTS_PRIVILEGED
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.READ_SYNC_SETTINGS
android.permission.WAKE_LOCK
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.PACKAGE_USAGE_STATS
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
com.xiaomi.permission.MICLOUD
com.xiaomi.permission.CLOUD_MANAGER
com.xiaomi.permission.ACCESS_SECURITY_DEVICE_CREDENTIAL
com.xiaomi.xmsf.permission.USE_XMSF_UPLOAD
miui.permission.USE_INTERNAL_GENERAL_API
miui.cloud.finddevice.AccessFindDevice
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SECURE_SETTINGS
android.permission.READ_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.UPDATE_DEVICE_STATS
android.permission.MODIFY_NETWORK_ACCOUNTING

Receivers

com.miui.analytics.AnalyticsReceiver

miui.intent.action.ad.AAID_RESET
android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_SHUTDOWN
android.net.conn.CONNECTIVITY_CHANGE
android.provision.action.PROVISION_COMPLETE

com.miui.analytics.internal.ApkReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_REPLACED
miui.intent.action.PACKAGE_FIRST_LAUNCH

Services

com.miui.analytics.AnalyticsService

com.miui.action.ANALYTICS_SERVICE

com.miui.analytics.AppenderService

miui.intent.action.analytics.ANALYTICS_DOWNLOAD
android.intent.action.PACKAGE_FIRST_LAUNCH
miui.intent.action.analytics.APPEND_USAGE
miui.intent.action.analytics.REPORT_HYBRID_STATE

com.miui.analytics.district.MarketingDistrictService

miui.intent.action.analytics.MDS_CALLBACK

com.miui.analytics.internal.collection.MusicStateListener

android.service.notification.NotificationListenerService
billingSupport.dat
.apk android

com.umpay.huafubao

com.umpay.huafubao.ui.BillingActivity

Activities

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
billingSupport4.4.dat
.apk android

com.cp.plugin.sdk

com.umpay.huafubao.ui.BillingActivity

Activities

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.SEND_SMS
android.permission.READ_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.RECEIVE_SMS
android.permission.WRITE_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.GET_TASKS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
unicom_channel_resource.dat
.apk android

com.xiaowo.resourcepro

Android Permissions

2b0003c58f7498d209805e5a998766b5_JaffaCakes118

Permissions

com.duokan.reader.permission.MIPUSH_RECEIVE

android.permission.ACCESS_WIFI_STATE

android.permission.BLUETOOTH

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.ACCESS_DOWNLOAD_MANAGER

com.xiaomi.vip.permission.SERVICE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.INTERACT_ACROSS_USERS

android.permission.INTERACT_ACROSS_USERS_FULL

android.permission.MANAGE_USERS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.REORDER_TASKS

com.xiaomi.xmsf.permission.PAYMENT

android.permission.CAMERA

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.CHANGE_NETWORK_STATE

com.xiaomi.passport.permission.PASSPORT_UI_CONTROLLER_SERVICE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.WRITE_SECURE_SETTINGS

com.xiaomi.permission.CLOUD_MANAGER

Sharing

General

Malware Config

Signatures

Files

com.duokan.reader

com.duokan.reader.DkReaderActivity

Activities

com.duokan.reader.DkReaderActivity

com.duokan.reader.ui.general.ServerSettingActivity

com.duokan.reader.DkPushActivity

com.tencent.tauth.AuthActivity

com.facebook.CustomTabActivity

com.xiaomi.payment.MiliCenterEntryActivity

com.xiaomi.payment.CommonEntryActivity

com.xiaomi.payment.QrEntryActivity

com.xiaomi.payment.DeductEntryActivity

com.umpay.huafubao.dynamicload.DLProxyActivity

Permissions

Receivers

com.duokan.reader.domain.account.SystemAccountLogoutReceiver

com.duokan.core.sys.MediaSessionManager.DkMediaButtonReceiver

com.duokan.reader.domain.cloud.push.DkPushMessageReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.assemble.control.HmsPushReceiver

com.huawei.hms.support.api.push.PushEventReceiver

com.duokan.reader.domain.ad.AppInstallReceiver

com.duokan.reader.domain.ad.AppDownloadReceiver

com.mipay.account.AccountChangedReceiver

Services

com.duokan.reader.domain.cloud.push.DkPushService

com.duokan.reader.DkPushSDKService

com.xiaomi.passport.accountmanager.MiAuthenticatorService

com.xiaomi.payment.PaymentService

com.miui.analytics

Permissions

Receivers

com.miui.analytics.AnalyticsReceiver

com.miui.analytics.internal.ApkReceiver

Services

com.miui.analytics.AnalyticsService

com.miui.analytics.AppenderService

com.miui.analytics.district.MarketingDistrictService

com.miui.analytics.internal.collection.MusicStateListener

com.umpay.huafubao

com.umpay.huafubao.ui.BillingActivity

Activities

Permissions

com.cp.plugin.sdk

com.umpay.huafubao.ui.BillingActivity

Activities

Permissions

com.xiaowo.resourcepro

Android Permissions

2b0003c58f7498d209805e5a998766b5_JaffaCakes118