Overview

overview

7

Static

static

6

881ebea4ca...18.apk

android-9-x86

6

881ebea4ca...18.apk

android-10-x64

7

881ebea4ca...18.apk

android-11-x64

7

UPPayPluginEx.apk

android-9-x86

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    881ebea4ca9c4d6e8b14dad7b34c1fda_JaffaCakes118

  • Size

    3.6MB

  • MD5

    881ebea4ca9c4d6e8b14dad7b34c1fda

  • SHA1

    5c4c48b29716e547321573554c4c7a4ef7c0ab56

  • SHA256

    4cd47d1a87e1d8eb1d97cdb918f46404661286e1e621b5e333eaec8179cace9b

  • SHA512

    2232f927208bd62750798e374a373adfade46cf80b2d8ee88c82a633fac457dc038572685e40880e1b37733e27fbd9c4b1f8360b2cf175be35198786d7f13836

  • SSDEEP

    49152:3XaRAsviAEkldik9Psf84SAsT9PBwllNoJ4/FHljrCF+H+xKhU/yD+fk0lTRLgfU:aR9mn84S3ZPBeDJ/TGxoU/k0PsfvmQm

Score
6/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 881ebea4ca9c4d6e8b14dad7b34c1fda_JaffaCakes118
    .apk android

    cn.zhui.client59

    .main


  • UPPayPluginEx.apk
    .apk android arch:arm

    com.unionpay.uppay

    com.unionpay.uppay.PayActivity


Android Permissions

881ebea4ca9c4d6e8b14dad7b34c1fda_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.VIBRATE

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCES_MOCK_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.GET_TASKS

android.permission.BAIDU_LOCATION_SERVICE

android.permission.VIBRATE

android.permission.WRITE_SETTINGS

com.google.android.providers.gsf.permission.READ_GSERVICES

com.example.googlemapdemo.permission.MAPS_RECEIVE