a17a96015bb312c9cf2adf11155a24fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a17a96015bb312c9cf2adf11155a24fe_JaffaCakes118
Size

5.8MB
MD5

a17a96015bb312c9cf2adf11155a24fe
SHA1

8f16772d45365568844ef8c7239de4ee0c195049
SHA256

61f2203f63674817585bdae275d65bebedfbd985d37f0a40120ef9857b63bcda
SHA512

db5533f87267ae01c1011114730338d0a37a35e7d28e7f1cdb38e89fd35fa7da51d73fe5cfa2ec489d375fd90f8a622a03e683622cceae946f6f9e18834a48d8
SSDEEP

98304:prfEbOLAis3uAGK7PTcnJ2w0v10kesM2NheplR1orxlFFohrmPtKXdySdWXF0xmJ:pDESAis+AGUPQnGv16E2R1ovX6yiaF0K

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

a17a96015bb312c9cf2adf11155a24fe_JaffaCakes118
.apk android arch:arm arch:x86

com.estrongs.android.pop.pro

com.estrongs.android.pop.view.FileExplorerActivity

Activities

com.estrongs.android.pop.view.FileExplorerActivity

android.intent.action.MAIN
android.intent.action.VIEW
org.openintents.action.VIEW_DIRECTORY
com.estrongs.android.pro.SHOW_DISK_USAGE
android.hardware.usb.action.USB_DEVICE_ATTACHED
android.hardware.usb.action.USB_DEVICE_DETACHED

com.estrongs.android.pop.app.compress.CompressionActivity

android.intent.action.VIEW

com.estrongs.android.pop.app.compress.CompressionProxyActivity

android.intent.action.VIEW

com.estrongs.android.pop.app.ESFileSharingActivity

android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.estrongs.android.pop.app.SaveToESActivity

android.intent.action.VIEW
android.intent.action.SEND
android.intent.action.SEND_MULTIPLE

com.estrongs.android.pop.app.LocalFileSharingActivity

android.intent.action.VIEW

com.estrongs.android.pop.app.PopVideoPlayer

android.intent.action.VIEW

com.estrongs.android.pop.app.PopVideoPlayerProxyActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.estrongs.android.pop.app.AudioPlayerProxyActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.estrongs.android.pop.app.editor.PopNoteEditor

android.intent.action.VIEW
android.intent.action.EDIT

com.estrongs.android.pop.app.FileChooserActivity

com.estrongs.action.PICK_FILE
com.estrongs.action.PICK_FILE
com.estrongs.action.PICK_DIRECTORY
com.estrongs.action.PICK_DIRECTORY
android.intent.action.CREATE_SHORTCUT

com.estrongs.android.pop.app.ESContentChooserActivity

android.intent.action.GET_CONTENT

com.estrongs.android.pop.app.ESRingtoneChooserActivity

android.intent.action.RINGTONE_PICKER

com.estrongs.android.pop.app.ESWallPaperChooserActivity

android.intent.action.SET_WALLPAPER

com.estrongs.android.pop.app.DownloaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.estrongs.android.pop.app.BrowserDownloaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.estrongs.android.pop.app.PopRemoteImageBrowser

android.intent.action.VIEW

com.estrongs.android.pop.ftp.ESFtpShortcut

android.intent.action.MAIN

com.estrongs.android.pop.app.AdbControllerActivity

com.estrongs.android.pop.app.AdbControllerActivity

com.estrongs.android.pop.app.UsbMonitorActivity

android.hardware.usb.action.USB_DEVICE_ATTACHED
android.hardware.usb.action.USB_DEVICE_DETACHED

com.estrongs.android.pop.app.TransitActivity

com.estrongs.android.SHOW_DISK_USAGE
com.estrongs.android.SHOW_APP_MGR
com.estrongs.android.SHOW_SDCARD
com.estrongs.android.SHOW_MUSIC_PLAYER

Permissions

android.permission.KILL_BACKGROUND_PROCESSES
android.permission.WRITE_SETTINGS
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.INTERNET
android.permission.SET_WALLPAPER
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_MEDIA_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.ACCESS_SUPERUSER
android.permission.VIBRATE
.PERMISSION
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
com.android.vending.CHECK_LICENSE

Receivers

com.estrongs.android.pop.app.AudioPlayerService$MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.estrongs.android.pop.app.CampaignReceiver

com.android.vending.INSTALL_REFERRER

com.baidu.share.message.ShareReceiver

baidu.intent.action.PCS_SHARE

com.estrongs.android.pop.EnableOEMConfig

android.intent.action.MEDIA_MOUNTED
android.intent.action.MEDIA_UNMOUNTED
android.intent.action.MEDIA_BAD_REMOVAL

com.estrongs.android.pop.app.InstallMonitorReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.estrongs.android.pop.app.StartServiceReceiver

android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.MEDIA_MOUNTED

Services

com.estrongs.android.pop.bt.OBEXFtpServerService

android.intent.action.START_OBEX_FTP_SERVER

Android Permissions

a17a96015bb312c9cf2adf11155a24fe_JaffaCakes118

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.WRITE_SETTINGS

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.INTERNET

android.permission.SET_WALLPAPER

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WRITE_MEDIA_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.ACCESS_SUPERUSER

android.permission.VIBRATE

.PERMISSION

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

com.android.vending.CHECK_LICENSE

Sharing

General

Malware Config

Signatures

Files

com.estrongs.android.pop.pro

com.estrongs.android.pop.view.FileExplorerActivity

Activities

com.estrongs.android.pop.view.FileExplorerActivity

com.estrongs.android.pop.app.compress.CompressionActivity

com.estrongs.android.pop.app.compress.CompressionProxyActivity

com.estrongs.android.pop.app.ESFileSharingActivity

com.estrongs.android.pop.app.SaveToESActivity

com.estrongs.android.pop.app.LocalFileSharingActivity

com.estrongs.android.pop.app.PopVideoPlayer

com.estrongs.android.pop.app.PopVideoPlayerProxyActivity

com.estrongs.android.pop.app.AudioPlayerProxyActivity

com.estrongs.android.pop.app.editor.PopNoteEditor

com.estrongs.android.pop.app.FileChooserActivity

com.estrongs.android.pop.app.ESContentChooserActivity

com.estrongs.android.pop.app.ESRingtoneChooserActivity

com.estrongs.android.pop.app.ESWallPaperChooserActivity

com.estrongs.android.pop.app.DownloaderActivity

com.estrongs.android.pop.app.BrowserDownloaderActivity

com.estrongs.android.pop.app.PopRemoteImageBrowser

com.estrongs.android.pop.ftp.ESFtpShortcut

com.estrongs.android.pop.app.AdbControllerActivity

com.estrongs.android.pop.app.UsbMonitorActivity

com.estrongs.android.pop.app.TransitActivity

Permissions

Receivers

com.estrongs.android.pop.app.AudioPlayerService$MediaButtonReceiver

com.estrongs.android.pop.app.CampaignReceiver

com.baidu.share.message.ShareReceiver

com.estrongs.android.pop.EnableOEMConfig

com.estrongs.android.pop.app.InstallMonitorReceiver

com.estrongs.android.pop.app.StartServiceReceiver

Services

com.estrongs.android.pop.bt.OBEXFtpServerService

Android Permissions

a17a96015bb312c9cf2adf11155a24fe_JaffaCakes118