ac0a75c7b47c3c68d29327cde1777a8f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ac0a75c7b47c3c68d29327cde1777a8f_JaffaCakes118
Size

9.2MB
MD5

ac0a75c7b47c3c68d29327cde1777a8f
SHA1

40bb0c972c6a2e176c68e02c204b760055b7339f
SHA256

0b97eaefe63c123592cbb263d05dd02c48503b7d75c74a772d6d9a47487a616d
SHA512

afb70429066d2b9c7e03e5025959824ed8f779b65600a94753c2d7c5dd06f6a881336aed2e86b69bf61d82344875aed4a55843f1957163ce7fa5171a28270dd1
SSDEEP

196608:4X0lOZPUj5hzcM/WKWPOd6O0aLpiF5tjaNmiLo3pn6EdLDV02ubH:4klOij5hQM/HiOO5tXHpn62/V020

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS

Files

ac0a75c7b47c3c68d29327cde1777a8f_JaffaCakes118
.apk android arch:arm

fm.qingting.qtradio

fm.qingting.qtradio.QTRadioActivity

Activities

com.ixintui.push.PushActivity

com.ixintui.push.PushActivity

fm.qingting.qtradio.QTRadioActivity

android.intent.action.MAIN
android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

fm.qingting.qtradio.wxapi.WXPayEntryActivity

android.intent.action.VIEW

Permissions

android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.RAISED_THREAD_PRIORITY
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECORD_AUDIO
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.BROADCAST_STICKY
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.MANAGE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.CAMERA
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.WRITE_SETTINGS

Receivers

fm.qingting.qtradio.notification.ScreenOnReceiver

android.net.conn.CONNECTIVITY_CHANGE

fm.qingting.qtradio.headset.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

fm.qingting.qtradio.pushmessage.IxintuiMessageReceiver

com.ixintui.action.MESSAGE
com.ixintui.action.RESULT
com.ixintui.action.notification.CLICK

com.ixintui.push.Receiver

com.ixintui.action.BROADCAST
android.intent.action.PACKAGE_REMOVED
android.net.conn.CONNECTIVITY_CHANGE

fm.qingting.qtradio.notification.QTAlarmReceiver

fm.qingting.alarmintent
fm.qingting.start
fm.qingting.quit
fm.qingting.reserveintent
fm.qingting.notifyintent
fm.qingting.protectintent
fm.qingting.killintent

fm.qingting.qtradio.notification.InstantPlayReceiver

fm.qingting.qtradio.INSTANT_PLAY
fm.qingting.qtradio.INSTANT_PLAY_NEXT
fm.qingting.qtradio.INSTANT_PLAY_PRE
fm.qingting.qtradio.CAR_PLAY_NEXT
fm.qingting.qtradio.CAR_PLAY_PRE
fm.qingting.qtradio.CAR_PLAY
fm.qingting.qtradio.CAR_PAUSE

fm.qingting.qtradio.pushmessage.UFOReceiver

fm.qingting.qtradio.GEXIN_MESSAGE

fm.qingting.qtradio.notification.UpgradeReceiver

android.intent.action.PACKAGE_REPLACED

fm.qingting.qtradio.manager.EducationReceiver

fm.qingting.qtradio.collection_remind

fm.qingting.qtradio.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.eguan.drivermonitor.receiver.SystemStartReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.USER_PRESENT

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

fm.qingting.qtradio.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

com.google.android.apps.analytics.AnalyticsReceiver

com.android.vending.INSTALL_REFERRER

com.intowow.sdk.ScheduleReceiver

com.intowow.sdk.prefetch

fm.qingting.qtradio.wemart.ShareBroadReceiver

cn.wemart.sdk.ShareMessageBroad

fm.qingting.qtradio.wemart.WemartPayBroadReceiver

cn.wemart.sdk.WechatMessageBroad

Services

fm.qingting.qtradio.NotificationService

fm.qingting.qtradio.NotificationService

com.umeng.message.UmengService

fm.qingting.qtradio.intent.action.START
fm.qingting.qtradio.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.unregistercallback.action
com.umeng.message.message.handler.action
com.umeng.message.autoupdate.handler.action

fm.qingting.qtradio.voice.QTRecognitionService

android.speech.RecognitionService
com.miui.voicerecognizer
CommonPlugin-2.5.apk
.apk android

com.taobao.munion.plugin.cm

com.taobao.newxp.view.UMDetail

Activities

com.taobao.tae.sdk.ui.TradeWebViewActivity

COM_TAOBAO_TAE_SDK_TRADE_WEB_VIEW_ACTION

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_SETTINGS
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.READ_LOGS
android.permission.CALL_PHONE

Services
FrameworkPlugin-2.3.apk
.apk android

com.example.bizplugin
LoopImagePlugin-1.0.apk
.apk android

com.alimama.mobile.sdk.loopimage
WelcomePlugin-1.3.apk
.apk android

com.alimama.mobile.sdk.welcome

Android Permissions

ac0a75c7b47c3c68d29327cde1777a8f_JaffaCakes118

Permissions

android.permission.SYSTEM_ALERT_WINDOW

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.RAISED_THREAD_PRIORITY

android.permission.READ_LOGS

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.VIBRATE

android.permission.WAKE_LOCK

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.BROADCAST_STICKY

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.MANAGE_ACCOUNTS

android.permission.GET_ACCOUNTS

android.permission.CAMERA

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

fm.qingting.qtradio

fm.qingting.qtradio.QTRadioActivity

Activities

com.ixintui.push.PushActivity

fm.qingting.qtradio.QTRadioActivity

com.tencent.tauth.AuthActivity

fm.qingting.qtradio.wxapi.WXPayEntryActivity

Permissions

Receivers

fm.qingting.qtradio.notification.ScreenOnReceiver

fm.qingting.qtradio.headset.MediaButtonReceiver

fm.qingting.qtradio.pushmessage.IxintuiMessageReceiver

com.ixintui.push.Receiver

fm.qingting.qtradio.notification.QTAlarmReceiver

fm.qingting.qtradio.notification.InstantPlayReceiver

fm.qingting.qtradio.pushmessage.UFOReceiver

fm.qingting.qtradio.notification.UpgradeReceiver

fm.qingting.qtradio.manager.EducationReceiver

fm.qingting.qtradio.wxapi.AppRegister

com.eguan.drivermonitor.receiver.SystemStartReceiver

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

com.google.android.apps.analytics.AnalyticsReceiver

com.intowow.sdk.ScheduleReceiver

fm.qingting.qtradio.wemart.ShareBroadReceiver

fm.qingting.qtradio.wemart.WemartPayBroadReceiver

Services

fm.qingting.qtradio.NotificationService

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

fm.qingting.qtradio.voice.QTRecognitionService

com.taobao.munion.plugin.cm

com.taobao.newxp.view.UMDetail

Activities

com.taobao.tae.sdk.ui.TradeWebViewActivity

Permissions

Services

com.example.bizplugin

com.alimama.mobile.sdk.loopimage

com.alimama.mobile.sdk.welcome

Android Permissions

ac0a75c7b47c3c68d29327cde1777a8f_JaffaCakes118