ba231e3c48070c9ca28463b58cacc2de_JaffaCakes118

General

Target

ba231e3c48070c9ca28463b58cacc2de_JaffaCakes118
Size

5.9MB
MD5

ba231e3c48070c9ca28463b58cacc2de
SHA1

34999c825eb949f8334054edc14275c2f2eaeb5d
SHA256

3c8087dfdf353f004f0d659270c6a1ea3d93433551501443be07ae93fec07606
SHA512

c3bf919ee22f88a8d5a21d41a0a68f47770ea646a881f044833fcf6e51e5ec14a617a1530d7ed5147b71db49b4d90dd203b825f9cc29fd53381244154d633d4e
SSDEEP

98304:cvYwOV8dSmwkeLEfwZruL0wqYUJLf2LXsRJf70Zy50voKZTW7/HUA1QOBJbPAL:Pw28dSmwoSqLfHGDzJfoZy3rZNAL

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 12 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Files

ba231e3c48070c9ca28463b58cacc2de_JaffaCakes118
.apk android arch:arm

say.zzm.time

.Time_Setting

Activities

.Time_Setting

android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT

.SaySetting

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
android.permission.WAKE_LOCK
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_SMS
android.permission.READ_SMS
com.android.vending.CHECK_LICENSE
android.permission.DEVICE_POWER
android.permission.DISABLE_KEYGUARD
android.permission.GET_ACCOUNTS
android.permission.MODIFY_PHONE_STATE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.PERSISTENT_ACTIVITY
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.READ_CONTACTS
com.android.launcher.permission.READ_SETTINGS
android.permission.VIBRATE
android.permission.WRITE_CONTACTS
com.android.launcher.permission.WRITE_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
android.permission.FORCE_STOP_PACKAGES
android.permission.REORDER_TASKS
android.permission.SYSTEM_ALERT_WINDOW

Receivers

.ReceiverBoot

android.intent.action.BOOT_COMPLETED

.ReceiverUnlock

android.intent.action.USER_PRESENT

com.kuguo.ad.MainReceiver

android.intent.action.PACKAGE_ADDED
android.net.conn.CONNECTIVITY_CHANGE

net.miidi.ad.push.AdPushReceiver

android.net.conn.CONNECTIVITY_CHANGE

Services

.ServiceGesture

com.action.say.zzm.serviceGesture

com.nd.dianjin.appdownload.DownloadService

say.zzm.time

Android Permissions

ba231e3c48070c9ca28463b58cacc2de_JaffaCakes118

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_TASKS

android.permission.CHANGE_WIFI_STATE

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

android.permission.WAKE_LOCK

android.permission.SYSTEM_ALERT_WINDOW

android.permission.WRITE_SMS

android.permission.READ_SMS

com.android.vending.CHECK_LICENSE

android.permission.DEVICE_POWER

android.permission.DISABLE_KEYGUARD

android.permission.GET_ACCOUNTS

android.permission.MODIFY_PHONE_STATE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.PERSISTENT_ACTIVITY

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.RECEIVE_SMS

android.permission.READ_CONTACTS

com.android.launcher.permission.READ_SETTINGS

android.permission.VIBRATE

android.permission.WRITE_CONTACTS

com.android.launcher.permission.WRITE_SETTINGS

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.RESTART_PACKAGES

android.permission.FORCE_STOP_PACKAGES

android.permission.REORDER_TASKS

android.permission.SYSTEM_ALERT_WINDOW

Sharing

General

Malware Config

Signatures

Files

say.zzm.time

.Time_Setting

Activities

.Time_Setting

.SaySetting

Permissions

Receivers

.ReceiverBoot

.ReceiverUnlock

com.kuguo.ad.MainReceiver

net.miidi.ad.push.AdPushReceiver

Services

.ServiceGesture

com.nd.dianjin.appdownload.DownloadService

Android Permissions

ba231e3c48070c9ca28463b58cacc2de_JaffaCakes118