c285c4e206b0e541d1ff6314e5ad44ad_JaffaCakes118

General

Target

c285c4e206b0e541d1ff6314e5ad44ad_JaffaCakes118
Size

23.2MB
MD5

c285c4e206b0e541d1ff6314e5ad44ad
SHA1

7decc51685d62e6b53d4fa2436ef05c73d646428
SHA256

f8d81d7dcfefd6d3885b4c9165b62e8c6c6bb0f263ec5d6cfc4a6ed995cc5111
SHA512

9b31492e7dea948b2e7f38ecd0bd7b9711fb56aa0d93e4d0b454c639da9c1796539e92af8fa1f04a5426d076707289ed3b90729ac52ae78db47d7159f3976c08
SSDEEP

393216:hp03MxBAnM7703yTXW9DEy6eZCKzIFLNxswsyiLtnr21sjWnBSF+PrmVRHhIvSJz:hp4MxBCya9DE9eMw0x96gdnkF6OSSJl9

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Required to be able to access the camera device.	android.permission.CAMERA

Files

c285c4e206b0e541d1ff6314e5ad44ad_JaffaCakes118
.apk android arch:arm

com.meitu.facefactory

com.meitu.facefactory.HomeActivity

Activities

com.meitu.facefactory.HomeActivity

android.intent.action.MAIN

com.meitu.facefactory.wxapi.WXEntryActivity

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.meitu.facefactory.ad.AdWebviewActivity

android.intent.action.MAIN

com.meitu.facefactory.koudai.LauncherActivity

android.intent.action.MAIN

com.meitu.facefactory.sogouapi.SogouEntryActivity

com.sogou.inputmethod.platform

Permissions

android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.CAMERA
android.permission.WAKE_LOCK
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.VIBRATE
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS

Receivers

com.meitu.facefactory.wxapi.AppRegister

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP

com.meitu.facefactory.koudai.InstallBroadcast

android.intent.action.PACKAGE_ADDED
com.geili.koudai.install

Services

com.meitu.util.net.DownloadService

com.meitu.util.net.DownloadService
koudaigouwu_1273x.apk
.apk android arch:arm

com.geili.koudai

com.geili.koudai.activity.SplashActivity

Activities

com.geili.koudai.activity.SplashActivity

android.intent.action.MAIN

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.geili.koudai.activity.WebJumpActivity

android.intent.action.VIEW

Permissions

android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.VIBRATE
android.permission.RECEIVE_USER_PRESENT
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.CAMERA
android.permission.FLASHLIGHT
com.geili.koudai.permission.MIPUSH_RECEIVE

Receivers

com.geili.koudai.push.PushMsgReceiver

android.intent.action.BOOT_COMPLETED

com.geili.koudai.net.NetworkChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.geili.koudai.activity.DebugModeReceiver

android.provider.Telephony.SECRET_CODE

com.geili.koudai.activity.UserPresentReceiver

android.intent.action.USER_PRESENT
android.net.conn.CONNECTIVITY_CHANGE
com.geili.koudai.UserPresent

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.NetworkStatusReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

Services

Android Permissions

c285c4e206b0e541d1ff6314e5ad44ad_JaffaCakes118

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.CAMERA

android.permission.WAKE_LOCK

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.VIBRATE

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.meitu.facefactory

com.meitu.facefactory.HomeActivity

Activities

com.meitu.facefactory.HomeActivity

com.meitu.facefactory.wxapi.WXEntryActivity

com.tencent.tauth.AuthActivity

com.meitu.facefactory.ad.AdWebviewActivity

com.meitu.facefactory.koudai.LauncherActivity

com.meitu.facefactory.sogouapi.SogouEntryActivity

Permissions

Receivers

com.meitu.facefactory.wxapi.AppRegister

com.meitu.facefactory.koudai.InstallBroadcast

Services

com.meitu.util.net.DownloadService

com.geili.koudai

com.geili.koudai.activity.SplashActivity

Activities

com.geili.koudai.activity.SplashActivity

com.tencent.tauth.TAuthView

com.geili.koudai.activity.WebJumpActivity

Permissions

Receivers

com.geili.koudai.push.PushMsgReceiver

com.geili.koudai.net.NetworkChangeReceiver

com.geili.koudai.activity.DebugModeReceiver

com.geili.koudai.activity.UserPresentReceiver

com.xiaomi.mipush.sdk.PushServiceReceiver

com.xiaomi.push.service.receivers.NetworkStatusReceiver

com.xiaomi.push.service.receivers.PingReceiver

Services

Android Permissions

c285c4e206b0e541d1ff6314e5ad44ad_JaffaCakes118