d1b241b88cf84057d31c162f62677869_JaffaCakes118

General

Target

d1b241b88cf84057d31c162f62677869_JaffaCakes118
Size

20.7MB
MD5

d1b241b88cf84057d31c162f62677869
SHA1

1d7925e2cc69f8415430faf3d01ec7cf45a7c1a9
SHA256

86330a58fc9fade044c03dbaeb79682399da240e91f7ac17e7d956946174653a
SHA512

24484454e7b227ae1511dfd57522e42a9e8d85702b53017514b1e876e2b2381d82a23760a27c5f40c24cd9f37c37ed31ba946db61770aca6073332bf0ea13e62
SSDEEP

393216:36ItuhpKudgfKG5pG9QMuLubARUegv5HuVcCTBQoaXbgVR8h31o+xnUL1lMkLCmg:36It6AudAKGTG9J/Ig5O931H8d1o+xUK

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

d1b241b88cf84057d31c162f62677869_JaffaCakes118
.apk android arch:arm

com.nssoft.vplayer

com.nssoft.vplayer.SplashActivity

Activities

com.nssoft.vplayer.SplashActivity

android.intent.action.MAIN

com.nssoft.vplayer.PlayerMainActivity

android.intent.action.CREATE_SHORTCUT

com.nssoft.vplayer.PlayerActivity

android.intent.action.VIEW

com.ninexiu.au.ui.SplashUI

android.intent.action.MAIN

com.ninexiu.au.ui.LiveRoomUI

com.ninexiu.au.liveroomactivity

com.ninexiu.au.ui.AdActivity

com.ninexiu.sixninexiu.adactivity

com.tencent.tauth.TAuthView

android.intent.action.VIEW

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.unionpay.uppay.PayActivity

android.intent.action.Run

com.unionpay.uppay.PayActivityEx

android.intent.action.Run
android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
android.permission.WAKE_LOCK
android.permission.READ_PHONE_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.VIBRATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_TASKS
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
android.permission.RESTART_PACKAGES
android.permission.GET_ACCOUNTS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Receivers

com.umeng.message.SystemReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED

com.umeng.message.MessageReceiver

org.agoo.android.intent.action.RECEIVE

com.umeng.message.ElectionReceiver

org.agoo.android.intent.action.ELECTION_RESULT_V4

com.umeng.message.RegistrationReceiver

com.nssoft.vplayer.intent.action.COMMAND

com.umeng.message.UmengMessageBootReceiver

android.intent.action.BOOT_COMPLETED

com.umeng.message.RegistrationReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED

Services

com.umeng.message.UmengService

com.nssoft.vplayer.intent.action.START
com.nssoft.vplayer.intent.action.COCKROACH
org.agoo.android.intent.action.PING_V4

com.umeng.message.UmengMessageIntentReceiverService

org.android.agoo.client.MessageReceiverService
org.android.agoo.client.ElectionReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.umeng.messge.registercallback.action
com.umeng.message.unregistercallback.action
com.umeng.message.message.handler.action
com.umeng.message.autoupdate.handler.action

com.water.mgr.DownloadFromNotifyService

com.water.mgr.DownloadFromNotifyService

com.nanshan.simpletorch.notifycation.NotifycationService

com.nanshan.simpletorch.notifycation.NotifycationService
alipay_msp.apk
.apk android arch:arm

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

android.intent.action.MAIN

.activity.Alerter

android.intent.action.MAIN

.activity.Welcome

android.intent.action.MAIN

.activity.Updater

android.intent.action.MAIN

.activity.PageForBrowser

android.intent.action.VIEW

.activity.CertBiz

android.intent.action.MAIN

.activity.MessageActivity

android.intent.action.MAIN

Permissions

android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.SEND_SMS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.VIBRATE
android.permission.CHANGE_NETWORK_STATE
com.alipay.notify.permission.PUSHSERVICE
com.alipay.android.permission.BOOT_COMPLETED
com.alipay.android.app.gphone.SHARE

Receivers

com.alipay.notify.BroadcastActionReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED

Services

.AlixService

com.alipay.android.app.IAlixPay
com.alipay.android.app.IAliPay

com.alipay.notify.push.NotificationService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

com.alipay.notify.poll.config.ConfigService

Android Permissions

d1b241b88cf84057d31c162f62677869_JaffaCakes118

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_TASKS

android.permission.BROADCAST_PACKAGE_ADDED

android.permission.BROADCAST_PACKAGE_CHANGED

android.permission.BROADCAST_PACKAGE_INSTALL

android.permission.BROADCAST_PACKAGE_REPLACED

android.permission.RESTART_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

Sharing

General

Malware Config

Signatures

Files

com.nssoft.vplayer

com.nssoft.vplayer.SplashActivity

Activities

com.nssoft.vplayer.SplashActivity

com.nssoft.vplayer.PlayerMainActivity

com.nssoft.vplayer.PlayerActivity

com.ninexiu.au.ui.SplashUI

com.ninexiu.au.ui.LiveRoomUI

com.ninexiu.au.ui.AdActivity

com.tencent.tauth.TAuthView

com.tencent.tauth.AuthActivity

com.unionpay.uppay.PayActivity

com.unionpay.uppay.PayActivityEx

Permissions

Receivers

com.umeng.message.SystemReceiver

com.umeng.message.MessageReceiver

com.umeng.message.ElectionReceiver

com.umeng.message.RegistrationReceiver

com.umeng.message.UmengMessageBootReceiver

com.umeng.message.RegistrationReceiver

Services

com.umeng.message.UmengService

com.umeng.message.UmengMessageIntentReceiverService

com.umeng.message.UmengMessageCallbackHandlerService

com.water.mgr.DownloadFromNotifyService

com.nanshan.simpletorch.notifycation.NotifycationService

com.alipay.android.app

.activity.Cashier

Activities

.activity.Cashier

.activity.Alerter

.activity.Welcome

.activity.Updater

.activity.PageForBrowser

.activity.CertBiz

.activity.MessageActivity

Permissions

Receivers

com.alipay.notify.BroadcastActionReceiver

Services

.AlixService

com.alipay.notify.push.NotificationService

com.alipay.notify.poll.config.ConfigService

Android Permissions

d1b241b88cf84057d31c162f62677869_JaffaCakes118